$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: ve4Jp4lVIqsGqPkt2GPq4SuwaBcCG0vLgo/M0AZ7Xp8= Subject key identifier: 21:D2:EE:CA:A7:DE:2F:E4:5A:37:01:D3:9B:6B:CC:A5:67:71:0D:D7 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1CF4 Signing time: Sun 02 Nov 2025 16:09:52 +0000 Manifest this update: Sun 02 Nov 2025 16:09:51 +0000 Manifest next update: Sun 09 Nov 2025 16:09:51 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: unKp5nozVguIOeGei5VdauNie3BJz8RRVjdIGTD3xV0=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7444 (0x1d14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Nov 2 16:09:51 2025 GMT Not After : Nov 9 16:09:51 2025 GMT Subject: CN=6907824f-03f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:f4:ab:a8:14:3f:0f:54:00:74:75:de:9e: f8:33:bf:2a:97:cb:2d:82:11:09:b7:b7:34:08:92: c7:ad:97:b3:9b:0c:c1:f0:20:cc:96:b0:65:95:92: cf:25:c9:1c:e5:38:b2:01:e8:7f:e9:60:75:c2:52: 4b:e4:cb:f1:9a:31:3a:8e:e4:b9:ed:d3:07:9f:a6: 16:9b:b9:0b:46:37:bb:da:a7:7e:b8:df:d3:f0:12: f5:de:ee:b5:c9:83:74:bc:9e:96:4e:35:41:c9:10: 68:de:c6:9a:67:b0:68:f3:9a:f8:de:21:78:4e:6b: 4c:be:2f:f6:13:f9:1f:7b:15:36:67:12:51:97:6c: 50:8e:30:61:fe:73:f0:84:09:a1:2c:f2:53:1d:b5: 5c:34:bb:75:ca:ed:b4:69:83:59:8b:ec:9a:11:4f: 65:ee:11:76:ab:94:65:3d:87:f4:ec:9c:b7:96:7a: 3d:8c:21:54:d0:0f:68:8c:62:b0:d8:ef:0d:57:a8: 91:f3:40:b3:74:9f:e7:21:29:01:07:99:b8:b3:64: 9e:f3:b7:43:b3:34:c5:f5:2a:7e:18:b4:ca:35:b5: 80:f8:73:ce:b8:93:91:92:9a:48:c3:08:bc:6c:14: eb:3c:47:ce:b0:f3:ed:19:34:da:c4:b8:df:60:a5: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:EE:CA:A7:DE:2F:E4:5A:37:01:D3:9B:6B:CC:A5:67:71:0D:D7 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7a:61:33:eb:b6:80:8f:c8:b7:11:26:59:b5:02:52:64:df: 80:04:ad:d0:cf:06:86:d0:74:91:90:37:4f:97:b0:6b:44:84: ab:49:60:61:0c:d0:93:9d:ff:1d:cc:5c:d1:6f:31:56:d6:37: 7e:3f:c3:f4:76:fc:11:1d:13:37:7c:a3:51:54:e6:b4:15:d5: 1c:02:9e:5d:0e:73:cc:db:de:78:2f:66:9c:44:3a:1a:60:a3: 28:86:d0:ce:9a:97:4d:b9:ee:fe:d3:2b:03:2e:19:67:4e:31: 44:8c:1e:54:04:23:6c:23:13:d8:92:f1:84:6c:11:9e:2d:5d: a2:78:c7:b7:a6:3f:ec:b7:13:24:56:24:13:4a:a4:6a:b1:81: 7e:4f:27:d5:06:a2:4f:65:dd:ed:50:03:e8:36:fa:66:1a:66: d7:f7:27:f0:6a:a6:c8:74:f1:ec:79:cb:a0:3f:7f:3c:8a:25: ee:04:b2:5a:d7:e4:5e:9f:c5:16:e0:b2:46:0a:e4:3b:11:fd: fb:c3:a4:2e:52:b1:7d:65:75:3d:1e:bf:39:46:7b:ef:54:16: 3f:87:08:df:44:3d:53:1b:44:d2:4f:63:31:14:55:ce:8e:7d: cd:ef:e2:9b:5b:7e:45:e6:1f:eb:8a:98:f9:e0:4c:21:77:d5: a2:ef:42:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUxMTAyMTYwOTUxWhcNMjUxMTA5MTYwOTUxWjAYMRYwFAYD VQQDEw02OTA3ODI0Zi0wM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWX0q6gUPw9UAHR13p74M78ql8stghEJt7c0CJLHrZezmwzB8CDMlrBllZLP Jckc5TiyAeh/6WB1wlJL5MvxmjE6juS57dMHn6YWm7kLRje72qd+uN/T8BL13u61 yYN0vJ6WTjVByRBo3saaZ7Bo85r43iF4TmtMvi/2E/kfexU2ZxJRl2xQjjBh/nPw hAmhLPJTHbVcNLt1yu20aYNZi+yaEU9l7hF2q5RlPYf07Jy3lno9jCFU0A9ojGKw 2O8NV6iR80CzdJ/nISkBB5m4s2Se87dDszTF9Sp+GLTKNbWA+HPOuJORkppIwwi8 bBTrPEfOsPPtGTTaxLjfYKUChQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHS7sqn 3i/kWjcB05trzKVncQ3XMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7emEz67aAj8i3ESZZtQJSZN+ABK3QzwaG0HSRkDdPl7BrRISrSWBh DNCTnf8dzFzRbzFW1jd+P8P0dvwRHRM3fKNRVOa0FdUcAp5dDnPM2954L2acRDoa YKMohtDOmpdNue7+0ysDLhlnTjFEjB5UBCNsIxPYkvGEbBGeLV2ieMe3pj/stxMk ViQTSqRqsYF+TyfVBqJPZd3tUAPoNvpmGmbX9yfwaqbIdPHsecugP388iiXuBLJa 1+Ren8UW4LJGCuQ7Ef37w6QuUrF9ZXU9Hr85RnvvVBY/hwjfRD1TG0TST2MxFFXO jn3N7+KbW35F5h/ripj54Ewhd9Wi70LX -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:09 2025 by rpki-client