$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: o7oacXSr939fRmOqdmbVAgXC08KBBIbg0/QjFefVm9M= Subject key identifier: 39:87:3D:4D:2B:5F:C7:5F:6B:DB:A5:D3:DE:CA:B3:4B:A7:96:57:66 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 022C Signing time: Mon 03 Nov 2025 01:52:21 +0000 Manifest this update: Mon 03 Nov 2025 01:52:21 +0000 Manifest next update: Mon 10 Nov 2025 01:52:21 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: MA5ZIcGbGfjlQoNYOFxZiMeautZnY6joXEotZ2TaoKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Nov 3 01:52:21 2025 GMT Not After : Nov 10 01:52:21 2025 GMT Subject: CN=69080ad5-b710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:db:68:03:14:a6:04:1e:ec:73:0a:20:33: a2:e8:4a:b7:35:a5:ac:f0:b3:db:5c:ae:bb:25:33: 87:9e:a8:72:12:3f:9a:75:c5:12:20:a3:dd:43:3b: 38:df:30:b3:95:22:b9:2d:8f:ee:d5:f7:ee:5b:36: 70:27:46:c8:83:61:62:4e:c2:da:33:83:e6:a4:ef: a9:93:e6:8e:0e:52:9e:39:f5:d8:d8:da:87:52:48: 94:a8:e6:c3:f8:b7:b9:f3:3d:1c:6b:55:14:3c:4a: 1d:c4:8a:c3:e8:13:c3:3b:69:27:de:52:ff:d4:d1: 2b:47:d7:45:0b:da:0e:b4:c2:92:e2:8c:bd:a9:4b: 8c:c8:ed:95:69:0c:1d:27:12:ab:23:c1:9a:72:0b: 36:dd:bc:1a:9d:6f:1b:4d:59:3e:f3:52:fd:e3:53: 96:c8:d1:94:cb:4c:ff:a0:a4:55:85:ae:5a:b2:06: 77:f9:43:dd:ec:1c:c9:32:bf:b0:29:b4:e1:1d:8f: 61:7e:37:5f:98:ba:0d:5e:92:c7:0b:08:9a:e8:d5: 65:ed:b5:26:6e:8f:56:f3:49:b0:59:79:0c:bf:15: 53:4d:0d:44:94:0a:55:e4:6d:21:7f:1b:03:b8:24: d0:3d:3b:2b:4a:cd:0b:b4:d1:b3:3e:a5:9f:23:4c: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:87:3D:4D:2B:5F:C7:5F:6B:DB:A5:D3:DE:CA:B3:4B:A7:96:57:66 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:13:62:18:5e:b3:fa:40:5d:2a:2d:04:4f:26:49:08:ac:69: d0:ca:dd:fb:8c:21:91:6a:d4:9b:b3:85:4e:14:42:f8:11:dc: c9:99:92:36:37:9d:32:0c:61:37:35:63:47:47:7f:16:a4:d1: ab:22:e4:b3:ab:f1:8a:7c:4d:8c:fd:0c:36:cc:25:d5:4a:80: f9:6f:62:90:43:8d:6a:d5:6f:ff:07:19:ca:36:fb:f6:11:4a: ff:3d:16:5b:81:28:61:cf:90:a0:c5:4f:4e:97:49:cd:4e:d2: 00:7e:02:10:cf:96:15:3a:6b:bc:a6:52:c3:19:1a:f5:a5:0e: 87:5e:b4:aa:2a:56:ff:db:be:59:f1:20:0e:25:04:ae:40:a4: e3:7d:3e:c3:c4:fb:00:b2:91:4a:db:7f:2f:80:86:07:91:c4: 8b:02:86:bf:1d:5b:b7:c3:75:8b:c9:c7:d8:4c:9c:a1:b2:d2: be:79:1d:cc:ea:f6:a3:e2:3f:83:39:3f:d9:42:ec:09:01:97: d1:c4:1d:c3:00:65:e0:dd:4d:e5:9b:14:10:13:17:a1:2c:c6: b7:7c:fa:3c:17:4d:c1:68:f3:43:c4:d1:ae:78:aa:87:45:08: 3c:e9:23:57:67:c1:7f:e2:35:bb:9e:44:12:d4:87:15:a7:81: c4:39:d9:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUxMTAzMDE1MjIxWhcNMjUxMTEwMDE1MjIxWjAYMRYwFAYD VQQDEw02OTA4MGFkNS1iNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgXbaAMUpgQe7HMKIDOi6Eq3NaWs8LPbXK67JTOHnqhyEj+adcUSIKPdQzs4 3zCzlSK5LY/u1ffuWzZwJ0bIg2FiTsLaM4PmpO+pk+aODlKeOfXY2NqHUkiUqObD +Le58z0ca1UUPEodxIrD6BPDO2kn3lL/1NErR9dFC9oOtMKS4oy9qUuMyO2VaQwd JxKrI8Gacgs23bwanW8bTVk+81L941OWyNGUy0z/oKRVha5asgZ3+UPd7BzJMr+w KbThHY9hfjdfmLoNXpLHCwia6NVl7bUmbo9W80mwWXkMvxVTTQ1ElApV5G0hfxsD uCTQPTsrSs0LtNGzPqWfI0zGfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmHPU0r X8dfa9ul097Ks0unlldmMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfE2IYXrP6QF0qLQRPJkkIrGnQyt37jCGRatSbs4VOFEL4EdzJmZI2 N50yDGE3NWNHR38WpNGrIuSzq/GKfE2M/Qw2zCXVSoD5b2KQQ41q1W//BxnKNvv2 EUr/PRZbgShhz5CgxU9Ol0nNTtIAfgIQz5YVOmu8plLDGRr1pQ6HXrSqKlb/275Z 8SAOJQSuQKTjfT7DxPsAspFK238vgIYHkcSLAoa/HVu3w3WLycfYTJyhstK+eR3M 6vaj4j+DOT/ZQuwJAZfRxB3DAGXg3U3lmxQQExehLMa3fPo8F03BaPNDxNGueKqH RQg86SNXZ8F/4jW7nkQS1IcVp4HEOdkT -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:47 2025 by rpki-client