$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: koTrhSN2FF6BqydiofzSZPbJnmtgdFONFDpQw2/TRls= Subject key identifier: 68:F5:A0:9F:C1:E8:2F:04:EC:0C:DE:05:DA:33:7D:8D:E8:7C:39:C7 Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 03E3 Signing time: Mon 03 Nov 2025 00:30:01 +0000 Manifest this update: Mon 03 Nov 2025 00:30:00 +0000 Manifest next update: Mon 10 Nov 2025 00:30:00 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: GuJhALw9hZ0lhAbC+U5vx8d3xa2N5pKHwz7ySWlT2zg=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Nov 3 00:30:00 2025 GMT Not After : Nov 10 00:30:00 2025 GMT Subject: CN=6907f788-8833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:06:da:b1:43:be:68:64:0a:03:c4:e0:8f: f6:6a:ea:22:6f:d5:b1:33:ab:c6:79:4a:9d:1e:84: bc:67:3f:bf:b0:90:31:ea:d3:11:53:99:c2:d7:cd: 4e:94:b9:f8:1c:02:61:dc:a5:81:54:f2:31:1a:17: 1f:cd:15:34:e1:e7:ad:9c:ce:01:a8:97:f8:a0:59: 71:c8:6e:97:b4:c2:ec:91:fb:21:53:b5:50:42:e6: 92:40:b8:13:6d:07:ad:20:ef:db:ec:d4:0a:c3:70: 07:a0:e3:67:4b:ea:51:c0:f7:1a:af:0c:79:04:8f: 66:26:9d:ca:34:f6:d2:64:c1:02:d2:c8:e8:f5:df: 82:3f:57:39:d3:ed:2e:bf:90:e0:2b:25:22:ea:e5: e5:f3:4c:0f:53:41:12:f1:6a:9d:e5:97:26:52:2b: 5b:0d:fc:3e:0f:15:68:57:4a:2c:23:9f:e5:33:af: 01:e2:60:ca:44:da:b6:ca:6d:6b:b9:5c:d1:72:4d: 52:00:56:57:f9:e8:cf:88:06:d8:84:be:dc:1f:bb: 6c:5e:55:c9:73:f2:f5:02:9f:ea:9a:63:90:d5:d7: e8:6d:eb:21:8a:6b:47:a7:9a:2b:71:f4:4c:9e:cd: 3e:e6:48:70:44:62:5a:2d:99:fa:b5:4c:3e:1e:a8: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F5:A0:9F:C1:E8:2F:04:EC:0C:DE:05:DA:33:7D:8D:E8:7C:39:C7 X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d1:68:ed:26:d2:5e:9d:73:3c:70:56:71:a1:96:68:03:76: d4:b9:1a:34:b2:37:4c:f0:86:5d:c0:fb:6e:e3:8e:97:91:37: 86:b0:be:96:ed:58:05:55:66:6a:e3:5d:9f:5d:4a:31:b0:34: 28:96:0c:1a:1e:c2:8f:1e:f3:1b:6d:d3:6c:e0:46:8c:fa:5a: 69:c1:71:4d:d6:2a:f2:d4:75:9c:ea:cc:f2:af:33:cc:13:8b: 2f:60:35:d0:aa:e1:12:a5:8c:97:73:01:f3:3c:0a:94:91:5f: 68:82:c8:5b:b3:a8:8a:f8:ae:5f:e5:b9:67:a6:f3:5e:cd:f5: 58:d9:b4:b4:52:dd:ec:f8:99:06:ec:94:94:28:ad:30:e9:d7: 15:f0:a8:15:c7:06:ac:fc:87:b9:f9:66:11:50:9c:0b:8f:66: 65:99:db:2b:c7:cb:5d:b8:86:8c:7f:57:89:c6:2a:43:8e:76: 20:ec:c5:55:5b:5f:62:2c:03:a2:a2:62:f7:dc:f6:5b:84:f6: 58:8f:c5:e8:21:f2:b8:18:98:c6:27:93:b7:e6:e5:e7:4d:c8: 49:84:58:f2:a7:7b:68:9e:aa:04:e8:cc:19:75:19:f7:06:e8: bd:c6:7d:a6:0c:da:44:9b:e6:5b:4e:be:2e:e8:e4:e4:6c:54: 6a:2f:bd:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjUxMTAzMDAzMDAwWhcNMjUxMTEwMDAzMDAwWjAYMRYwFAYD VQQDEw02OTA3Zjc4OC04ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTcG2rFDvmhkCgPE4I/2auoib9WxM6vGeUqdHoS8Zz+/sJAx6tMRU5nC181O lLn4HAJh3KWBVPIxGhcfzRU04eetnM4BqJf4oFlxyG6XtMLskfshU7VQQuaSQLgT bQetIO/b7NQKw3AHoONnS+pRwPcarwx5BI9mJp3KNPbSZMEC0sjo9d+CP1c50+0u v5DgKyUi6uXl80wPU0ES8Wqd5ZcmUitbDfw+DxVoV0osI5/lM68B4mDKRNq2ym1r uVzRck1SAFZX+ejPiAbYhL7cH7tsXlXJc/L1Ap/qmmOQ1dfobeshimtHp5orcfRM ns0+5khwRGJaLZn6tUw+Hqiq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj1oJ/B 6C8E7AzeBdozfY3ofDnHMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY0WjtJtJenXM8cFZxoZZoA3bUuRo0sjdM8IZdwPtu446XkTeGsL6W 7VgFVWZq412fXUoxsDQolgwaHsKPHvMbbdNs4EaM+lppwXFN1iry1HWc6szyrzPM E4svYDXQquESpYyXcwHzPAqUkV9ogshbs6iK+K5f5blnpvNezfVY2bS0Ut3s+JkG 7JSUKK0w6dcV8KgVxwas/Ie5+WYRUJwLj2Zlmdsrx8tduIaMf1eJxipDjnYg7MVV W19iLAOiomL33PZbhPZYj8XoIfK4GJjGJ5O35uXnTchJhFjyp3tonqoE6MwZdRn3 Bui9xn2mDNpEm+ZbTr4u6OTkbFRqL73o -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:46 2025 by rpki-client