$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: IgggqBbnOjsyo0KlyVcUcSWjP4IrQ4I8PDW+HkD6wJY= Subject key identifier: 35:DB:16:75:4D:F5:5F:FF:34:E1:A8:06:C3:91:90:EB:0D:13:B7:22 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 0162 Signing time: Mon 03 Nov 2025 04:02:41 +0000 Manifest this update: Mon 03 Nov 2025 04:02:40 +0000 Manifest next update: Mon 10 Nov 2025 04:02:40 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: k6cZdM5m8hBMkRDEKHQ2Ne2p6+jM+IBldHnT/BOIGKo=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Nov 3 04:02:40 2025 GMT Not After : Nov 10 04:02:40 2025 GMT Subject: CN=69082960-2035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:e2:6c:2f:0f:9b:75:df:06:75:17:17:d8: 5f:a5:2b:4d:79:ac:9b:84:b3:49:63:96:7c:a8:9d: d6:3f:d8:7a:d2:ae:24:f4:91:1c:81:b4:33:06:9b: 25:f3:56:30:2d:31:62:9d:49:a4:a2:ea:41:45:a4: c1:39:03:7e:8e:dc:2e:59:cd:10:7f:e7:57:cb:a0: c1:52:4f:e4:e6:b1:16:a4:20:40:bc:9f:62:f8:a2: 09:7d:c9:66:ff:1f:40:01:78:73:e0:0f:7b:da:4b: 30:2c:1c:86:e0:13:9c:a3:23:c0:26:a1:c1:fd:32: c9:1a:52:6b:31:71:ba:37:6b:ed:c9:01:b4:c1:3c: ab:fd:57:cd:e9:d4:86:20:eb:87:59:22:58:47:6f: a6:ab:8b:3f:59:0f:42:66:43:79:77:42:d7:43:77: 32:e4:b8:6c:ef:72:fe:79:f2:c2:93:0c:49:b4:66: e1:9f:8b:bb:ae:65:63:f4:79:7f:01:4c:78:33:bb: 51:70:d7:81:9f:46:63:f5:1e:de:ae:32:a3:55:56: cd:a6:45:39:da:fe:ec:3a:30:11:7f:b8:50:d9:b5: fd:23:65:e5:29:a3:47:a4:6e:7e:d5:0a:45:63:79: e1:b8:55:77:5d:b9:33:07:39:e1:86:f6:8c:5f:59: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DB:16:75:4D:F5:5F:FF:34:E1:A8:06:C3:91:90:EB:0D:13:B7:22 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:63:7b:3c:5f:90:fa:cf:a7:ea:b0:aa:a9:28:fb:e6:03:fc: c4:72:0c:97:6d:25:d3:e8:5a:0c:30:e7:06:f7:b1:ff:91:fe: e3:b9:57:9a:82:e4:50:55:89:92:10:b5:7f:6d:08:54:b9:a0: e6:9b:b0:3a:32:5b:5b:d2:76:e2:9e:66:e2:20:0c:cd:2f:02: 48:cc:d3:3b:ab:a6:2c:83:c7:1a:40:74:47:22:68:18:7a:f0: c7:8b:4f:e4:1f:1b:e3:ae:36:05:1e:9d:d3:4d:c2:7a:2d:e4: 76:b4:94:a4:cf:7a:c4:a1:05:2d:27:e4:ee:71:0a:a4:cd:b1: 8b:86:63:f9:6f:c4:c9:89:fb:66:cc:1e:20:62:8c:e7:c0:1c: 55:7b:77:3b:d8:81:fd:68:88:e2:ff:2a:81:a9:8d:fd:af:86: 9d:7e:4d:e5:a1:16:98:1c:2a:9c:8e:c3:4a:db:3c:3c:7b:31: 43:55:ef:0b:01:03:ae:cd:05:c3:f7:b7:07:78:62:e2:80:67: 59:03:01:e0:6a:64:93:ca:c8:74:ec:ae:f5:13:58:31:00:49: 7d:ed:fa:fa:8c:32:fc:80:53:e5:37:0d:4c:79:df:68:66:38: 1e:3a:8a:6c:99:b0:43:dd:a2:f9:1f:7f:db:62:1f:73:af:09: 93:f9:9c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUxMTAzMDQwMjQwWhcNMjUxMTEwMDQwMjQwWjAYMRYwFAYD VQQDEw02OTA4Mjk2MC0yMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKribC8Pm3XfBnUXF9hfpStNeaybhLNJY5Z8qJ3WP9h60q4k9JEcgbQzBpsl 81YwLTFinUmkoupBRaTBOQN+jtwuWc0Qf+dXy6DBUk/k5rEWpCBAvJ9i+KIJfclm /x9AAXhz4A972kswLByG4BOcoyPAJqHB/TLJGlJrMXG6N2vtyQG0wTyr/VfN6dSG IOuHWSJYR2+mq4s/WQ9CZkN5d0LXQ3cy5Lhs73L+efLCkwxJtGbhn4u7rmVj9Hl/ AUx4M7tRcNeBn0Zj9R7erjKjVVbNpkU52v7sOjARf7hQ2bX9I2XlKaNHpG5+1QpF Y3nhuFV3XbkzBznhhvaMX1mL1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXbFnVN 9V//NOGoBsORkOsNE7ciMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Y3s8X5D6z6fqsKqpKPvmA/zEcgyXbSXT6FoMMOcG97H/kf7juVea guRQVYmSELV/bQhUuaDmm7A6Mltb0nbinmbiIAzNLwJIzNM7q6Ysg8caQHRHImgY evDHi0/kHxvjrjYFHp3TTcJ6LeR2tJSkz3rEoQUtJ+TucQqkzbGLhmP5b8TJiftm zB4gYoznwBxVe3c72IH9aIji/yqBqY39r4adfk3loRaYHCqcjsNK2zw8ezFDVe8L AQOuzQXD97cHeGLigGdZAwHgamSTysh07K71E1gxAEl97fr6jDL8gFPlNw1Med9o ZjgeOopsmbBD3aL5H3/bYh9zrwmT+Zz9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:24 2025 by rpki-client