$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: ogBe5A9ajzEzUTxLgS2Rq3uV999+lLz0Woi9EtOcOM4= Subject key identifier: F9:3A:FA:12:53:56:A7:C2:04:41:E1:2A:2B:BA:CA:0A:6C:60:BD:77 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 16BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 168B Signing time: Fri 24 Oct 2025 17:04:21 +0000 Manifest this update: Fri 24 Oct 2025 17:04:21 +0000 Manifest next update: Fri 31 Oct 2025 17:04:21 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: notO7Zi6O2+YzyBcGOCuiV63+ZSdQWRfUH7Q47gHggQ=) 2: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=) 3: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: 8Wwh2LGsfMleJz4kPXncR947wixaVvdi2YpWJ6WAnNA=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: vU1HGyruT0rWn1hdwhJaA7GCZtlR47+81PGq+koUgEQ=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: C40oyBiTxjQqMGzoY7zwrfSLtJR/TE6dpDn0DYUL1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5820 (0x16bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Oct 24 17:04:21 2025 GMT Not After : Oct 31 17:04:21 2025 GMT Subject: CN=68fbb195-b814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:c0:89:bd:fb:c9:75:f1:8f:f4:c7:18:2b: a0:df:45:de:87:fd:79:ce:9f:2a:3d:f0:77:57:48: 53:ee:ef:c9:06:12:17:af:54:7a:bb:93:f5:9d:4e: bc:e4:27:1b:05:ec:26:2f:d4:69:16:95:fe:66:72: 81:69:36:9b:7a:87:4f:d8:af:a6:db:82:97:38:dd: b1:8a:3f:5c:2e:c1:20:c3:dd:d0:9e:01:0a:01:ce: f0:ab:57:6c:06:16:e5:a8:3e:6f:ae:a3:76:a2:02: 77:d0:98:e4:00:0b:a6:5e:8d:89:76:4d:11:30:38: 37:c9:8d:c8:2d:b4:fb:b4:c8:88:87:a4:97:98:d2: a4:a5:ed:c3:b3:00:d9:29:05:c6:4b:a8:b2:e2:d8: 68:93:68:53:12:40:09:0d:e8:d4:06:0f:18:a8:a1: ee:38:c9:ad:06:dc:c8:98:0a:b4:c9:9b:b0:11:d2: 10:79:29:2b:6c:d0:97:29:c7:e0:38:92:85:d4:94: 35:4c:db:ff:a9:c8:9c:b4:cb:13:9a:64:cc:49:c0: a1:5b:00:13:5f:0e:bc:1f:3d:4b:48:37:9e:b5:01: 8a:da:1c:64:bc:a2:7a:53:3f:e8:cc:07:d2:ad:d3: b4:f6:cd:e5:85:01:57:ce:5c:d9:7c:c3:ca:c1:a4: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3A:FA:12:53:56:A7:C2:04:41:E1:2A:2B:BA:CA:0A:6C:60:BD:77 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:34:9f:9e:eb:77:91:6d:4a:48:03:d2:4d:df:45:d2:c3:fc: b9:d8:70:58:96:04:ff:af:36:6f:e6:68:72:c9:83:c0:a0:49: b1:c9:e4:d0:8f:13:c2:a9:3f:1e:7b:ff:eb:2a:97:ab:78:21: e7:80:3f:85:54:98:c8:e0:b0:00:de:99:62:22:01:88:be:5f: c9:8c:c3:af:d8:75:3d:5d:cd:3c:98:5c:38:4c:26:26:9c:b5: d6:30:54:e8:8e:d3:aa:4a:af:0e:9d:3f:40:dc:8a:aa:40:2c: f6:62:36:85:41:4d:ad:b5:76:1b:04:52:ae:75:3d:ca:ec:7a: 5c:96:58:ff:89:e5:bb:35:bd:4f:04:66:91:87:67:21:18:c1: b5:65:be:70:f0:72:e9:84:eb:96:21:45:db:ff:cd:27:c2:b2: ea:fb:4c:c5:dd:5d:27:c8:4f:1b:12:d8:b6:4a:d7:67:c4:3e: 72:97:94:60:f1:39:7c:ba:af:1e:10:cb:51:19:99:41:c9:59: 8f:d5:22:09:02:d9:8d:76:85:33:5c:e2:2f:60:b0:70:b8:4a: 8a:02:6f:d6:8e:f4:12:cb:74:0d:ee:5b:98:ac:af:e6:02:64: 9a:c4:31:72:21:0c:f4:ec:8a:6a:89:53:14:72:56:72:f2:b8: dc:40:71:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUxMDI0MTcwNDIxWhcNMjUxMDMxMTcwNDIxWjAYMRYwFAYD VQQDEw02OGZiYjE5NS1iODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmHAib37yXXxj/THGCug30Xeh/15zp8qPfB3V0hT7u/JBhIXr1R6u5P1nU68 5CcbBewmL9RpFpX+ZnKBaTabeodP2K+m24KXON2xij9cLsEgw93QngEKAc7wq1ds BhblqD5vrqN2ogJ30JjkAAumXo2Jdk0RMDg3yY3ILbT7tMiIh6SXmNKkpe3DswDZ KQXGS6iy4thok2hTEkAJDejUBg8YqKHuOMmtBtzImAq0yZuwEdIQeSkrbNCXKcfg OJKF1JQ1TNv/qcictMsTmmTMScChWwATXw68Hz1LSDeetQGK2hxkvKJ6Uz/ozAfS rdO09s3lhQFXzlzZfMPKwaSIBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk6+hJT VqfCBEHhKiu6ygpsYL13MB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfNJ+e63eRbUpIA9JN30XSw/y52HBYlgT/rzZv5mhyyYPAoEmxyeTQ jxPCqT8ee//rKpereCHngD+FVJjI4LAA3pliIgGIvl/JjMOv2HU9Xc08mFw4TCYm nLXWMFTojtOqSq8OnT9A3IqqQCz2YjaFQU2ttXYbBFKudT3K7Hpcllj/ieW7Nb1P BGaRh2chGMG1Zb5w8HLphOuWIUXb/80nwrLq+0zF3V0nyE8bEti2StdnxD5yl5Rg 8Tl8uq8eEMtRGZlByVmP1SIJAtmNdoUzXOIvYLBwuEqKAm/WjvQSy3QN7luYrK/m AmSaxDFyIQz07IpqiVMUclZy8rjcQHFA -----END CERTIFICATE-----Generated at Sun Oct 26 04:35:16 2025 by rpki-client