$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: EOU+4PsW8gM/lvW5uQgo/4Qau44Dh3SyYXT2jVHvBmo= Subject key identifier: 1B:7A:0A:E2:CE:E1:D6:E5:0A:91:12:F1:37:14:96:DA:3C:41:FB:A0 Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 050A Signing time: Tue 04 Nov 2025 23:44:34 +0000 Manifest this update: Tue 04 Nov 2025 23:44:33 +0000 Manifest next update: Tue 11 Nov 2025 23:44:33 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: Yok1WfzqVUDgKSmxYy4w+46+ZiU5hMGmJrVUWwFjQ3k=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: lEj2Xm0LQ+xioePgGHWRdpuXrIhiuAdZJ8cF1TzyFTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: Nov 4 23:44:33 2025 GMT Not After : Nov 11 23:44:33 2025 GMT Subject: CN=690a8fe2-4276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:99:d7:24:1d:26:3f:ab:30:2a:85:2c:90: ea:aa:e2:88:b6:75:52:06:35:aa:71:7a:fe:51:ed: b0:45:e3:0c:80:2a:1a:92:f8:ea:47:59:5d:47:27: 6b:49:60:dd:09:5e:18:00:1c:c9:94:dc:95:a5:34: a0:45:1a:4c:d8:c7:f8:1e:3d:09:61:e5:20:b2:1e: d3:5d:d6:f0:75:f0:98:0e:34:81:2a:72:ad:ea:9c: 6e:36:b0:6b:a6:e1:2e:77:8d:7b:d6:7e:63:6f:59: 87:12:18:22:21:f0:c9:43:a6:cb:b5:0c:25:da:ca: 37:e2:48:2c:b4:f1:e0:72:34:fd:ef:b2:b2:77:ca: 18:9f:2f:e9:00:43:5e:82:80:69:fc:76:6f:26:6a: c2:85:db:ec:9d:cb:5a:94:20:cf:02:17:3e:66:fa: ca:89:ee:a6:a1:cc:a1:c0:52:1e:75:47:34:8e:b1: 6f:ba:60:4a:1c:b6:1d:cc:37:27:c4:4e:43:bf:b1: 3d:b3:6a:42:c7:e9:b2:4d:17:06:01:c9:a3:c5:ba: 4d:11:99:0e:e8:96:78:76:08:0e:cc:98:a4:52:0d: a2:d7:3a:11:6d:e7:bd:16:32:06:3e:0d:d3:7e:c1: 62:03:51:da:4d:90:10:19:84:43:a3:b7:74:10:4e: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:0A:E2:CE:E1:D6:E5:0A:91:12:F1:37:14:96:DA:3C:41:FB:A0 X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f2:b6:d7:e8:65:d6:47:5a:48:1f:77:19:f8:61:16:2f:88: b0:e5:a3:31:51:ba:0b:86:06:6c:5d:c6:dc:a3:1d:30:69:39: 11:77:fd:c5:72:15:61:ab:28:7f:4f:9d:a8:81:89:7f:44:7c: dd:7d:58:70:c9:41:37:f2:8a:3c:3b:98:80:76:cc:d4:06:64: 83:22:e0:c0:e0:0d:11:81:f8:2c:4d:59:d8:67:2f:11:c5:a6: b5:4f:c2:c3:40:d7:61:7e:0d:c8:1f:a1:44:6b:4c:6e:c1:1c: c1:fa:23:a7:2a:bd:9f:64:23:ee:4e:cd:00:e5:58:b3:97:ca: 4e:92:58:a5:09:1a:a0:47:7e:40:71:55:7f:a1:44:a6:c5:90: 56:89:43:ae:30:a8:14:84:7f:42:43:a1:94:fd:83:3f:62:6e: d8:b9:a7:c5:17:04:e8:0c:80:6c:37:3b:67:30:0a:2c:c7:14: 02:9b:fe:29:31:f6:3d:a5:29:86:f6:f3:c3:a1:a7:80:d6:14: 96:3c:fe:7c:80:7b:b3:b9:b8:b0:c1:d6:86:63:37:c3:79:37: 9c:db:2c:65:9d:47:5c:38:bc:1d:b4:6c:d5:f6:60:4f:c1:39: 39:9e:95:a7:40:95:f5:66:df:57:fe:1d:9b:0b:50:20:5a:6d: 8a:f3:88:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUxMTA0MjM0NDMzWhcNMjUxMTExMjM0NDMzWjAYMRYwFAYD VQQDEw02OTBhOGZlMi00Mjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25aZ1yQdJj+rMCqFLJDqquKItnVSBjWqcXr+Ue2wReMMgCoakvjqR1ldRydr SWDdCV4YABzJlNyVpTSgRRpM2Mf4Hj0JYeUgsh7TXdbwdfCYDjSBKnKt6pxuNrBr puEud4171n5jb1mHEhgiIfDJQ6bLtQwl2so34kgstPHgcjT977Kyd8oYny/pAENe goBp/HZvJmrChdvsnctalCDPAhc+ZvrKie6mocyhwFIedUc0jrFvumBKHLYdzDcn xE5Dv7E9s2pCx+myTRcGAcmjxbpNEZkO6JZ4dggOzJikUg2i1zoRbee9FjIGPg3T fsFiA1HaTZAQGYRDo7d0EE4uKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt6CuLO 4dblCpES8TcUlto8QfugMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT8rbX6GXWR1pIH3cZ+GEWL4iw5aMxUboLhgZsXcbcox0waTkRd/3F chVhqyh/T52ogYl/RHzdfVhwyUE38oo8O5iAdszUBmSDIuDA4A0RgfgsTVnYZy8R xaa1T8LDQNdhfg3IH6FEa0xuwRzB+iOnKr2fZCPuTs0A5Vizl8pOklilCRqgR35A cVV/oUSmxZBWiUOuMKgUhH9CQ6GU/YM/Ym7YuafFFwToDIBsNztnMAosxxQCm/4p MfY9pSmG9vPDoaeA1hSWPP58gHuzubiwwdaGYzfDeTec2yxlnUdcOLwdtGzV9mBP wTk5npWnQJX1Zt9X/h2bC1AgWm2K84g9 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:28 2025 by rpki-client