$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: fog5jg8ontiyt77k90Apw/h1eT1Sz1xo6h6qSXOxUPE= Subject key identifier: 06:76:1F:9E:BB:B0:60:95:E3:D4:33:4E:A1:31:AA:A8:57:37:2F:39 Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0A65 Signing time: Wed 22 Oct 2025 20:38:01 +0000 Manifest this update: Wed 22 Oct 2025 20:38:01 +0000 Manifest next update: Wed 29 Oct 2025 20:38:01 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: NP++6+ESpqGgRTjAxAD6mSbaA5sS6ShyZBaL2mMXVGo=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Oct 22 20:38:01 2025 GMT Not After : Oct 29 20:38:01 2025 GMT Subject: CN=68f940a9-6ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:fc:1e:06:fb:28:99:61:21:68:b7:55:ac: d2:70:a5:fb:f8:0c:af:24:6a:f4:57:61:56:f8:61: aa:0f:b1:f7:7d:b5:29:73:22:d9:28:a6:31:30:78: 8c:d2:6d:d7:66:63:51:a8:e0:5a:be:f6:39:c4:4f: e3:be:35:62:ff:ef:d2:67:a3:21:fd:cb:15:a2:4c: e9:fe:04:67:57:b5:5d:9b:47:df:84:43:e9:d6:7a: f9:2c:2b:76:91:ab:c4:3f:a0:5b:81:34:3a:3e:6f: 7f:fc:80:41:3a:f8:96:68:fa:4d:d7:81:86:5b:fe: 44:aa:a4:bd:03:cb:cc:d0:9a:b6:4c:e5:fe:55:73: a5:e8:e6:b7:2b:19:cc:a5:25:ce:57:10:bd:1d:ca: b9:f6:91:3e:5d:3c:91:69:e3:31:f6:05:43:6d:9b: 4e:2f:73:91:8d:fd:17:71:5b:da:ba:4d:7e:bb:a3: 56:85:26:85:9f:62:4b:ef:f8:b9:ce:22:ff:5c:b8: be:cc:0c:14:23:88:6a:d4:54:97:7e:ef:c8:d3:52: 9f:59:21:0b:f5:f8:8b:76:a6:e7:57:4a:54:b8:77: 9d:42:cc:ed:8b:41:94:5a:ec:29:7b:a7:e5:1c:0a: 72:40:93:5a:43:59:41:db:3f:1c:e0:b9:21:e9:b9: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:76:1F:9E:BB:B0:60:95:E3:D4:33:4E:A1:31:AA:A8:57:37:2F:39 X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ff:8f:17:56:5c:cc:a9:c5:0a:b1:2e:91:e8:ae:03:e4:35: 19:06:e2:e9:d3:84:3a:99:73:b8:23:66:1a:a5:0d:49:09:b0: ba:68:45:87:cc:80:9d:ab:ab:80:aa:23:53:01:1c:99:01:67: f1:8c:15:1d:97:b2:e9:1e:4e:58:86:49:8d:f9:0f:4b:0f:3f: 36:2f:ff:a4:55:6c:67:d4:9b:6e:b3:65:d2:36:a5:bc:20:7c: fe:2b:88:d2:01:05:5b:b7:9e:0d:e8:d4:42:3f:84:62:fe:d2: ea:e8:24:e2:4b:25:96:4e:1c:ea:e4:82:8d:64:99:3f:c0:00: 92:50:a5:1d:59:ad:39:00:6e:5d:d8:12:3d:b2:63:07:c6:24: 63:b5:d1:94:aa:ae:19:02:49:50:99:d9:14:c9:57:b3:19:b6: 49:49:3a:a7:42:51:97:3e:9a:fd:5a:e2:c3:87:fc:64:e9:9a: d4:16:44:27:6f:f2:b7:35:38:02:a7:ea:0b:40:89:2d:fc:68: 5d:b3:a3:74:92:ce:8e:e2:78:e5:c2:a7:19:06:08:32:61:12: cb:1e:13:fc:e7:a7:de:db:60:08:68:ef:9a:ef:04:1d:00:c0: db:3d:de:fa:0a:17:61:aa:f0:f1:32:c2:36:be:30:91:06:f6: 89:90:86:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjUxMDIyMjAzODAxWhcNMjUxMDI5MjAzODAxWjAYMRYwFAYD VQQDEw02OGY5NDBhOS02Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cr8Hgb7KJlhIWi3VazScKX7+AyvJGr0V2FW+GGqD7H3fbUpcyLZKKYxMHiM 0m3XZmNRqOBavvY5xE/jvjVi/+/SZ6Mh/csVokzp/gRnV7Vdm0ffhEPp1nr5LCt2 kavEP6BbgTQ6Pm9//IBBOviWaPpN14GGW/5EqqS9A8vM0Jq2TOX+VXOl6Oa3KxnM pSXOVxC9Hcq59pE+XTyRaeMx9gVDbZtOL3ORjf0XcVvauk1+u6NWhSaFn2JL7/i5 ziL/XLi+zAwUI4hq1FSXfu/I01KfWSEL9fiLdqbnV0pUuHedQszti0GUWuwpe6fl HApyQJNaQ1lB2z8c4Lkh6bmNRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZ2H567 sGCV49QzTqExqqhXNy85MB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ/48XVlzMqcUKsS6R6K4D5DUZBuLp04Q6mXO4I2YapQ1JCbC6aEWH zICdq6uAqiNTARyZAWfxjBUdl7LpHk5YhkmN+Q9LDz82L/+kVWxn1Jtus2XSNqW8 IHz+K4jSAQVbt54N6NRCP4Ri/tLq6CTiSyWWThzq5IKNZJk/wACSUKUdWa05AG5d 2BI9smMHxiRjtdGUqq4ZAklQmdkUyVezGbZJSTqnQlGXPpr9WuLDh/xk6ZrUFkQn b/K3NTgCp+oLQIkt/Ghds6N0ks6O4njlwqcZBggyYRLLHhP856fe22AIaO+a7wQd AMDbPd76ChdhqvDxMsI2vjCRBvaJkIY/ -----END CERTIFICATE-----Generated at Thu Oct 23 10:58:24 2025 by rpki-client