$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: EFE5A8RRoVoWwY+eLNnWaLknvzm1PQ7qBRu+rPVOqhQ= Subject key identifier: 87:30:37:0E:92:8A:1A:7C:7D:D1:CA:8A:ED:0F:C0:89:9E:8F:77:F6 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0C23 Signing time: Sun 02 Nov 2025 18:41:13 +0000 Manifest this update: Sun 02 Nov 2025 18:41:12 +0000 Manifest next update: Sun 09 Nov 2025 18:41:12 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: /Fjei079fipO1Zsshx7Nn1AMR8E1B0iZ8I0/wqR6XVw=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Nov 2 18:41:12 2025 GMT Not After : Nov 9 18:41:12 2025 GMT Subject: CN=6907a5c8-2c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:b2:bf:c3:89:66:80:5e:e1:e2:51:61:df: 8d:56:97:ce:51:4f:fd:2e:8f:28:1c:8f:02:69:39: bf:2d:e0:ba:25:ab:c2:8b:c9:6e:db:a7:e0:ea:e6: e9:0f:97:25:81:7b:c1:fd:0c:a6:37:09:24:0f:71: cb:2a:d9:40:28:25:59:a8:80:8c:2f:7b:c6:c7:f9: 69:39:49:b6:31:46:8c:22:f3:a1:cb:55:da:32:58: e3:9e:dc:9c:ba:3f:17:c5:55:1b:26:03:f5:b6:59: de:94:a8:30:cb:7f:1a:2d:93:3f:ed:1a:d1:56:7d: 1f:6b:f4:35:ed:3f:d8:15:05:16:8e:e1:6b:27:66: 95:96:21:cb:91:06:9f:8d:b8:a1:95:2d:76:1c:44: b5:80:41:cb:fa:82:16:eb:74:1b:10:58:96:f5:b0: 71:9b:98:d0:f2:6f:cc:93:63:3c:90:31:43:ba:6e: 16:38:5a:02:d3:cb:fc:6e:19:92:31:ff:f0:23:4b: 5a:bd:0a:55:e5:b5:b6:c3:1a:5b:c3:24:99:57:9a: b5:87:67:9f:9d:12:79:6b:2e:89:a4:87:90:b5:23: fb:17:20:6c:d6:1b:a0:20:33:2a:04:c1:ea:a8:07: 59:76:5c:00:60:2a:10:62:a9:10:cb:6c:67:db:3c: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:30:37:0E:92:8A:1A:7C:7D:D1:CA:8A:ED:0F:C0:89:9E:8F:77:F6 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:42:04:97:de:fc:40:90:38:19:f3:c5:5b:48:39:57:3c:47: 25:56:32:e8:5f:d3:fc:1b:b5:66:fb:82:c7:06:0f:3e:af:4c: b8:21:70:a4:d0:7e:c4:66:49:25:e4:9b:12:f8:43:9f:6f:1e: 30:25:11:32:32:4b:1d:0e:da:7f:de:5d:6a:2c:af:4e:5b:1d: ff:03:74:c0:6a:a7:cc:a2:4e:bc:69:fc:fe:b6:ab:8d:16:b3: 41:84:f5:c5:ad:13:ee:8a:e2:e1:bc:2f:d6:1a:c0:89:ab:15: 70:44:91:43:85:9f:3b:d4:a3:4b:b5:9e:38:ac:bb:5c:e1:c3: e6:3f:96:77:eb:27:e0:d9:9b:65:a0:a9:26:5d:7f:5b:e0:10: 74:40:32:1c:f9:d1:f5:85:30:6d:63:57:e3:21:c8:9d:1f:2f: b4:fa:23:b0:77:d4:c0:be:30:2f:3e:15:46:6a:ce:9e:fd:25: 72:9e:90:44:eb:2b:0b:7e:3c:bf:8e:8a:d9:64:ec:c1:b6:12: f3:42:57:27:a4:8f:fe:56:ef:f4:a5:04:48:ab:da:89:4b:93: c6:88:5c:07:8a:75:74:43:4d:07:97:9d:c3:34:72:ae:e6:4e: 9c:5b:63:31:1e:f1:53:ad:6e:d2:c3:1c:54:21:a8:e9:06:6a: 8c:5e:e5:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUxMTAyMTg0MTEyWhcNMjUxMTA5MTg0MTEyWjAYMRYwFAYD VQQDEw02OTA3YTVjOC0yYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOmyv8OJZoBe4eJRYd+NVpfOUU/9Lo8oHI8CaTm/LeC6JavCi8lu26fg6ubp D5clgXvB/QymNwkkD3HLKtlAKCVZqICML3vGx/lpOUm2MUaMIvOhy1XaMljjntyc uj8XxVUbJgP1tlnelKgwy38aLZM/7RrRVn0fa/Q17T/YFQUWjuFrJ2aVliHLkQaf jbihlS12HES1gEHL+oIW63QbEFiW9bBxm5jQ8m/Mk2M8kDFDum4WOFoC08v8bhmS Mf/wI0tavQpV5bW2wxpbwySZV5q1h2efnRJ5ay6JpIeQtSP7FyBs1hugIDMqBMHq qAdZdlwAYCoQYqkQy2xn2zyJ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcwNw6S ihp8fdHKiu0PwImej3f2MB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJQgSX3vxAkDgZ88VbSDlXPEclVjLoX9P8G7Vm+4LHBg8+r0y4IXCk 0H7EZkkl5JsS+EOfbx4wJREyMksdDtp/3l1qLK9OWx3/A3TAaqfMok68afz+tquN FrNBhPXFrRPuiuLhvC/WGsCJqxVwRJFDhZ871KNLtZ44rLtc4cPmP5Z36yfg2Ztl oKkmXX9b4BB0QDIc+dH1hTBtY1fjIcidHy+0+iOwd9TAvjAvPhVGas6e/SVynpBE 6ysLfjy/jorZZOzBthLzQlcnpI/+Vu/0pQRIq9qJS5PGiFwHinV0Q00Hl53DNHKu 5k6cW2MxHvFTrW7SwxxUIajpBmqMXuVo -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:22 2025 by rpki-client