$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: 6sLSFjcrIyu+zYvM57+UYn2169cpu1B+0+zLXlhs+kI= Subject key identifier: 32:2C:F2:5D:1A:1D:63:95:1F:A4:FD:1A:94:D8:9E:2A:D0:AD:19:4B Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34E1 Signing time: Sun 26 Oct 2025 14:23:12 +0000 Manifest this update: Sun 26 Oct 2025 14:23:11 +0000 Manifest next update: Sun 02 Nov 2025 14:23:11 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: tRGLzUaqHGLsnTESO74HiIRl1G33c2e5YBTZl2uO0hE=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 14:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Oct 26 14:23:11 2025 GMT Not After : Nov 2 14:23:11 2025 GMT Subject: CN=68fe2ecf-6e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:26:20:a2:fd:e2:b1:a1:1e:0a:87:42:83: 90:fe:cd:0a:cf:f6:3c:e8:3a:d2:84:76:7e:6e:8b: e3:c1:f0:cf:a6:88:08:bc:76:70:e8:09:0f:03:87: 5a:ad:01:df:92:0c:e9:6a:36:e4:93:4d:53:e2:25: d3:f2:b1:2f:3b:1d:0f:39:72:49:fd:f6:13:a4:75: 62:a7:6f:db:ac:a9:2e:47:19:7f:97:3e:00:22:83: 49:d0:73:de:46:2c:04:b6:66:91:2c:24:e7:a9:cc: c1:c2:ec:26:5c:cb:cc:09:64:50:4e:56:ba:da:41: a1:2d:8f:6f:3d:17:3e:1e:26:18:59:2b:ae:fb:a6: 61:d6:00:02:ba:73:d1:ea:a2:5d:0c:c4:59:87:ce: 3d:d7:cb:c8:04:d1:9a:55:6c:48:f0:7a:d6:1d:1a: b5:3e:d8:a1:b6:99:45:cf:6e:8b:24:16:0f:7d:a2: 78:bc:58:ee:e2:04:d6:e2:af:39:30:54:e3:86:72: 8a:58:e5:12:c1:81:f1:b8:36:00:53:4c:f1:69:4b: 6d:5b:f5:e2:be:99:f8:b7:7e:8d:b8:3e:90:e8:2c: b1:0c:af:6f:5b:83:fd:3f:de:89:33:ce:6c:ca:27: 84:f5:81:43:c7:11:97:d5:da:95:96:32:73:bc:af: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2C:F2:5D:1A:1D:63:95:1F:A4:FD:1A:94:D8:9E:2A:D0:AD:19:4B X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:72:fc:c4:25:c2:c5:71:6d:4a:23:fc:cb:74:48:fe:63:93: bf:88:a8:31:d1:99:02:2e:35:31:8d:0f:8f:bf:c5:ba:dd:13: d8:a2:fb:a8:14:16:17:4a:5a:5a:60:b4:a4:f8:3c:7a:66:bf: 11:4e:74:28:f7:74:fe:63:22:ab:76:13:ed:33:d8:5d:ed:c9: 51:b7:6e:16:ba:97:32:e0:29:26:c8:d1:7f:4f:3c:91:d4:69: 74:24:07:51:be:d7:35:57:bc:66:77:f0:56:76:35:8c:6a:a8: be:9e:0c:ee:c0:9d:bf:38:b0:7a:db:dc:42:62:57:b0:84:9a: cb:af:8d:4b:ae:d3:54:01:50:60:9a:8a:06:a4:49:e5:75:fa: 18:7b:8f:cb:71:6e:0f:b9:74:4e:90:27:fc:18:f3:65:5d:d2: 26:c3:25:b9:98:5d:46:34:ad:a1:c0:26:83:01:ea:08:48:7b: 6d:67:52:ac:36:02:ab:39:30:ba:1b:80:78:32:b7:61:b6:61: b4:4b:e9:4e:4c:4a:f6:16:34:7f:bc:da:5c:2b:2b:a0:07:04: a5:f5:07:b7:f3:ae:50:fc:bc:11:80:8d:e0:51:29:9d:37:f9: 12:b0:59:5f:ce:cf:99:3d:be:ce:8b:df:dd:9d:81:33:e9:a1: 72:ad:9f:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUxMDI2MTQyMzExWhcNMjUxMTAyMTQyMzExWjAYMRYwFAYD VQQDEw02OGZlMmVjZi02ZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUYmIKL94rGhHgqHQoOQ/s0Kz/Y86DrShHZ+bovjwfDPpogIvHZw6AkPA4da rQHfkgzpajbkk01T4iXT8rEvOx0POXJJ/fYTpHVip2/brKkuRxl/lz4AIoNJ0HPe RiwEtmaRLCTnqczBwuwmXMvMCWRQTla62kGhLY9vPRc+HiYYWSuu+6Zh1gACunPR 6qJdDMRZh84918vIBNGaVWxI8HrWHRq1PtihtplFz26LJBYPfaJ4vFju4gTW4q85 MFTjhnKKWOUSwYHxuDYAU0zxaUttW/Xivpn4t36NuD6Q6CyxDK9vW4P9P96JM85s yieE9YFDxxGX1dqVljJzvK/D2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIs8l0a HWOVH6T9GpTYnirQrRlLMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3cvzEJcLFcW1KI/zLdEj+Y5O/iKgx0ZkCLjUxjQ+Pv8W63RPYovuo FBYXSlpaYLSk+Dx6Zr8RTnQo93T+YyKrdhPtM9hd7clRt24Wupcy4CkmyNF/TzyR 1Gl0JAdRvtc1V7xmd/BWdjWMaqi+ngzuwJ2/OLB629xCYlewhJrLr41LrtNUAVBg mooGpEnldfoYe4/LcW4PuXROkCf8GPNlXdImwyW5mF1GNK2hwCaDAeoISHttZ1Ks NgKrOTC6G4B4MrdhtmG0S+lOTEr2FjR/vNpcKyugBwSl9Qe3865Q/LwRgI3gUSmd N/kSsFlfzs+ZPb7Oi9/dnYEz6aFyrZ91 -----END CERTIFICATE-----Generated at Tue Oct 28 14:09:56 2025 by rpki-client