$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: LHzwG6R76UJsjCE7AiyyPQlpndRAGMK6MSEgzjX5zCE= Subject key identifier: 29:2F:73:96:05:EF:3F:29:E2:69:80:72:F3:3A:78:98:27:25:E3:CA Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0A87 Signing time: Sun 16 Nov 2025 18:44:10 +0000 Manifest this update: Sun 16 Nov 2025 18:44:09 +0000 Manifest next update: Sun 23 Nov 2025 18:44:09 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: leQ89nEqxvHQaE90lcbwbTnyyyu+JTHwW7bep/6hquo=) 2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: WTs+9o9qNNM6mr7pnkWN7ajLcOyi6E/nvXwiULfR9Fc=) 3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: FXrJzxpIMY/mjFWppW9CWCLKoy10/on9Vdnxt1X4PXY=) 4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: EvThvFOZKz48161MvTnVXiDNJ6HNF5HAel5hAOJCG+c=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Nov 2025 18:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Nov 16 18:44:09 2025 GMT Not After : Nov 23 18:44:09 2025 GMT Subject: CN=691a1b7a-c36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ef:86:31:f9:fe:87:8c:02:26:49:8d:a9:d3: a7:e5:da:13:8d:e2:6b:43:1e:fa:89:2a:0f:c3:fe: 75:ec:05:49:aa:d0:13:42:91:9f:2b:90:fb:2d:29: ca:54:4f:59:62:92:44:1e:d3:ee:fe:3f:b3:6e:b1: 3e:34:ec:63:fb:72:10:ad:ad:07:ad:7b:53:50:79: 66:1a:92:e3:7a:1e:de:eb:07:d7:52:54:9e:b1:14: bf:aa:9b:01:c3:6e:9e:07:0c:3b:91:cb:e3:c6:90: 4b:79:b1:08:e7:bf:7b:12:4e:00:66:d6:e8:ba:12: c3:e8:c8:76:4c:c5:63:97:59:0f:a0:9a:8f:96:f8: b6:e5:e0:8b:85:c9:01:b4:30:50:0a:ee:9b:7d:1c: 29:76:76:17:0f:09:f5:13:d2:52:17:3f:34:32:3f: 73:c4:26:cd:8c:11:a4:33:10:cf:8d:0a:d2:d4:d2: cb:83:7e:a3:b7:83:12:94:17:00:c7:87:56:f7:35: ca:92:8d:09:e3:98:c3:11:17:79:04:eb:2f:64:29: 0f:b1:80:c5:4a:45:31:7c:25:b0:6d:ca:86:2c:5d: db:54:83:f6:15:1c:f8:69:1a:65:88:f9:64:6f:31: 6a:bb:e2:99:1f:71:97:42:3d:40:35:da:3a:4c:8c: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2F:73:96:05:EF:3F:29:E2:69:80:72:F3:3A:78:98:27:25:E3:CA X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:a3:bb:ca:ae:4c:d8:92:d6:41:88:6a:ac:41:54:2f:5f:77: 6c:ab:10:da:67:de:3a:85:36:2e:d9:d1:00:b2:c0:f4:78:d1: 9d:6d:e3:0c:6a:ba:6a:08:18:06:d5:63:40:bc:09:01:ae:c7: 39:bf:6f:b2:cf:3e:bd:77:16:7c:28:99:24:40:0d:5e:8e:cd: c1:7e:06:c4:61:c4:06:23:1b:6f:6b:d7:0c:d8:0b:95:11:d2: 17:26:d8:45:51:63:67:e7:d5:bf:17:a7:93:e0:8e:82:d4:1d: 26:46:98:bd:77:34:c8:aa:07:94:a2:c3:64:b4:d4:c8:3d:bb: 20:ef:1b:65:3e:68:0a:b5:df:50:df:02:e2:1e:d0:82:40:c3: 4d:24:22:71:8b:71:08:f6:03:c9:32:f0:94:f2:1e:81:a5:37: e0:0d:ad:df:ec:2b:e0:a0:a3:d1:62:76:a4:de:20:e9:99:36: ba:84:2c:97:03:13:c7:29:a4:4b:ef:e2:3c:45:c3:f2:7f:bb: e3:9b:c8:ac:31:2f:6c:f6:33:df:26:15:d3:4b:df:d2:9a:ee: da:ac:97:0c:54:55:ef:ee:ab:60:d6:34:18:a1:49:42:f6:39: c1:76:73:6a:6b:87:94:e6:6c:a7:eb:4d:ef:5d:c2:06:ba:7d: d2:8f:0d:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUxMTE2MTg0NDA5WhcNMjUxMTIzMTg0NDA5WjAYMRYwFAYD VQQDEw02OTFhMWI3YS1jMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt++GMfn+h4wCJkmNqdOn5doTjeJrQx76iSoPw/517AVJqtATQpGfK5D7LSnK VE9ZYpJEHtPu/j+zbrE+NOxj+3IQra0HrXtTUHlmGpLjeh7e6wfXUlSesRS/qpsB w26eBww7kcvjxpBLebEI5797Ek4AZtbouhLD6Mh2TMVjl1kPoJqPlvi25eCLhckB tDBQCu6bfRwpdnYXDwn1E9JSFz80Mj9zxCbNjBGkMxDPjQrS1NLLg36jt4MSlBcA x4dW9zXKko0J45jDERd5BOsvZCkPsYDFSkUxfCWwbcqGLF3bVIP2FRz4aRpliPlk bzFqu+KZH3GXQj1ANdo6TIwIZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkvc5YF 7z8p4mmAcvM6eJgnJePKMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDo7vKrkzYktZBiGqsQVQvX3dsqxDaZ946hTYu2dEAssD0eNGdbeMM arpqCBgG1WNAvAkBrsc5v2+yzz69dxZ8KJkkQA1ejs3BfgbEYcQGIxtva9cM2AuV EdIXJthFUWNn59W/F6eT4I6C1B0mRpi9dzTIqgeUosNktNTIPbsg7xtlPmgKtd9Q 3wLiHtCCQMNNJCJxi3EI9gPJMvCU8h6BpTfgDa3f7CvgoKPRYnak3iDpmTa6hCyX AxPHKaRL7+I8RcPyf7vjm8isMS9s9jPfJhXTS9/Smu7arJcMVFXv7qtg1jQYoUlC 9jnBdnNqa4eU5myn603vXcIGun3Sjw30 -----END CERTIFICATE-----Generated at Tue Nov 18 03:50:27 2025 by rpki-client