$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft File: 1juG48_JVWPv58rwdR2YQCZK2lY.mft (raw, json) Hash identifier: FFhsUzz99ZXtRdJHFxdP9RZs7Dr2rXcqhApXVMFT43U= Subject key identifier: 01:52:DB:3F:EE:4F:15:D5:D7:32:43:5E:0B:A0:52:02:3B:AB:FB:5D Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56 Certificate issuer: /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft Manifest number: 40 Signing time: Mon 03 Nov 2025 07:25:57 +0000 Manifest this update: Mon 03 Nov 2025 07:25:56 +0000 Manifest next update: Mon 10 Nov 2025 07:25:56 +0000 Files and hashes: 1: 1juG48_JVWPv58rwdR2YQCZK2lY.crl (hash: XORTJbvwNbjDpHKtAtqXZQ3wlLG/0qy+bQxfpWymwoM=) 2: 39044E9E58B311F084F3982DC4F9AE02.roa (hash: Ia+Jmu8TncD8IiScdaf8hIm9nx7VvvKZ6Drg9K1HDyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56 Validity Not Before: Nov 3 07:25:56 2025 GMT Not After : Nov 10 07:25:56 2025 GMT Subject: CN=69085904-e4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:49:c4:a4:07:a8:d8:bb:34:39:68:27:54: c7:2b:cf:a9:2a:2a:bd:4f:c5:76:31:63:23:4c:b1: 20:de:9e:38:d6:ad:98:27:0b:9c:6c:cf:dc:e3:15: 0a:aa:29:fd:58:36:10:43:6a:27:b6:35:62:65:73: 95:1e:43:34:d1:ce:43:2b:ae:c3:30:ef:83:9f:48: 5f:99:d4:d6:c1:f7:3d:10:ed:f7:e0:ac:cf:00:87: d7:cd:5f:5d:d4:5f:f0:44:fe:57:1c:76:1e:8c:36: 09:62:13:53:f2:91:0e:fc:87:33:98:ae:d0:da:88: 98:bd:fb:32:42:33:da:dd:f8:81:16:be:81:96:41: 35:83:98:4e:0b:76:5c:2f:59:81:c8:54:42:af:29: ff:ca:28:cc:f5:cd:8a:a7:07:15:d4:9f:a6:2e:55: 83:e0:1f:4f:8b:f4:00:ff:07:1f:bb:93:40:0b:16: 06:b9:6e:65:83:f1:05:7d:40:13:53:52:97:d0:f2: 10:34:91:1c:2b:74:ed:c7:43:50:b7:78:33:3a:0a: f1:3b:f6:c5:e8:52:25:12:db:36:02:26:0d:77:ca: b4:6c:f8:20:4e:36:6f:5b:cf:05:90:00:4e:d6:08: 71:ac:57:27:1a:0e:58:5c:40:50:75:ef:2d:4f:86: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:DB:3F:EE:4F:15:D5:D7:32:43:5E:0B:A0:52:02:3B:AB:FB:5D X509v3 Authority Key Identifier: keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:59:be:3b:d3:3c:71:72:59:76:1c:31:5c:41:29:c7:34:ad: 0a:3c:9e:76:e4:fa:4a:44:d0:1a:48:b8:db:d5:04:cc:e5:3a: ae:8a:6e:c0:61:5a:96:ab:c0:22:56:fd:b8:85:6b:c8:e6:67: 9c:ce:0a:df:e7:56:58:57:71:78:c8:3c:65:19:2c:9c:1d:03: b8:c2:01:dc:36:77:74:07:ab:ad:f0:f6:ef:a9:ca:d4:8a:2e: 9a:a6:09:02:f6:ec:c0:50:01:56:79:e8:5b:f2:b0:71:20:92: 3c:21:9e:c0:85:db:e0:d2:44:e0:28:80:d0:77:f3:9d:44:4f: 41:38:69:de:41:a2:c1:b4:19:36:5f:2a:12:ca:bf:b7:39:e9: 46:a6:9a:1d:94:ed:68:99:b2:30:a4:ce:c0:fb:a9:db:d3:96: 09:5f:04:86:b2:c3:79:8a:04:a9:89:d5:a1:4f:a6:91:e6:57: 1c:b4:31:5a:10:fa:34:33:55:be:85:31:3d:89:b8:ce:38:bb: fb:29:dc:42:45:24:da:60:d2:dd:58:1f:d2:ee:b7:c6:e9:2c: 2d:bd:a1:72:cc:83:31:c3:88:b5:b9:c3:e2:7c:bb:a6:f7:7f: 9e:f8:07:ae:b9:75:fd:e9:68:2c:aa:38:a6:32:a6:98:de:58: 5e:09:31:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzQ1NTExMC8GA1UEBRMoRDYzQjg2RTNDRkM5NTU2M0VGRTdDQUYwNzUxRDk4NDAy NjRBREE1NjAeFw0yNTExMDMwNzI1NTZaFw0yNTExMTAwNzI1NTZaMBgxFjAUBgNV BAMTDTY5MDg1OTA0LWU0YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFZUnEpAeo2Ls0OWgnVMcrz6kqKr1PxXYxYyNMsSDenjjWrZgnC5xsz9zjFQqq Kf1YNhBDaie2NWJlc5UeQzTRzkMrrsMw74OfSF+Z1NbB9z0Q7ffgrM8Ah9fNX13U X/BE/lccdh6MNgliE1PykQ78hzOYrtDaiJi9+zJCM9rd+IEWvoGWQTWDmE4Ldlwv WYHIVEKvKf/KKMz1zYqnBxXUn6YuVYPgH0+L9AD/Bx+7k0ALFga5bmWD8QV9QBNT UpfQ8hA0kRwrdO3HQ1C3eDM6CvE79sXoUiUS2zYCJg13yrRs+CBONm9bzwWQAE7W CHGsVycaDlhcQFB17y1PhvC3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAVLbP+5P FdXXMkNeC6BSAjur+10wHwYDVR0jBBgwFoAU1juG48/JVWPv58rwdR2YQCZK2lYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzNDU1L0ExNjg0QjNBNThC MjExRjA5OUVFNzUyQ0M0RjlBRTAyLzFqdUc0OF9KVldQdjU4cndkUjJZUUNaSzJs WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWp1RzQ4X0pWV1B2NThyd2RSMllRQ1pLMmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz NDU1L0ExNjg0QjNBNThCMjExRjA5OUVFNzUyQ0M0RjlBRTAyLzFqdUc0OF9KVldQ djU4cndkUjJZUUNaSzJsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRZvjvTPHFyWXYcMVxBKcc0rQo8nnbk+kpE0BpIuNvVBMzlOq6KbsBh WparwCJW/biFa8jmZ5zOCt/nVlhXcXjIPGUZLJwdA7jCAdw2d3QHq63w9u+pytSK LpqmCQL27MBQAVZ56FvysHEgkjwhnsCF2+DSROAogNB3851ET0E4ad5BosG0GTZf KhLKv7c56Uammh2U7WiZsjCkzsD7qdvTlglfBIayw3mKBKmJ1aFPppHmVxy0MVoQ +jQzVb6FMT2JuM44u/sp3EJFJNpg0t1YH9Lut8bpLC29oXLMgzHDiLW5w+J8u6b3 f574B665df3paCyqOKYyppjeWF4JMV4= -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:57 2025 by rpki-client