$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft File: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json) Hash identifier: zWT7d517dwjrLabVhSecFZ/LS0sRDbrmNQSqt1svH6E= Subject key identifier: C9:59:20:6F:62:94:D5:5D:41:47:85:9E:97:D5:0D:E9:F8:D3:C8:80 Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B Certificate issuer: /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft Manifest number: 0185 Signing time: Mon 03 Nov 2025 03:38:46 +0000 Manifest this update: Mon 03 Nov 2025 03:38:46 +0000 Manifest next update: Mon 10 Nov 2025 03:38:46 +0000 Files and hashes: 1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: A6fR6uUQAmNgAkzlrNwStrrO0UX2e2joXIK3HPkIuZE=) 2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: A3UoC+eD4LWvV0sQ3hMRTRUEpIyxxhW+ZYQuaZu5Frk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B Validity Not Before: Nov 3 03:38:46 2025 GMT Not After : Nov 10 03:38:46 2025 GMT Subject: CN=690823c6-fa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:a7:db:6f:4a:f7:a3:65:0d:80:de:c2:35: 74:38:75:ca:73:07:90:8d:e6:7c:fa:cc:59:97:7b: bd:ab:c3:e5:f2:04:db:b5:ff:fb:2e:1d:f2:f0:9c: 99:b5:01:53:cb:23:28:39:ab:f0:9b:76:fb:ae:bb: 26:5a:33:ec:46:2b:8a:97:b2:22:af:c3:f6:85:16: cd:20:61:e5:c9:4f:47:f5:ef:5a:db:e3:bf:52:a9: e5:03:12:5d:08:3a:23:95:fd:28:7e:31:7a:c2:42: df:8f:6e:d3:8a:02:b3:fe:c9:30:1d:18:39:a1:17: 44:69:86:a5:dd:c5:f0:86:45:4a:97:0a:46:39:a1: be:af:70:67:e7:7a:11:75:4f:56:f3:64:4a:15:db: 88:39:a8:21:ec:52:8a:97:50:42:93:06:3a:f4:3e: 54:c4:f1:00:38:02:27:f3:5b:40:57:1b:e6:28:85: cf:f9:d1:ac:e0:db:91:25:a4:9e:8b:38:df:3f:04: 9f:9f:e6:18:bf:40:c9:49:55:48:cc:98:ec:b3:02: 03:b1:7e:5e:67:29:08:a3:eb:03:9d:5a:b6:3a:11: b8:dd:d6:fb:43:04:50:ef:04:e9:32:7b:01:e1:b5: 4f:ed:83:19:c0:a0:52:46:4b:8b:b0:53:58:ac:f0: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:59:20:6F:62:94:D5:5D:41:47:85:9E:97:D5:0D:E9:F8:D3:C8:80 X509v3 Authority Key Identifier: keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:08:af:72:27:fe:bb:78:b2:96:ce:9f:8e:17:12:60:92:5a: 69:cd:5b:8f:51:1f:8a:36:44:23:49:59:0d:f4:45:20:f2:69: ef:10:88:b8:6c:b1:9d:04:80:1e:91:e7:df:cc:de:12:2a:79: 80:c9:1a:39:e7:b7:f8:fe:b1:10:ed:95:f9:a8:59:28:4e:e0: a2:2a:48:8c:6e:ce:6f:ae:93:97:fd:c3:a4:c0:c6:d0:2e:1c: dd:0c:88:8d:33:0d:03:16:9c:16:6a:68:11:25:a1:ea:0f:39: d8:e8:98:4d:b6:f4:42:59:e7:9e:a9:90:53:dd:76:bc:5c:cb: f9:62:26:c3:01:5e:87:ed:26:45:5b:15:7b:d4:eb:8e:69:3d: d5:ca:37:c4:98:81:06:87:64:80:ae:6f:3e:f3:91:8d:22:fd: f3:cb:d4:ae:5a:88:bb:ab:09:f8:0d:04:dc:cf:ad:e8:4c:eb: fc:26:cf:56:a0:45:de:0e:27:8c:d9:59:ed:c5:e0:f0:bd:65: 6d:48:63:1a:2e:ee:8e:0b:48:a4:65:05:f6:43:6d:14:2a:62: 39:48:fc:34:96:05:7f:0a:a6:50:b1:25:e7:f2:54:ad:48:7c: 9f:a2:ec:e0:40:d3:0c:de:63:67:b1:3e:e3:e4:73:36:9c:68: 59:7d:04:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQUYxMTAvBgNVBAUTKDI3QjJFNjYyOTE0ODIyMTM2QjA5NjJEQkI1QkE0NDdD MjUzRjUyMUIwHhcNMjUxMTAzMDMzODQ2WhcNMjUxMTEwMDMzODQ2WjAYMRYwFAYD VQQDEw02OTA4MjNjNi1mYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn6n229K96NlDYDewjV0OHXKcweQjeZ8+sxZl3u9q8Pl8gTbtf/7Lh3y8JyZ tQFTyyMoOavwm3b7rrsmWjPsRiuKl7Iir8P2hRbNIGHlyU9H9e9a2+O/UqnlAxJd CDojlf0ofjF6wkLfj27TigKz/skwHRg5oRdEaYal3cXwhkVKlwpGOaG+r3Bn53oR dU9W82RKFduIOagh7FKKl1BCkwY69D5UxPEAOAIn81tAVxvmKIXP+dGs4NuRJaSe izjfPwSfn+YYv0DJSVVIzJjsswIDsX5eZykIo+sDnVq2OhG43db7QwRQ7wTpMnsB 4bVP7YMZwKBSRkuLsFNYrPA1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlZIG9i lNVdQUeFnpfVDen408iAMB8GA1UdIwQYMBaAFCey5mKRSCITawli27W6RHwlP1Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNBRi8wRjYxODg2QTZC MzIxMUVFOUI1MjIwNTNDNEY5QUUwMi9KN0xtWXBGSUloTnJDV0xidGJwRWZDVV9V aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3TG1ZcEZJSWhOckNXTGJ0YnBFZkNVX1Vocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNBRi8wRjYxODg2QTZCMzIxMUVFOUI1MjIwNTNDNEY5QUUwMi9KN0xtWXBGSUlo TnJDV0xidGJwRWZDVV9VaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsCK9yJ/67eLKWzp+OFxJgklppzVuPUR+KNkQjSVkN9EUg8mnvEIi4 bLGdBIAekeffzN4SKnmAyRo557f4/rEQ7ZX5qFkoTuCiKkiMbs5vrpOX/cOkwMbQ LhzdDIiNMw0DFpwWamgRJaHqDznY6JhNtvRCWeeeqZBT3Xa8XMv5YibDAV6H7SZF WxV71OuOaT3VyjfEmIEGh2SArm8+85GNIv3zy9SuWoi7qwn4DQTcz63oTOv8Js9W oEXeDieM2VntxeDwvWVtSGMaLu6OC0ikZQX2Q20UKmI5SPw0lgV/CqZQsSXn8lSt SHyfouzgQNMM3mNnsT7j5HM2nGhZfQRU -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:02 2025 by rpki-client