$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json) Hash identifier: 1qlDtcCI/13PMqHwTNGnmBfGHTnmQpejjKs/2pAYaBU= Subject key identifier: CB:C0:67:FE:51:C0:E7:B6:26:F5:4A:1D:EB:3A:42:97:06:E1:E8:A9 Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft Manifest number: B3 Signing time: Mon 03 Nov 2025 06:16:42 +0000 Manifest this update: Mon 03 Nov 2025 06:16:41 +0000 Manifest next update: Mon 10 Nov 2025 06:16:41 +0000 Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: oUPEqD1n8tNyFxXyMencubOHstYdYtUe+uTY68Uiu5M=) 2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: wZklMFDoQMrom29zHe2kxQjdWsUnZaq+ROOmp4NlaH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Validity Not Before: Nov 3 06:16:41 2025 GMT Not After : Nov 10 06:16:41 2025 GMT Subject: CN=690848c9-f5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:0c:55:3b:0c:5f:28:4f:22:02:2d:36:9b: 75:62:aa:5d:38:b8:5a:b3:bc:02:b7:4c:5f:13:92: 2e:80:1b:bc:f7:9c:eb:6b:c4:f0:48:6e:88:d9:35: c5:21:5e:ce:54:94:da:82:ae:20:af:fc:fc:42:0c: 05:32:93:4e:3f:18:af:ac:71:11:c3:d8:6b:7c:c0: c7:b9:57:a1:b9:39:96:92:84:1a:71:6d:37:72:50: 1a:50:1b:c7:24:0d:3d:45:2b:4d:27:15:9b:d4:3d: 7d:95:b1:fd:24:b7:3b:52:4a:8f:20:d8:76:4d:5c: b4:cd:23:a4:a3:1c:21:bf:34:ff:6e:02:6d:d7:b1: fb:ff:44:10:64:f6:e5:f5:cc:6f:35:f6:8d:bc:f6: e3:c6:30:0d:9e:77:c3:11:f6:75:e8:63:3b:9f:e7: 72:c0:78:d2:cf:4f:24:53:27:15:6b:8d:60:20:7c: 60:95:f4:c1:b4:cd:62:62:cb:56:59:43:e2:cd:89: a7:ad:f3:d9:f5:80:44:5e:59:37:e0:71:1c:d8:4d: df:50:66:42:9f:4c:5a:3e:57:65:89:e9:df:e4:80: ae:ab:0d:43:69:6d:69:21:65:94:05:51:25:71:41: 32:01:6f:7f:cb:e6:56:01:40:4e:89:2a:04:30:19: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C0:67:FE:51:C0:E7:B6:26:F5:4A:1D:EB:3A:42:97:06:E1:E8:A9 X509v3 Authority Key Identifier: keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cc:1e:15:81:3c:74:5a:06:98:fa:9b:64:5d:e1:88:cd:9a: f1:e7:60:72:a0:04:a7:b0:df:15:a7:f5:48:a6:68:3d:23:3d: cb:19:db:09:a9:af:49:72:7b:f8:02:b5:b2:15:eb:c5:38:f4: 53:47:df:e2:2b:65:51:7b:e4:32:ef:5a:ab:62:7e:eb:0e:be: 22:7f:1b:81:31:55:68:0e:d7:4e:19:b9:97:6b:bd:06:f9:54: 9c:ac:85:81:d0:bb:2a:39:0b:3f:93:57:ee:ad:3e:78:b4:76: 77:15:d7:01:db:e0:e1:74:7d:3a:f4:1f:4c:58:ff:65:ab:ae: 72:13:5f:73:0c:b4:08:f4:3a:6a:df:b2:fa:55:7d:4c:c6:74: 46:ba:71:cd:26:d4:71:3b:d4:72:55:f1:c8:10:79:a2:96:07: bf:15:50:b0:ec:13:53:c3:8b:ef:70:69:96:c9:03:f8:ee:0a: 05:85:4c:c7:30:ba:d5:1b:9f:30:6c:be:22:04:76:c7:e4:d3: e2:43:d2:82:9e:40:c2:eb:52:b2:55:15:2c:6b:dd:aa:6d:34: bf:2d:01:04:0f:11:83:a8:e8:fc:d2:38:a9:a4:35:db:fa:f8: 8a:41:0d:99:b9:5e:68:60:b9:ac:e1:58:cd:3a:38:a9:14:a8: 27:51:d6:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg5QUExMTAvBgNVBAUTKDI3N0YxMjI0NEE1MEJDNjU0RUU1NjNGRTczOUZFNEVC NzE5OTY2QjYwHhcNMjUxMTAzMDYxNjQxWhcNMjUxMTEwMDYxNjQxWjAYMRYwFAYD VQQDEw02OTA4NDhjOS1mNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnUMVTsMXyhPIgItNpt1YqpdOLhas7wCt0xfE5IugBu895zra8TwSG6I2TXF IV7OVJTagq4gr/z8QgwFMpNOPxivrHERw9hrfMDHuVehuTmWkoQacW03clAaUBvH JA09RStNJxWb1D19lbH9JLc7UkqPINh2TVy0zSOkoxwhvzT/bgJt17H7/0QQZPbl 9cxvNfaNvPbjxjANnnfDEfZ16GM7n+dywHjSz08kUycVa41gIHxglfTBtM1iYstW WUPizYmnrfPZ9YBEXlk34HEc2E3fUGZCn0xaPldlienf5ICuqw1DaW1pIWWUBVEl cUEyAW9/y+ZWAUBOiSoEMBklbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvAZ/5R wOe2JvVKHes6QpcG4eipMB8GA1UdIwQYMBaAFCd/EiRKULxlTuVj/nOf5OtxmWa2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODlBQS84NUQwRjM0NkJD NjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZHVk81V1AtYzVfazYzR1pa clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODlBQS84NUQwRjM0NkJDNjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZH Vk81V1AtYzVfazYzR1paclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzB4VgTx0WgaY+ptkXeGIzZrx52ByoASnsN8Vp/VIpmg9Iz3LGdsJ qa9Jcnv4ArWyFevFOPRTR9/iK2VRe+Qy71qrYn7rDr4ifxuBMVVoDtdOGbmXa70G +VScrIWB0LsqOQs/k1furT54tHZ3FdcB2+DhdH069B9MWP9lq65yE19zDLQI9Dpq 37L6VX1MxnRGunHNJtRxO9RyVfHIEHmilge/FVCw7BNTw4vvcGmWyQP47goFhUzH MLrVG58wbL4iBHbH5NPiQ9KCnkDC61KyVRUsa92qbTS/LQEEDxGDqOj80jippDXb +viKQQ2ZuV5oYLms4VjNOjipFKgnUdZW -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:34 2025 by rpki-client