$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: xHNEU1Q5jSKe8k1B8S+1ErSRvo+yt3f74CJRbBmZhow= Subject key identifier: 41:0E:77:BD:7F:93:0D:7E:BA:61:D8:50:44:A7:13:27:3F:02:84:86 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 96 Signing time: Mon 03 Nov 2025 06:26:13 +0000 Manifest this update: Mon 03 Nov 2025 06:26:12 +0000 Manifest next update: Mon 10 Nov 2025 06:26:12 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: NTM2jcz2WkTv6kBcdmsXDbcdlQVru95frF15Ti3UUl4=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Nov 3 06:26:12 2025 GMT Not After : Nov 10 06:26:12 2025 GMT Subject: CN=69084b04-6472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:08:78:ca:7d:81:2c:77:27:8e:78:58:78: 5c:a7:fc:8c:2a:7e:4b:8a:39:4e:0c:9f:65:23:37: 1e:f5:bb:c4:50:08:ca:31:55:1a:d9:31:50:df:ce: 2b:0c:fd:e0:d5:71:05:17:8a:82:05:42:1d:f0:67: 66:a2:c9:a0:96:89:c8:e1:89:ec:23:01:22:c9:3c: 7c:9e:32:53:ed:2c:f0:2d:9f:9b:95:f9:90:1e:e3: ad:2c:3c:48:12:25:55:61:d9:36:29:63:bc:1b:a9: 61:66:bc:70:ff:5e:7f:57:cf:73:09:31:cc:31:78: b3:23:61:66:28:8a:58:48:18:d2:12:b8:f9:b2:0d: 59:2e:9d:1b:cb:a9:45:fe:c4:19:69:4c:7c:19:73: 02:69:3f:0c:04:75:e1:72:36:b0:08:87:e5:36:96: 91:f4:f4:04:91:55:be:a1:ee:90:7b:15:23:99:03: d6:c7:e3:55:4d:a3:40:53:98:bf:07:d1:89:51:08: b8:6a:fc:bf:bb:c9:0c:a8:3b:c7:07:23:7d:1f:73: 25:9c:c7:f8:f0:e8:87:71:d0:47:e6:f1:3f:8d:51: 85:f9:9b:73:80:96:6b:47:7f:65:59:f6:68:8e:96: 01:e2:92:0f:4d:82:4a:31:0f:22:c5:62:56:9d:d8: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:77:BD:7F:93:0D:7E:BA:61:D8:50:44:A7:13:27:3F:02:84:86 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:94:25:4c:d1:ae:71:35:ce:f9:eb:47:b6:da:3e:bf:07:4a: 11:5c:db:1c:1e:c9:59:e1:f9:ae:00:94:d6:f0:e2:08:a9:e5: 26:f1:51:a9:b8:56:a8:47:fd:01:53:b2:00:8a:0b:d3:d0:b6: 17:80:6c:ec:8a:73:c7:25:18:22:16:0b:41:12:70:9f:97:58: a6:90:ff:13:17:32:bc:b0:f4:88:b8:56:b0:47:1b:6a:f2:38: 4e:7e:19:91:4e:86:8a:b5:e1:98:a7:30:02:f4:f4:3d:42:6d: e2:c2:55:20:70:93:5d:e3:11:ee:37:f3:e8:07:be:75:cb:0c: 25:b4:52:83:df:77:5f:da:08:21:d6:cf:d0:db:96:b7:e9:c9: 91:19:80:55:2e:93:38:e2:e8:f1:37:54:74:78:32:21:be:fc: a3:61:84:67:f1:80:64:b8:42:88:05:36:4f:9c:5d:67:3b:74: e7:ab:b8:4b:0a:82:85:d3:1c:26:c4:0e:a6:1a:a6:6c:3f:c5: 10:56:8e:08:92:7c:4a:39:2f:42:16:fd:6a:5e:5c:67:33:96: 56:de:0a:0f:2b:54:0e:00:59:bb:d1:01:76:1e:66:49:ec:67: 9f:d6:46:a6:ae:2e:6b:6b:d8:0c:b3:ce:05:a4:fe:85:cc:8e: 7e:4a:da:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjUxMTAzMDYyNjEyWhcNMjUxMTEwMDYyNjEyWjAYMRYwFAYD VQQDEw02OTA4NGIwNC02NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsycIeMp9gSx3J454WHhcp/yMKn5LijlODJ9lIzce9bvEUAjKMVUa2TFQ384r DP3g1XEFF4qCBUId8GdmosmglonI4YnsIwEiyTx8njJT7SzwLZ+blfmQHuOtLDxI EiVVYdk2KWO8G6lhZrxw/15/V89zCTHMMXizI2FmKIpYSBjSErj5sg1ZLp0by6lF /sQZaUx8GXMCaT8MBHXhcjawCIflNpaR9PQEkVW+oe6QexUjmQPWx+NVTaNAU5i/ B9GJUQi4avy/u8kMqDvHByN9H3MlnMf48OiHcdBH5vE/jVGF+ZtzgJZrR39lWfZo jpYB4pIPTYJKMQ8ixWJWndjsrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEOd71/ kw1+umHYUESnEyc/AoSGMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhlCVM0a5xNc7560e22j6/B0oRXNscHslZ4fmuAJTW8OIIqeUm8VGp uFaoR/0BU7IAigvT0LYXgGzsinPHJRgiFgtBEnCfl1imkP8TFzK8sPSIuFawRxtq 8jhOfhmRToaKteGYpzAC9PQ9Qm3iwlUgcJNd4xHuN/PoB751ywwltFKD33df2ggh 1s/Q25a36cmRGYBVLpM44ujxN1R0eDIhvvyjYYRn8YBkuEKIBTZPnF1nO3Tnq7hL CoKF0xwmxA6mGqZsP8UQVo4IknxKOS9CFv1qXlxnM5ZW3goPK1QOAFm70QF2HmZJ 7Gef1kamri5ra9gMs84FpP6FzI5+Stoq -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:18 2025 by rpki-client