$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json) Hash identifier: CGVm5IBYrxovBJxNCEnbD8JzqY7qoOz5PH6rB35QIF8= Subject key identifier: A1:86:E4:0C:B3:E0:8C:D9:42:B2:15:A6:28:AC:D9:15:CA:2E:9E:F4 Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft Manifest number: 4C Signing time: Mon 27 Oct 2025 09:47:48 +0000 Manifest this update: Mon 27 Oct 2025 09:47:47 +0000 Manifest next update: Mon 03 Nov 2025 09:47:47 +0000 Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: c716C2DTJ7Mg2JyHI5JLovyXpJw0Fvw3uTuMpNi6Gcg=) 2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: Lf3alCeyUDstgnP7x5+oblCm0tv/uJ2YmuuNF6Xn0z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 09:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Validity Not Before: Oct 27 09:47:47 2025 GMT Not After : Nov 3 09:47:47 2025 GMT Subject: CN=68ff3fc3-447c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:fc:d6:89:02:5a:7a:20:db:29:d3:2c:49: 85:d5:f0:1f:9e:d9:49:f6:e8:a3:55:08:83:8a:48: 42:69:7c:a9:96:11:01:77:ec:55:fb:57:ed:71:51: 5c:df:ab:e4:4b:15:cb:76:f9:a4:cd:da:95:b0:4f: 7c:9a:92:b1:d8:54:77:a8:fd:6a:3c:46:38:da:29: 4b:93:e1:34:cc:e2:af:3d:be:6c:18:44:77:4e:d8: bb:93:8f:6c:c0:36:fa:41:35:a2:13:a0:5c:b4:3c: 03:2f:a5:13:9c:94:66:fb:ec:b9:78:ab:6d:9f:1b: f2:b5:2f:90:ee:b6:c6:32:e4:a8:0d:0c:0b:b7:cf: f9:1e:23:7b:4e:0a:96:23:87:8e:5f:09:2f:14:74: 21:25:ea:33:14:8f:6b:8f:d7:8c:ab:be:d8:c9:bd: 36:86:a6:f1:8b:2b:0b:8f:f4:83:e4:45:38:96:1f: 30:06:af:80:69:cf:b0:ae:bf:ee:ea:d5:17:30:70: a7:04:bd:ba:41:a5:26:6a:a4:75:f0:d5:3e:0b:6d: f7:40:58:f7:58:09:02:af:20:4d:3c:f6:ec:b8:67: 92:ff:ea:bb:15:8b:2c:9b:91:40:80:a6:30:f1:8d: 0a:1a:fa:4c:42:0b:e4:12:d5:f9:da:37:aa:b8:cf: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:86:E4:0C:B3:E0:8C:D9:42:B2:15:A6:28:AC:D9:15:CA:2E:9E:F4 X509v3 Authority Key Identifier: keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:c5:11:af:7e:7c:d3:f8:be:f3:e5:5b:15:b4:02:8c:54: 85:70:2b:2b:e0:c8:1c:32:51:b7:ce:04:04:e6:ef:e8:60:da: ea:ee:84:3c:d5:5e:ff:d1:0c:30:c8:8c:95:80:10:f5:5e:27: ea:1c:32:88:8b:22:2c:f3:4a:3e:8a:a8:91:51:89:62:4a:ea: fb:db:57:84:1d:39:6f:50:94:b6:32:93:3c:d5:31:45:8b:15: 5d:b5:de:60:14:15:38:f8:d8:9d:8c:bb:1f:0e:1c:3f:75:46: 08:c3:4f:50:2d:75:47:f9:bf:5f:18:61:4c:b7:ee:35:4f:e7: 6b:62:a6:da:21:56:50:8d:69:dd:c4:10:f4:23:40:39:8d:89: b0:42:fa:ee:72:10:0a:35:20:f2:14:45:f1:d9:a6:20:e8:27: 14:f3:a9:1c:6e:6f:cb:36:9f:f2:1f:ea:fd:d1:f9:90:18:30: 50:af:53:bf:75:ef:3f:21:c8:12:21:4f:c5:4a:71:4b:c9:05: 43:e6:f3:a7:ad:38:4a:9b:a2:34:9a:59:bc:d6:75:a9:fa:66: c6:89:57:7a:bf:8f:22:ab:66:3a:a6:07:63:44:af:66:a9:4f: ac:cd:0e:a5:4d:96:7f:46:16:3f:3e:db:ff:a9:f9:d8:53:7b: 9a:1b:a2:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REYyQjExMC8GA1UEBRMoOENEMTkwQTE0M0FBMkUxRTQ4NzMwM0IxM0RDMDUzRUQx N0JDRUIxRTAeFw0yNTEwMjcwOTQ3NDdaFw0yNTExMDMwOTQ3NDdaMBgxFjAUBgNV BAMTDTY4ZmYzZmMzLTQ0N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCea/zWiQJaeiDbKdMsSYXV8B+e2Un26KNVCIOKSEJpfKmWEQF37FX7V+1xUVzf q+RLFct2+aTN2pWwT3yakrHYVHeo/Wo8RjjaKUuT4TTM4q89vmwYRHdO2LuTj2zA NvpBNaIToFy0PAMvpROclGb77Ll4q22fG/K1L5DutsYy5KgNDAu3z/keI3tOCpYj h45fCS8UdCEl6jMUj2uP14yrvtjJvTaGpvGLKwuP9IPkRTiWHzAGr4Bpz7Cuv+7q 1RcwcKcEvbpBpSZqpHXw1T4LbfdAWPdYCQKvIE089uy4Z5L/6rsViyybkUCApjDx jQoa+kxCC+QS1fnaN6q4z0SRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoYbkDLPg jNlCshWmKKzZFcounvQwHwYDVR0jBBgwFoAUjNGQoUOqLh5IcwOxPcBT7Re86x4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERjJCLzZDMkI3QjFDNDFC QjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1SWN3T3hQY0JUN1JlODZ4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5HUW9VT3FMaDVJY3dPeFBjQlQ3UmU4Nng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RjJCLzZDMkI3QjFDNDFCQjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1 SWN3T3hQY0JUN1JlODZ4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHUNxRGvfnzT+L7z5VsVtAKMVIVwKyvgyBwyUbfOBATm7+hg2uruhDzV Xv/RDDDIjJWAEPVeJ+ocMoiLIizzSj6KqJFRiWJK6vvbV4QdOW9QlLYykzzVMUWL FV213mAUFTj42J2Mux8OHD91RgjDT1AtdUf5v18YYUy37jVP52tiptohVlCNad3E EPQjQDmNibBC+u5yEAo1IPIURfHZpiDoJxTzqRxub8s2n/If6v3R+ZAYMFCvU791 7z8hyBIhT8VKcUvJBUPm86etOEqbojSaWbzWdan6ZsaJV3q/jyKrZjqmB2NEr2ap T6zNDqVNln9GFj8+2/+p+dhTe5oboiw= -----END CERTIFICATE-----Generated at Tue Oct 28 20:19:06 2025 by rpki-client