$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: UJzsRnjE08dTqYlJUcykNd+FrhxGAAB8GfUqcqzLcKM= Subject key identifier: 1C:F0:17:0A:FF:EA:61:BA:8D:2C:CA:51:9B:5B:1D:A9:78:91:C9:4F Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0CB0 Signing time: Tue 04 Nov 2025 18:18:58 +0000 Manifest this update: Tue 04 Nov 2025 18:18:58 +0000 Manifest next update: Tue 11 Nov 2025 18:18:58 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: C+zaXRJSMfDUPs/4AMGkbNFAyPNsA2ctG81UOjUgs3s=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Nov 4 18:18:58 2025 GMT Not After : Nov 11 18:18:58 2025 GMT Subject: CN=690a4392-e02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:90:6d:16:92:49:f4:d5:cf:64:cb:2f:a2: 4f:2b:82:87:c5:2c:e5:24:62:3a:86:5b:8b:83:c4: bb:d4:9b:40:10:90:de:7c:e7:25:bc:0c:8c:13:58: 40:f7:1a:1f:cb:0a:84:22:3e:d3:7b:e3:b1:6a:e6: 3c:14:34:a8:b8:4f:ca:9c:f9:36:36:e7:41:de:25: b5:a5:ce:c9:50:3e:bb:29:0e:ff:27:8b:6b:78:5d: 81:95:d9:35:cb:9e:11:17:cf:01:fe:cc:ba:72:b4: 48:c3:54:93:a9:ba:84:7e:af:da:43:e3:f1:70:98: 9f:a6:41:ba:fd:52:61:4e:82:06:f0:c1:66:cb:ef: e4:3d:78:4b:fa:08:a2:7f:1e:00:77:a6:55:8e:01: a6:10:18:e2:0e:ef:87:d4:a1:20:2c:28:67:b3:ab: 6b:e0:94:ee:be:2b:16:1d:f8:02:3a:72:97:61:00: 3b:c0:19:f7:0f:c7:9a:7f:6b:43:ff:e3:d9:ae:bb: 1c:32:52:7f:32:f6:70:47:30:96:5f:92:d7:14:b5: a3:76:5d:a2:f2:ad:4f:6b:02:44:3a:94:fc:b1:fb: 71:da:fb:57:c0:4b:88:80:c2:18:ec:07:dc:5f:34: 0d:c4:31:82:ae:29:2d:1d:93:d7:69:e7:3b:42:a4: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F0:17:0A:FF:EA:61:BA:8D:2C:CA:51:9B:5B:1D:A9:78:91:C9:4F X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3f:ed:41:77:08:c3:1a:0c:25:5c:2a:c1:0e:de:6f:60:68: b0:2b:c4:40:46:ff:83:65:5a:c8:ee:ed:c8:a4:7a:06:88:69: f8:84:12:75:60:3b:22:c5:6a:b8:c9:c9:0b:58:14:1d:a8:55: 57:ef:76:30:65:9e:b4:f1:17:c7:8e:08:e3:66:13:95:c8:21: 53:e3:ef:38:a4:db:fd:64:d3:da:ef:22:cb:28:05:87:f0:dd: b8:a3:12:e8:57:d5:35:15:24:01:54:b3:23:8c:88:91:60:b1: f4:22:c2:73:c7:0c:38:9d:d2:9d:79:4e:6f:cc:5d:5f:03:a8: d5:c4:ac:c8:e3:e5:cb:38:ac:8a:4b:0d:55:cc:38:ce:e2:7f: 71:d6:f5:f0:5e:9e:2e:9a:97:08:fa:ae:8c:dc:e6:79:58:5f: 51:7f:68:47:d8:99:ef:70:98:57:c1:36:10:8a:b7:0c:cd:4c: 08:0e:a6:ca:ca:1c:82:30:a9:69:9e:a1:41:17:ba:d4:6b:b4: 3c:77:96:fc:52:8b:b8:84:2b:f1:01:06:16:a2:c7:1e:06:19: 29:67:6f:e7:1e:23:c4:1a:21:bd:91:3c:f7:c2:ab:22:f9:80: 06:32:a8:f9:b6:8c:ef:29:f0:b9:8b:fd:b6:25:12:50:9e:42: 21:22:8e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUxMTA0MTgxODU4WhcNMjUxMTExMTgxODU4WjAYMRYwFAYD VQQDEw02OTBhNDM5Mi1lMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKCQbRaSSfTVz2TLL6JPK4KHxSzlJGI6hluLg8S71JtAEJDefOclvAyME1hA 9xofywqEIj7Te+OxauY8FDSouE/KnPk2NudB3iW1pc7JUD67KQ7/J4treF2Bldk1 y54RF88B/sy6crRIw1STqbqEfq/aQ+PxcJifpkG6/VJhToIG8MFmy+/kPXhL+gii fx4Ad6ZVjgGmEBjiDu+H1KEgLChns6tr4JTuvisWHfgCOnKXYQA7wBn3D8eaf2tD /+PZrrscMlJ/MvZwRzCWX5LXFLWjdl2i8q1PawJEOpT8sftx2vtXwEuIgMIY7Afc XzQNxDGCriktHZPXaec7QqSldQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzwFwr/ 6mG6jSzKUZtbHal4kclPMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLP+1BdwjDGgwlXCrBDt5vYGiwK8RARv+DZVrI7u3IpHoGiGn4hBJ1 YDsixWq4yckLWBQdqFVX73YwZZ608RfHjgjjZhOVyCFT4+84pNv9ZNPa7yLLKAWH 8N24oxLoV9U1FSQBVLMjjIiRYLH0IsJzxww4ndKdeU5vzF1fA6jVxKzI4+XLOKyK Sw1VzDjO4n9x1vXwXp4umpcI+q6M3OZ5WF9Rf2hH2JnvcJhXwTYQircMzUwIDqbK yhyCMKlpnqFBF7rUa7Q8d5b8Uou4hCvxAQYWosceBhkpZ2/nHiPEGiG9kTz3wqsi +YAGMqj5tozvKfC5i/22JRJQnkIhIo63 -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:58 2025 by rpki-client