$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: rdpTE4fdaIvwh6x4AmMTDVkbVOFATZSAZUUFB30JkP4= Subject key identifier: 68:D2:91:9F:AB:FF:37:E8:6B:D1:41:63:23:74:06:A0:9B:28:58:28 Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: DF Signing time: Wed 05 Nov 2025 05:40:13 +0000 Manifest this update: Wed 05 Nov 2025 05:40:13 +0000 Manifest next update: Wed 12 Nov 2025 05:40:13 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: /w+LtkCBYSjEjp7d53CFl7aunNg52kTIQE9HE/jax3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Nov 5 05:40:13 2025 GMT Not After : Nov 12 05:40:13 2025 GMT Subject: CN=690ae33d-bdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:82:68:7e:75:29:4b:9c:72:4f:57:a3:0b: ce:fd:a9:a0:77:d5:88:81:87:c1:15:17:52:a2:66: 1f:4d:22:82:26:60:32:e1:b3:6a:69:18:b9:c4:79: c2:ac:64:f4:06:d1:04:c8:e4:36:a4:34:a7:ed:e4: 45:0d:19:00:18:34:9b:85:45:cf:8f:fd:a5:e4:81: c6:e7:e4:b7:a1:1c:99:84:54:4f:aa:cc:6c:14:63: 59:14:b7:9c:36:30:7e:4f:90:d9:ba:cc:83:2b:6c: 7c:43:9f:25:39:e8:da:c5:c2:91:1e:94:f1:30:94: ae:ac:85:f7:ae:4c:68:9d:b4:9c:56:4b:fa:cf:51: 49:b9:c2:88:ce:6c:e2:6d:61:c9:83:39:9a:e3:50: 0e:36:82:44:71:e0:1c:6a:30:5c:45:48:50:4b:ed: bf:de:65:4e:89:1f:ea:dc:d4:b2:98:33:72:02:ed: d9:c2:58:6c:a3:23:1c:6f:e5:a5:c0:a7:17:8f:b3: 74:f9:04:56:21:a2:1d:f7:70:b2:21:30:3f:08:55: 1b:86:35:b4:a4:8a:fa:83:ab:5f:ad:bb:f3:2b:d8: 0b:3d:d6:24:38:a7:0a:68:05:28:6d:25:39:1c:b5: b3:d5:53:37:38:e9:63:0b:8a:f3:49:46:43:70:06: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D2:91:9F:AB:FF:37:E8:6B:D1:41:63:23:74:06:A0:9B:28:58:28 X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5d:d5:47:91:fa:39:a8:a1:6d:2a:26:d3:1c:4c:27:60:f8: 77:16:12:ec:62:9d:70:d4:b1:90:27:d3:74:58:00:b2:de:2c: 31:6c:d5:21:3a:39:59:c5:26:57:bc:9d:95:13:69:dd:1a:8d: 29:5c:86:b7:e4:d4:bc:3d:08:30:6f:95:db:fb:4b:46:8b:2e: 26:a3:ea:e8:35:4e:38:ce:7c:e6:ea:93:34:cc:15:ff:4c:81: 10:e0:c0:ce:41:13:c6:e3:0b:52:2c:43:00:e1:88:10:61:f6: 85:02:d1:57:62:00:6d:cc:8e:db:dc:35:4b:b9:80:fb:d9:f3: 70:92:3e:60:a7:0b:0d:24:d1:34:57:be:85:49:e9:d4:45:d4: d2:aa:26:8a:56:97:f1:8a:c9:cc:fe:a6:f6:32:76:91:e7:61: 4f:21:e4:b9:d2:d4:bd:e3:1e:26:b0:c0:5b:6c:a7:d2:f6:59: 7c:16:c6:ff:60:df:6c:c8:3c:c3:5c:56:7d:e8:2d:48:d9:86: 2a:dc:60:ae:ed:33:17:cd:94:d1:42:34:96:98:35:41:ec:ec: 33:9d:e8:6c:8f:a7:6a:1a:dd:1c:eb:4c:18:85:68:e5:5f:e7: f5:d0:65:80:04:c5:df:db:db:41:51:86:eb:7c:5a:6c:81:82: 4f:e5:1b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUxMTA1MDU0MDEzWhcNMjUxMTEyMDU0MDEzWjAYMRYwFAYD VQQDEw02OTBhZTMzZC1iZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12WCaH51KUucck9XowvO/amgd9WIgYfBFRdSomYfTSKCJmAy4bNqaRi5xHnC rGT0BtEEyOQ2pDSn7eRFDRkAGDSbhUXPj/2l5IHG5+S3oRyZhFRPqsxsFGNZFLec NjB+T5DZusyDK2x8Q58lOejaxcKRHpTxMJSurIX3rkxonbScVkv6z1FJucKIzmzi bWHJgzma41AONoJEceAcajBcRUhQS+2/3mVOiR/q3NSymDNyAu3ZwlhsoyMcb+Wl wKcXj7N0+QRWIaId93CyITA/CFUbhjW0pIr6g6tfrbvzK9gLPdYkOKcKaAUobSU5 HLWz1VM3OOljC4rzSUZDcAaxyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjSkZ+r /zfoa9FBYyN0BqCbKFgoMB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMXdVHkfo5qKFtKibTHEwnYPh3FhLsYp1w1LGQJ9N0WACy3iwxbNUh OjlZxSZXvJ2VE2ndGo0pXIa35NS8PQgwb5Xb+0tGiy4mo+roNU44znzm6pM0zBX/ TIEQ4MDOQRPG4wtSLEMA4YgQYfaFAtFXYgBtzI7b3DVLuYD72fNwkj5gpwsNJNE0 V76FSenURdTSqiaKVpfxisnM/qb2MnaR52FPIeS50tS94x4msMBbbKfS9ll8Fsb/ YN9syDzDXFZ96C1I2YYq3GCu7TMXzZTRQjSWmDVB7Owznehsj6dqGt0c60wYhWjl X+f10GWABMXf29tBUYbrfFpsgYJP5Rs9 -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:54 2025 by rpki-client