$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: P8a+1THlTC1usRDe/B0ZoZXnHb0Ct47w94tc0gi7GI0= Subject key identifier: A1:05:50:21:75:09:78:14:F4:86:D6:76:87:CC:6A:54:D2:DD:BE:A9 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 1577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 156E Signing time: Wed 22 Oct 2025 17:06:55 +0000 Manifest this update: Wed 22 Oct 2025 17:06:54 +0000 Manifest next update: Wed 29 Oct 2025 17:06:54 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: R9kGkwPftzKxxXsJNsGkDJSDKIw7JfhZ6HxBJIKBHBY=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5495 (0x1577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Oct 22 17:06:54 2025 GMT Not After : Oct 29 17:06:54 2025 GMT Subject: CN=68f90f2e-3b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:b9:45:e5:7f:c4:81:bd:5a:18:e5:0e:83: fc:89:79:55:18:0d:1e:0a:39:32:5d:be:e6:bb:0d: 93:e9:48:7b:93:12:7b:8b:86:8a:19:73:12:ef:96: d0:10:6e:d5:72:3e:7d:3e:59:7a:5a:d9:94:b6:73: d9:52:0c:57:fc:1c:da:13:5f:12:f7:f1:be:2a:1f: d7:fb:4c:f6:d1:3f:8e:25:b5:d4:89:ac:2e:f1:64: 06:98:89:c7:70:14:4d:d2:69:43:a9:02:e8:3a:0e: 39:60:9f:9a:49:52:b5:de:1b:91:77:01:13:af:5f: a1:f0:49:9b:8b:6c:91:d9:b8:76:c1:48:e6:2a:34: b2:d5:b8:7f:98:f9:4f:a3:89:39:92:3e:97:ef:96: 7e:50:4b:b3:6c:51:09:9e:cd:4c:71:dd:cb:2f:af: 90:21:27:35:aa:28:f2:f9:6b:51:8d:6c:21:2b:39: c8:07:ef:f2:ad:20:ef:11:8f:4a:a2:f8:e3:1e:4f: d4:f5:bd:00:67:e8:63:4d:74:b7:76:cf:e0:0b:fa: c5:a2:3c:58:bf:68:56:e0:fb:fc:51:7d:be:9e:12: f2:6d:49:20:96:dd:6e:7c:8a:96:46:0f:92:3a:29: da:1c:1b:1c:3b:09:7b:b8:33:0f:ad:99:d9:34:72: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:05:50:21:75:09:78:14:F4:86:D6:76:87:CC:6A:54:D2:DD:BE:A9 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:96:28:e3:52:c5:ed:16:78:b1:34:df:26:f9:0d:dd:8d:43: 91:bb:fa:e8:d7:0c:98:ae:0d:36:27:41:e1:a8:f5:c0:c8:5a: 99:56:65:95:22:d1:5f:5a:57:c5:c3:59:bb:60:1f:fb:f5:1c: ac:18:ac:4c:46:ce:ed:2f:72:11:c9:3c:22:a6:79:80:31:ad: 6b:93:d5:1f:ae:90:91:56:e8:d2:bd:fe:af:56:65:73:ce:72: 22:8e:01:4e:f6:8a:c1:bf:01:2d:09:a8:57:c8:35:4d:6c:c5: 8b:43:eb:7f:59:d6:d0:19:11:31:74:da:d8:fd:b6:fe:9f:1a: 6f:87:86:c7:ba:c9:96:2e:e4:0a:01:11:0d:40:74:01:88:a2: 34:db:b3:7e:f8:f0:0b:61:be:ea:13:9d:2a:26:f5:b3:bd:a1: 5f:e5:8a:34:a7:cc:d7:79:26:cd:1a:dd:4e:64:da:fa:4f:32: bf:4d:a3:45:80:67:13:0d:44:66:99:e9:e3:11:f0:b0:92:90: 39:26:da:7a:66:98:aa:b1:a5:bb:7b:ca:ec:e0:42:be:32:4d: 8c:2e:c7:4a:d7:32:fa:4b:93:36:49:01:04:8a:49:25:da:8c: 85:66:b7:0c:50:28:eb:d4:8f:90:5d:28:3c:2d:b7:8c:1c:36: 30:0d:b3:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUxMDIyMTcwNjU0WhcNMjUxMDI5MTcwNjU0WjAYMRYwFAYD VQQDEw02OGY5MGYyZS0zYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxki5ReV/xIG9WhjlDoP8iXlVGA0eCjkyXb7muw2T6Uh7kxJ7i4aKGXMS75bQ EG7Vcj59Pll6WtmUtnPZUgxX/BzaE18S9/G+Kh/X+0z20T+OJbXUiawu8WQGmInH cBRN0mlDqQLoOg45YJ+aSVK13huRdwETr1+h8Embi2yR2bh2wUjmKjSy1bh/mPlP o4k5kj6X75Z+UEuzbFEJns1Mcd3LL6+QISc1qijy+WtRjWwhKznIB+/yrSDvEY9K ovjjHk/U9b0AZ+hjTXS3ds/gC/rFojxYv2hW4Pv8UX2+nhLybUkglt1ufIqWRg+S OinaHBscOwl7uDMPrZnZNHJg6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEFUCF1 CXgU9IbWdofMalTS3b6pMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCklijjUsXtFnixNN8m+Q3djUORu/ro1wyYrg02J0HhqPXAyFqZVmWV ItFfWlfFw1m7YB/79RysGKxMRs7tL3IRyTwipnmAMa1rk9UfrpCRVujSvf6vVmVz znIijgFO9orBvwEtCahXyDVNbMWLQ+t/WdbQGRExdNrY/bb+nxpvh4bHusmWLuQK ARENQHQBiKI027N++PALYb7qE50qJvWzvaFf5Yo0p8zXeSbNGt1OZNr6TzK/TaNF gGcTDURmmenjEfCwkpA5Jtp6ZpiqsaW7e8rs4EK+Mk2MLsdK1zL6S5M2SQEEikkl 2oyFZrcMUCjr1I+QXSg8LbeMHDYwDbOJ -----END CERTIFICATE-----Generated at Thu Oct 23 10:00:51 2025 by rpki-client