$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: jiNqH9JykDAKG15JjzwJDQnK6o+vhxLOD2bw3+VAsiA= Subject key identifier: 85:F5:C8:D6:42:62:1A:46:7A:59:21:9D:B7:CC:33:53:EC:FA:57:A9 Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 0242 Signing time: Wed 05 Nov 2025 01:52:44 +0000 Manifest this update: Wed 05 Nov 2025 01:52:43 +0000 Manifest next update: Wed 12 Nov 2025 01:52:43 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: r+uLbTJvcaIMW2yj/FT5pJS/Bdjk3mFnJIA7KYQayp8=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Nov 5 01:52:43 2025 GMT Not After : Nov 12 01:52:43 2025 GMT Subject: CN=690aadeb-1223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:41:25:9f:cc:67:2f:73:69:b6:13:2f:29: 66:ca:d4:4f:43:fa:8c:ec:9f:2d:1c:af:55:c7:6b: 24:79:8d:cf:0d:0b:30:c3:fd:5b:dd:2e:3a:be:e7: 43:1e:2f:18:ef:b7:84:a5:dc:7f:93:a8:8b:84:d0: d7:b8:2b:25:52:c2:71:fd:d9:23:6f:05:02:44:93: d8:4c:6c:e1:f8:10:3c:62:4e:2f:b7:80:2f:bb:62: 5c:e5:63:4d:66:d8:d6:9b:98:78:90:26:57:8c:73: 60:3c:1b:92:3d:19:b5:1b:06:16:f4:72:ef:00:00: 4e:67:67:fd:8e:65:0f:87:ca:00:5d:df:f6:d8:da: e4:e5:97:11:94:f0:42:f4:e1:99:6b:25:36:04:ef: e0:01:6f:5b:0e:a1:0f:b9:0a:a8:19:23:ba:85:17: 5b:d3:41:1d:a4:76:10:ee:44:91:bc:1a:42:41:ba: af:1b:6f:13:5a:bc:e3:45:00:75:58:c8:59:7c:e2: 86:ef:29:6c:fa:2c:b3:80:a6:cb:06:a6:0a:6e:1c: e3:84:1c:1f:6a:38:bc:89:89:9a:0f:76:7e:e1:48: 7a:16:43:bd:23:a9:1a:e5:8e:9d:16:83:50:a1:08: 5f:07:e6:6d:d8:71:0b:29:5c:4d:4a:f5:13:6e:7f: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F5:C8:D6:42:62:1A:46:7A:59:21:9D:B7:CC:33:53:EC:FA:57:A9 X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f1:bf:21:81:e9:f2:a8:a8:ec:c5:69:d6:59:f2:45:f7:58: f0:02:04:5e:0b:34:18:f4:e1:0b:e3:47:77:99:ca:c9:ad:75: 3e:d7:98:b1:cc:48:d0:91:53:67:05:a2:58:33:aa:bc:8a:7e: b0:77:89:a7:d6:54:7c:12:d5:49:ef:41:1d:d5:f4:e7:2d:02: cf:80:1d:ae:b1:37:7c:b1:b2:dc:64:9a:f4:7f:22:c8:99:bc: a8:49:6e:df:50:d2:55:5b:8a:d9:33:42:3c:17:5d:a8:fb:2c: 68:ca:9f:74:d9:5d:1d:71:42:85:ac:b5:81:aa:80:e9:82:76: e5:68:1f:ff:1b:17:76:49:f7:b1:69:da:64:44:9c:55:bf:9e: 1b:59:94:43:4d:e2:a0:f4:f2:4a:98:93:cf:d6:78:1f:97:f8: ef:0f:15:c4:6d:56:b2:56:a0:13:de:bc:b9:33:09:29:4e:b1: 92:16:62:3f:37:2a:ce:74:4e:8b:a1:d5:6d:63:19:26:0c:47: 3c:2e:da:f4:3d:68:7f:60:79:aa:32:cf:0c:2c:4a:bc:5e:a3: 57:e9:52:be:c6:ae:1b:73:fe:a0:ba:10:86:f9:10:27:fe:a0: b0:9c:99:08:e8:07:38:b9:ea:b2:76:f5:9d:f8:f3:1d:db:51: e6:da:4e:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUxMTA1MDE1MjQzWhcNMjUxMTEyMDE1MjQzWjAYMRYwFAYD VQQDEw02OTBhYWRlYi0xMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2dBJZ/MZy9zabYTLylmytRPQ/qM7J8tHK9Vx2skeY3PDQsww/1b3S46vudD Hi8Y77eEpdx/k6iLhNDXuCslUsJx/dkjbwUCRJPYTGzh+BA8Yk4vt4Avu2Jc5WNN ZtjWm5h4kCZXjHNgPBuSPRm1GwYW9HLvAABOZ2f9jmUPh8oAXd/22Nrk5ZcRlPBC 9OGZayU2BO/gAW9bDqEPuQqoGSO6hRdb00EdpHYQ7kSRvBpCQbqvG28TWrzjRQB1 WMhZfOKG7yls+iyzgKbLBqYKbhzjhBwfaji8iYmaD3Z+4Uh6FkO9I6ka5Y6dFoNQ oQhfB+Zt2HELKVxNSvUTbn8+YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX1yNZC YhpGelkhnbfMM1Ps+lepMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs8b8hgenyqKjsxWnWWfJF91jwAgReCzQY9OEL40d3mcrJrXU+15ix zEjQkVNnBaJYM6q8in6wd4mn1lR8EtVJ70Ed1fTnLQLPgB2usTd8sbLcZJr0fyLI mbyoSW7fUNJVW4rZM0I8F12o+yxoyp902V0dcUKFrLWBqoDpgnblaB//Gxd2Sfex adpkRJxVv54bWZRDTeKg9PJKmJPP1ngfl/jvDxXEbVayVqAT3ry5MwkpTrGSFmI/ NyrOdE6LodVtYxkmDEc8Ltr0PWh/YHmqMs8MLEq8XqNX6VK+xq4bc/6guhCG+RAn /qCwnJkI6Ac4ueqydvWd+PMd21Hm2k6f -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:03 2025 by rpki-client