$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: 2hnlO6BE4TlSf7oMZnAyX6cHU3EjgLmTekBpJlc04VI= Subject key identifier: E7:43:23:31:6F:E7:6D:0C:38:B9:51:7F:9B:4D:FA:C7:2D:16:72:FF Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FEE Signing time: Sun 02 Nov 2025 17:29:34 +0000 Manifest this update: Sun 02 Nov 2025 17:29:34 +0000 Manifest next update: Sun 09 Nov 2025 17:29:34 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: qd30buQSk4HT+t9QEDDDN/tW3kvmxVgRsB+TZ58Hxtk=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: nXcUac3MS90vWtMTrdvd36wOBCE4zfd0e2DObXaS7L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4086 (0xff6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Nov 2 17:29:34 2025 GMT Not After : Nov 9 17:29:34 2025 GMT Subject: CN=690794fe-f668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:35:a9:21:5e:56:54:7a:06:7f:48:b7:9b: 9a:85:c8:e5:ae:bc:1b:9b:8b:b5:79:6e:d2:91:30: 19:fb:4e:23:13:52:1f:7f:e9:ca:c1:66:1d:9a:3b: f7:3a:c4:3c:56:6a:1a:be:ae:1b:4a:a6:1d:2b:af: 94:68:e8:de:84:c5:0a:0e:3e:4d:4c:2d:c2:50:f8: ca:00:bc:c4:09:b6:84:3f:2b:30:fd:e8:48:eb:d6: b4:22:6b:ae:59:65:03:75:92:1f:15:07:89:14:ab: 51:3c:69:1e:34:a2:ac:42:eb:b6:0d:54:ce:96:73: 4b:cc:51:8b:5c:b7:7a:fe:88:99:5a:f4:69:16:a8: 5d:89:3c:8c:ed:2f:47:a7:f0:3e:a6:aa:2a:82:63: 10:e4:82:a2:44:16:f3:45:a9:fa:04:9d:b1:4d:a7: 13:4e:48:8b:ac:63:2f:10:e1:a4:8b:ea:81:43:4d: cf:50:d4:4b:5a:99:23:45:f6:57:ef:c8:dd:3d:71: 09:6b:b3:0f:91:cf:3a:d3:8d:f0:fb:84:ea:5c:9f: b5:83:ee:4f:60:b9:7a:50:16:63:f6:4d:16:0f:db: 98:22:46:36:c6:60:28:8d:8c:5c:0f:6d:28:13:10: 0b:b1:b9:42:80:c3:51:72:0b:9f:29:c8:11:43:7d: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:23:31:6F:E7:6D:0C:38:B9:51:7F:9B:4D:FA:C7:2D:16:72:FF X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:eb:f6:85:9c:ea:f0:08:48:cd:70:27:f2:0a:1c:1a:c8:cf: 6c:3b:f3:2a:89:35:1f:f3:2a:b5:06:0d:79:d9:33:3d:81:f8: 98:a0:88:17:ab:b4:3e:d6:d1:5d:07:bd:5f:fb:ce:71:e3:31: 0f:87:69:a2:79:bd:48:69:56:ad:ff:1c:14:70:33:00:ad:6f: 61:35:4f:6f:0b:ed:eb:d8:78:5d:48:a3:40:54:15:cd:27:19: 9c:fe:8c:fb:b0:ed:01:1d:13:31:70:36:70:09:65:0a:5d:d6: a1:2b:7e:ca:1f:c4:d2:f5:35:6e:d7:54:11:8d:11:2a:e1:29: 2d:c5:94:28:d1:ab:d3:5e:89:6a:da:40:8a:b7:e1:70:46:b7: ad:09:45:67:1d:50:4d:c5:bc:24:fa:f8:ca:f1:d2:d6:8d:5a: 02:17:df:54:c6:e0:a4:20:c8:ab:7f:00:e6:8e:37:32:a7:20: 39:9e:33:98:a4:19:fa:c9:6e:67:dc:04:50:d2:15:b2:cd:aa: 62:9e:60:a4:49:39:de:7f:8f:1f:cd:9b:f7:29:04:13:57:d1: 8c:9f:df:26:ba:ad:e0:ef:4a:fe:cb:72:53:a8:c6:ed:e4:bd: 36:cc:6a:a2:8d:46:b1:37:3d:75:b6:00:06:f7:c6:3a:f4:1e: df:d8:f3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUxMTAyMTcyOTM0WhcNMjUxMTA5MTcyOTM0WjAYMRYwFAYD VQQDEw02OTA3OTRmZS1mNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh81qSFeVlR6Bn9It5uahcjlrrwbm4u1eW7SkTAZ+04jE1Iff+nKwWYdmjv3 OsQ8Vmoavq4bSqYdK6+UaOjehMUKDj5NTC3CUPjKALzECbaEPysw/ehI69a0Imuu WWUDdZIfFQeJFKtRPGkeNKKsQuu2DVTOlnNLzFGLXLd6/oiZWvRpFqhdiTyM7S9H p/A+pqoqgmMQ5IKiRBbzRan6BJ2xTacTTkiLrGMvEOGki+qBQ03PUNRLWpkjRfZX 78jdPXEJa7MPkc86043w+4TqXJ+1g+5PYLl6UBZj9k0WD9uYIkY2xmAojYxcD20o ExALsblCgMNRcgufKcgRQ31HXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdDIzFv 520MOLlRf5tN+sctFnL/MB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV6/aFnOrwCEjNcCfyChwayM9sO/MqiTUf8yq1Bg152TM9gfiYoIgX q7Q+1tFdB71f+85x4zEPh2mieb1IaVat/xwUcDMArW9hNU9vC+3r2HhdSKNAVBXN Jxmc/oz7sO0BHRMxcDZwCWUKXdahK37KH8TS9TVu11QRjREq4SktxZQo0avTXolq 2kCKt+FwRretCUVnHVBNxbwk+vjK8dLWjVoCF99UxuCkIMirfwDmjjcypyA5njOY pBn6yW5n3ARQ0hWyzapinmCkSTnef48fzZv3KQQTV9GMn98muq3g70r+y3JTqMbt 5L02zGqijUaxNz11tgAG98Y69B7f2PPg -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:11 2025 by rpki-client