$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json) Hash identifier: 6plBZFdFcnBehlhCsnrg7TyLy4KYX5E2WEbTcbKqqMc= Subject key identifier: AC:C5:1A:B9:53:EA:79:38:D0:91:8D:EB:A8:79:AC:F3:69:BB:10:9F Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft Manifest number: 0105 Signing time: Mon 03 Nov 2025 05:05:04 +0000 Manifest this update: Mon 03 Nov 2025 05:05:04 +0000 Manifest next update: Mon 10 Nov 2025 05:05:04 +0000 Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: biGaruYCZj/XSsT6K6ABQUiAXFFq7kDzewkIm6vuCLs=) 2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Validity Not Before: Nov 3 05:05:04 2025 GMT Not After : Nov 10 05:05:04 2025 GMT Subject: CN=69083800-7611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:98:67:ac:b1:fc:2f:40:ff:68:dd:96:92: f9:35:bb:fe:e2:72:74:24:bd:40:54:ea:1e:ab:47: 15:92:75:74:30:03:74:d1:22:26:05:bf:cc:4a:11: 52:de:fe:bd:14:e2:34:98:6d:5d:7e:eb:8e:5c:bf: b2:b2:89:0c:2d:1a:24:17:2a:87:d6:32:ed:b4:77: 1a:9f:01:13:3a:04:30:2f:a6:2e:1c:f7:7a:5b:e9: 8e:48:9d:a9:89:c8:7a:aa:b0:39:d5:86:70:c5:ff: 1d:2f:7b:11:88:7c:53:2f:08:c9:92:5f:c7:95:8f: 79:a2:f9:f7:3a:10:b5:63:2e:98:15:22:bf:65:8c: f8:4a:b8:b7:25:13:d6:b8:33:36:6e:84:c1:5e:aa: 74:44:d1:ea:a1:da:81:f7:b0:84:48:54:0f:ea:14: ec:8c:65:83:d7:83:f8:09:42:57:ab:f1:22:97:7d: 9a:96:bc:9d:2c:59:b7:c4:a4:e0:41:c4:7a:17:56: 42:23:7c:d0:13:b4:58:79:b6:2c:75:67:f9:30:58: fa:26:80:d1:6a:5f:53:c1:9e:78:24:91:32:a0:1d: 82:25:e4:f2:2c:92:ab:33:fa:66:8a:bd:93:cd:fa: 47:6d:d9:10:1b:17:6d:07:83:05:a7:3b:30:14:1f: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:1A:B9:53:EA:79:38:D0:91:8D:EB:A8:79:AC:F3:69:BB:10:9F X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a9:7c:7e:32:5c:44:4b:bb:18:08:26:3b:be:60:64:8d:80: 66:4d:fc:b2:71:86:e9:38:d4:2b:26:5a:57:05:93:27:82:6c: 6d:e3:d8:83:f4:3a:c9:a3:a8:e5:c7:ca:6f:61:37:a2:63:e2: ec:13:18:f1:bc:c5:f0:44:07:14:0e:50:cc:52:f9:2d:f9:8a: 2f:eb:65:db:e6:95:91:2c:91:51:d6:5a:29:06:2b:00:9d:e8: ea:70:d4:c0:f3:ab:c7:a5:3d:39:25:fc:ff:ae:54:66:4c:80: 23:d3:01:2d:bd:c9:1e:21:8e:0d:7a:7d:c4:3d:8a:35:7a:38: f5:cc:df:4a:8b:69:f2:80:91:39:5a:7f:29:84:df:a5:6e:cf: fc:8b:c3:bb:c5:6e:ee:a5:e4:b0:00:7a:01:ac:a6:97:cb:2c: eb:dc:07:d1:47:6d:e7:ca:e2:a2:17:8f:54:ed:91:c3:6e:05: c0:a5:1f:26:3b:53:9a:d0:e0:f1:f3:39:26:1d:7c:2e:ff:a8: 55:99:41:ae:f8:36:65:18:3b:17:c7:6c:e9:35:46:ef:c0:f4: 45:6f:89:a2:e2:18:f7:9f:bd:2b:8c:67:d2:fb:e5:6b:6e:84: 15:5e:e5:20:25:53:1e:2b:8a:73:01:e2:32:bb:1e:62:44:b5: c2:c1:17:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx MzgyRTRFNTgwHhcNMjUxMTAzMDUwNTA0WhcNMjUxMTEwMDUwNTA0WjAYMRYwFAYD VQQDEw02OTA4MzgwMC03NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tWYZ6yx/C9A/2jdlpL5Nbv+4nJ0JL1AVOoeq0cVknV0MAN00SImBb/MShFS 3v69FOI0mG1dfuuOXL+ysokMLRokFyqH1jLttHcanwETOgQwL6YuHPd6W+mOSJ2p ich6qrA51YZwxf8dL3sRiHxTLwjJkl/HlY95ovn3OhC1Yy6YFSK/ZYz4Sri3JRPW uDM2boTBXqp0RNHqodqB97CESFQP6hTsjGWD14P4CUJXq/Eil32alrydLFm3xKTg QcR6F1ZCI3zQE7RYebYsdWf5MFj6JoDRal9TwZ54JJEyoB2CJeTyLJKrM/pmir2T zfpHbdkQGxdtB4MFpzswFB8zRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzFGrlT 6nk40JGN66h5rPNpuxCfMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBR MzZxT3pzVjV6RklUZ3VUbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4qXx+MlxES7sYCCY7vmBkjYBmTfyycYbpONQrJlpXBZMngmxt49iD 9DrJo6jlx8pvYTeiY+LsExjxvMXwRAcUDlDMUvkt+Yov62Xb5pWRLJFR1lopBisA nejqcNTA86vHpT05Jfz/rlRmTIAj0wEtvckeIY4Nen3EPYo1ejj1zN9Ki2nygJE5 Wn8phN+lbs/8i8O7xW7upeSwAHoBrKaXyyzr3AfRR23nyuKiF49U7ZHDbgXApR8m O1Oa0ODx8zkmHXwu/6hVmUGu+DZlGDsXx2zpNUbvwPRFb4mi4hj3n70rjGfS++Vr boQVXuUgJVMeK4pzAeIyux5iRLXCwRed -----END CERTIFICATE-----Generated at Wed Nov 5 05:30:11 2025 by rpki-client