$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: y9jDKdZK1FxqfCUUI+OUFUE2tdMYt2LsSPBao9brhPw= Subject key identifier: 4F:42:7B:3A:8C:3D:22:3A:83:AB:8D:95:8C:DB:34:15:F3:65:52:C7 Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 0768 Signing time: Wed 22 Oct 2025 22:32:42 +0000 Manifest this update: Wed 22 Oct 2025 22:32:41 +0000 Manifest next update: Wed 29 Oct 2025 22:32:41 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: 4Gc8U9k5SKakxf5WEfEdeSvQH4DCZIaDLqsw3wiRi0g=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Oct 22 22:32:41 2025 GMT Not After : Oct 29 22:32:41 2025 GMT Subject: CN=68f95b89-5333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:3d:58:dc:b9:b8:ae:12:0a:3c:3a:14:f5: 2e:04:e2:8f:fb:5e:04:3e:76:7b:1a:0d:e0:74:24: f9:3a:24:f8:69:f7:41:53:33:9a:3b:70:4c:77:56: f1:5b:f8:9f:3a:c1:85:8f:22:4e:9b:f8:62:09:cb: ee:21:ba:a7:60:a5:77:ff:92:b5:0d:3f:fc:c9:0a: 4c:77:e4:4a:b0:cc:f6:98:d9:ad:27:90:ff:1b:02: 98:cb:71:3b:b5:93:4a:84:f1:72:06:59:65:58:3e: 96:ca:50:6e:39:e5:21:0e:40:62:b3:6f:af:db:1b: 29:f7:ae:d4:2d:5b:9e:5a:88:9f:fe:34:b4:9b:4d: 34:fa:8c:f8:6b:13:3f:e1:36:04:d4:7a:bb:9e:07: 43:12:7b:55:70:eb:d9:6f:aa:6d:37:d9:ac:1c:c3: a4:38:31:4b:14:ef:84:bc:c0:83:8e:57:e0:e6:f7: 2c:1a:b9:79:aa:2a:23:f0:cd:b5:aa:a5:d4:73:f7: 6c:5c:cb:da:e8:35:e8:0a:56:69:e1:59:4a:77:3c: 15:a3:4f:d2:5d:d8:d3:df:14:99:86:d1:f6:69:17: e5:7a:ab:ec:a7:61:c1:d2:93:66:ec:d0:25:f7:ba: 4c:b4:0c:5c:b2:17:bd:42:ae:28:6d:83:25:60:51: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:42:7B:3A:8C:3D:22:3A:83:AB:8D:95:8C:DB:34:15:F3:65:52:C7 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:0a:c1:6d:42:eb:e8:4a:60:bc:a9:b4:0e:31:ac:c5:ab:27: 99:57:62:08:a7:ab:5c:0f:c2:af:e5:1f:89:c0:06:63:24:3e: b5:7f:0b:8f:a8:66:4f:90:f5:ee:89:fe:78:49:aa:78:97:1e: be:48:d9:2b:22:0e:ae:9c:19:fc:0b:ea:6d:fe:3f:c8:b2:8b: 3a:19:ec:df:fc:61:3f:c4:c6:41:9a:c2:d5:71:76:d2:33:51: b2:20:1e:40:59:15:a6:c3:fc:60:fd:72:44:e2:2e:46:96:10: e6:d6:5c:21:3e:c4:f3:a7:dd:8e:49:d4:0a:f1:1c:51:af:2e: 56:1c:69:4c:10:02:7d:a7:e9:40:bd:12:44:13:80:21:cc:57: d1:d0:a5:d5:5e:e7:12:9b:e6:2e:dc:bf:0a:0f:2c:41:60:2e: 02:1b:82:2f:bc:7f:03:d0:5c:cc:9c:f8:a6:e5:c3:a8:ab:60: ab:ff:45:1a:3b:75:5c:76:f0:9a:4d:8f:4b:53:55:b4:26:5d: d9:67:e9:89:b9:43:8f:50:56:70:7b:48:c2:c3:49:14:25:fa: 15:ea:69:bd:53:50:af:e7:7a:91:41:1b:eb:36:6b:13:15:8a: 61:a3:de:9b:e7:af:69:fd:c4:2f:9c:a4:d8:9b:ef:0e:7d:34: e5:48:f8:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjUxMDIyMjIzMjQxWhcNMjUxMDI5MjIzMjQxWjAYMRYwFAYD VQQDEw02OGY5NWI4OS01MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EI9WNy5uK4SCjw6FPUuBOKP+14EPnZ7Gg3gdCT5OiT4afdBUzOaO3BMd1bx W/ifOsGFjyJOm/hiCcvuIbqnYKV3/5K1DT/8yQpMd+RKsMz2mNmtJ5D/GwKYy3E7 tZNKhPFyBlllWD6WylBuOeUhDkBis2+v2xsp967ULVueWoif/jS0m000+oz4axM/ 4TYE1Hq7ngdDEntVcOvZb6ptN9msHMOkODFLFO+EvMCDjlfg5vcsGrl5qioj8M21 qqXUc/dsXMva6DXoClZp4VlKdzwVo0/SXdjT3xSZhtH2aRfleqvsp2HB0pNm7NAl 97pMtAxcshe9Qq4obYMlYFE9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9CezqM PSI6g6uNlYzbNBXzZVLHMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsCsFtQuvoSmC8qbQOMazFqyeZV2IIp6tcD8Kv5R+JwAZjJD61fwuP qGZPkPXuif54Sap4lx6+SNkrIg6unBn8C+pt/j/Isos6Gezf/GE/xMZBmsLVcXbS M1GyIB5AWRWmw/xg/XJE4i5GlhDm1lwhPsTzp92OSdQK8RxRry5WHGlMEAJ9p+lA vRJEE4AhzFfR0KXVXucSm+Yu3L8KDyxBYC4CG4IvvH8D0FzMnPim5cOoq2Cr/0Ua O3VcdvCaTY9LU1W0Jl3ZZ+mJuUOPUFZwe0jCw0kUJfoV6mm9U1Cv53qRQRvrNmsT FYpho96b569p/cQvnKTYm+8OfTTlSPix -----END CERTIFICATE-----Generated at Thu Oct 23 05:26:44 2025 by rpki-client