$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json) Hash identifier: svzPpH3ZQv8rxwTTd8W1YHCN/IxYvE7bE+tGg9O1JGA= Subject key identifier: 86:1C:26:4C:CD:5E:32:F7:70:1A:F1:C4:EF:FA:67:68:6C:87:07:7D Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03 Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft Manifest number: 49 Signing time: Wed 05 Nov 2025 07:32:14 +0000 Manifest this update: Wed 05 Nov 2025 07:32:13 +0000 Manifest next update: Wed 12 Nov 2025 07:32:13 +0000 Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: J57ret58toFmvvg2EznKTfQzovyEKs+vXd9KDl+07wo=) 2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: OZHK+au5UwVImKpl7QVZcEGwIUNhlUMC18l25bqrmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03 Validity Not Before: Nov 5 07:32:13 2025 GMT Not After : Nov 12 07:32:13 2025 GMT Subject: CN=690afd7e-9568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:ff:4a:0f:18:38:23:db:2e:14:b8:14:d3: f5:f2:3b:2f:bc:8c:ff:b7:1e:c9:97:67:84:a1:f0: 2e:46:d0:1f:95:b8:ff:2f:ae:e8:5e:69:0d:04:a8: db:55:06:63:22:e4:37:27:4d:72:c0:a5:39:68:7f: 08:0f:13:ea:59:cf:42:6b:80:1d:4a:95:b2:62:c6: 19:7b:42:2a:58:b9:ad:54:88:8f:60:c9:cd:c8:22: 3e:b9:7f:0a:b9:cc:e6:80:80:20:fe:24:92:35:6c: 36:0b:68:34:87:49:ab:49:89:18:28:08:47:8c:a1: 88:e1:63:4a:5c:40:26:a9:99:34:14:a0:ed:52:1f: d9:97:fa:2d:bd:57:97:29:4e:0e:69:b9:17:1e:31: 19:17:71:96:f6:5f:82:47:09:19:8f:1a:e2:9b:87: e7:14:60:8e:66:59:eb:8b:2e:a2:15:22:ef:81:62: a8:c6:dc:b4:8b:a6:3a:17:b5:39:21:95:67:f3:b5: 41:eb:ee:61:1c:ef:88:f9:14:25:24:ce:32:75:e4: f2:dd:24:0f:8c:7e:62:98:85:18:f0:55:12:25:f3: 39:3e:c8:f0:63:65:4a:12:99:10:4b:72:c9:56:86: bf:7e:e8:0f:e6:3f:6e:62:3a:cc:d4:32:24:b2:d4: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:26:4C:CD:5E:32:F7:70:1A:F1:C4:EF:FA:67:68:6C:87:07:7D X509v3 Authority Key Identifier: keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5e:57:ef:41:64:21:d3:21:5f:a4:3c:88:30:95:7c:15:92: eb:c7:26:ff:e9:53:ba:0a:82:1c:77:c8:35:1c:14:39:21:9f: 88:5a:fa:0b:06:63:79:f5:b7:c5:32:97:c7:d7:5b:71:17:8d: 09:09:5b:94:0d:d9:5a:a2:9e:3e:cb:18:fa:48:09:f3:75:10: 66:5e:c7:39:04:4d:a0:a2:aa:e0:2b:f1:33:94:b7:aa:93:7d: a4:e6:90:81:52:47:70:13:b9:cf:78:8e:b5:99:e0:75:52:c8: 15:c6:7e:1e:d3:e2:c2:cc:2a:02:fc:f5:df:24:08:e2:bf:85: 6a:a0:13:fe:a6:9a:8a:71:9e:1d:96:a2:0b:06:52:1b:cc:49: 79:22:28:7f:d7:73:e2:ad:27:00:d5:82:e1:98:fa:2f:c7:8b: b4:7f:44:65:45:cf:f8:53:94:5e:70:58:14:ca:8d:d6:66:6b: b1:42:30:25:cb:55:25:73:8c:92:4f:2b:bd:d0:12:de:55:4d: 61:06:e9:40:bf:03:00:17:3a:78:d4:93:02:f8:79:5c:3c:5a: 99:89:b9:0e:fa:73:29:86:35:89:95:ba:1a:bc:ff:80:60:42: 87:6f:2c:6b:3e:1b:08:e6:ec:d2:db:45:17:b2:86:ce:96:fa: 51:c0:e3:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoMjQ1RkY0NUMyODY1MkJGNzE1NjU4NUEzRkQ5QTc5NzRF NTM3NUQwMzAeFw0yNTExMDUwNzMyMTNaFw0yNTExMTIwNzMyMTNaMBgxFjAUBgNV BAMTDTY5MGFmZDdlLTk1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfhf9KDxg4I9suFLgU0/XyOy+8jP+3HsmXZ4Sh8C5G0B+VuP8vruheaQ0EqNtV BmMi5DcnTXLApTlofwgPE+pZz0JrgB1KlbJixhl7QipYua1UiI9gyc3IIj65fwq5 zOaAgCD+JJI1bDYLaDSHSatJiRgoCEeMoYjhY0pcQCapmTQUoO1SH9mX+i29V5cp Tg5puRceMRkXcZb2X4JHCRmPGuKbh+cUYI5mWeuLLqIVIu+BYqjG3LSLpjoXtTkh lWfztUHr7mEc74j5FCUkzjJ15PLdJA+MfmKYhRjwVRIl8zk+yPBjZUoSmRBLcslW hr9+6A/mP25iOszUMiSy1IUVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhhwmTM1e MvdwGvHE7/pnaGyHB30wHwYDVR0jBBgwFoAUJF/0XChlK/cVZYWj/Zp5dOU3XQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0I2M0YzMUFFNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19jVlpZV2pfWnA1ZE9VM1hR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkZfMFhDaGxLX2NWWllXal9acDVkT1UzWFFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0I2M0YzMUFFNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19j VlpZV2pfWnA1ZE9VM1hRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAheV+9BZCHTIV+kPIgwlXwVkuvHJv/pU7oKghx3yDUcFDkhn4ha+gsG Y3n1t8Uyl8fXW3EXjQkJW5QN2Vqinj7LGPpICfN1EGZexzkETaCiquAr8TOUt6qT faTmkIFSR3ATuc94jrWZ4HVSyBXGfh7T4sLMKgL89d8kCOK/hWqgE/6mmopxnh2W ogsGUhvMSXkiKH/Xc+KtJwDVguGY+i/Hi7R/RGVFz/hTlF5wWBTKjdZma7FCMCXL VSVzjJJPK73QEt5VTWEG6UC/AwAXOnjUkwL4eVw8WpmJuQ76cymGNYmVuhq8/4Bg QodvLGs+Gwjm7NLbRReyhs6W+lHA4ww= -----END CERTIFICATE-----Generated at Wed Nov 5 12:29:07 2025 by rpki-client