$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: c/5HYiLmav89yEc4ZGwLtqaYOOWTqAtzN23bHugdf+o= Subject key identifier: AA:C8:46:E8:87:41:3D:B0:3E:AC:B8:A7:D0:E1:24:1C:25:DC:86:42 Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: F6 Signing time: Wed 05 Nov 2025 05:23:20 +0000 Manifest this update: Wed 05 Nov 2025 05:23:19 +0000 Manifest next update: Wed 12 Nov 2025 05:23:19 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: fm26nCTJ/fxjU8V2KJPAcHl8oUX81JLgyGqwMtlW9i4=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Nov 5 05:23:19 2025 GMT Not After : Nov 12 05:23:19 2025 GMT Subject: CN=690adf47-cd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c4:93:86:1e:2a:fd:bd:40:f2:be:f3:f6:5c: 0e:bb:54:7a:fc:17:e5:e5:36:71:04:78:03:e6:d7: 24:5d:18:3f:85:07:84:ec:75:10:53:b5:0f:36:3a: 51:bd:d8:8d:7a:af:ed:ae:a0:c7:2b:69:34:0a:32: 39:c8:b8:c3:9c:1c:0f:f3:7e:a3:9a:3c:f2:38:9e: bf:65:99:8f:4d:19:42:c5:89:db:66:b2:80:3f:d7: 29:01:2b:32:33:3d:d5:8a:49:a4:a9:fb:cb:20:60: ef:19:4d:ff:e5:e3:27:90:0c:cd:d8:4e:e4:01:38: 89:50:35:84:8d:67:f8:13:7b:f2:70:5d:41:37:3e: 94:51:18:53:40:b8:f4:8a:e8:9a:14:3c:98:7e:28: 4d:e4:e0:63:16:de:53:4a:77:90:04:18:c2:44:01: df:83:ab:dd:8d:c7:a1:4a:ae:96:f9:18:9a:98:37: 63:28:83:cb:ee:77:1b:e3:80:54:a1:73:d5:87:01: 84:9a:d9:0b:30:60:f9:75:94:f1:0a:70:1a:92:c9: 4c:1e:e2:4a:b5:ab:cd:31:53:bb:33:ab:a5:80:59: 3c:d6:48:22:e8:28:aa:13:9f:1c:a5:15:42:ca:ff: df:3f:9a:0e:9c:db:df:20:21:31:49:21:ba:21:61: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C8:46:E8:87:41:3D:B0:3E:AC:B8:A7:D0:E1:24:1C:25:DC:86:42 X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:31:0d:bb:ac:48:d5:83:e6:d8:0e:fd:30:b8:fc:ea:bd:2e: aa:35:6e:f6:76:33:fe:54:d2:a6:d1:bb:e3:32:8a:ec:9d:e7: a7:4e:57:f3:98:04:12:f6:32:ea:7e:fb:70:b2:82:8a:df:86: 17:07:05:d4:34:ef:80:4e:4b:84:36:82:49:4c:1d:a2:4c:03: ae:04:e2:b6:60:fd:48:9b:82:7e:27:e3:40:8e:84:a6:e7:9a: 76:36:b5:64:4e:aa:2c:40:9a:b4:90:b7:11:56:98:5a:75:f8: d4:10:c8:17:44:3f:fb:a7:c1:d6:e1:97:67:77:ba:95:47:e7: c0:89:59:d4:9b:f6:df:f4:99:98:33:35:36:a9:a7:6a:2e:96: 97:6d:e6:d6:62:bc:46:dd:12:49:06:f1:8f:e8:77:0e:18:53: a5:1f:a9:a1:f3:da:29:3d:fd:15:8b:4e:ab:09:48:82:da:8e: 41:6f:38:e6:85:44:95:55:a4:7f:3e:c5:f9:3a:63:bd:ea:bd: 5f:07:06:e1:20:cf:26:46:e4:0e:6c:b5:6d:84:a5:e2:65:20: 72:4e:e5:91:6b:47:06:c9:f7:a5:00:04:0b:6b:0f:97:59:2f: d3:42:66:aa:e7:ab:52:c7:e8:79:67:fb:bf:5b:91:a3:a7:24: f1:8e:ae:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjUxMTA1MDUyMzE5WhcNMjUxMTEyMDUyMzE5WjAYMRYwFAYD VQQDEw02OTBhZGY0Ny1jZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8SThh4q/b1A8r7z9lwOu1R6/Bfl5TZxBHgD5tckXRg/hQeE7HUQU7UPNjpR vdiNeq/trqDHK2k0CjI5yLjDnBwP836jmjzyOJ6/ZZmPTRlCxYnbZrKAP9cpASsy Mz3VikmkqfvLIGDvGU3/5eMnkAzN2E7kATiJUDWEjWf4E3vycF1BNz6UURhTQLj0 iuiaFDyYfihN5OBjFt5TSneQBBjCRAHfg6vdjcehSq6W+RiamDdjKIPL7ncb44BU oXPVhwGEmtkLMGD5dZTxCnAakslMHuJKtavNMVO7M6ulgFk81kgi6CiqE58cpRVC yv/fP5oOnNvfICExSSG6IWFVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrIRuiH QT2wPqy4p9DhJBwl3IZCMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhMQ27rEjVg+bYDv0wuPzqvS6qNW72djP+VNKm0bvjMorsneenTlfz mAQS9jLqfvtwsoKK34YXBwXUNO+ATkuENoJJTB2iTAOuBOK2YP1Im4J+J+NAjoSm 55p2NrVkTqosQJq0kLcRVphadfjUEMgXRD/7p8HW4Zdnd7qVR+fAiVnUm/bf9JmY MzU2qadqLpaXbebWYrxG3RJJBvGP6HcOGFOlH6mh89opPf0Vi06rCUiC2o5Bbzjm hUSVVaR/PsX5OmO96r1fBwbhIM8mRuQObLVthKXiZSByTuWRa0cGyfelAAQLaw+X WS/TQmaq56tSx+h5Z/u/W5GjpyTxjq5V -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:56 2025 by rpki-client