$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: /Yd9Wm7RUfLF6UM1fbVK8oTGsv5bqrc2Ph4lARKpz1I= Subject key identifier: 00:61:CB:A0:B8:16:7C:D6:86:AE:96:E3:F1:66:FA:B5:3B:3F:47:9D Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: 53 Signing time: Mon 03 Nov 2025 07:15:14 +0000 Manifest this update: Mon 03 Nov 2025 07:15:14 +0000 Manifest next update: Mon 10 Nov 2025 07:15:14 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: aA7tpCOZb/mV1Pghr/PvWrbCz5X8n92gI95/scBLLVA=) 2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: tOvv14j7PVKjZOUCL/zHGwFCXfHBrWhMTrZ97/b78ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Nov 3 07:15:14 2025 GMT Not After : Nov 10 07:15:14 2025 GMT Subject: CN=69085682-9f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:2c:a0:9e:68:ad:5a:c9:18:d1:c7:31:1d: 06:d5:b2:28:93:c6:58:45:f5:d5:72:54:d2:97:43: 60:4f:66:ae:cc:dd:65:7e:c0:3c:38:81:df:0c:89: 0f:63:dd:03:00:ee:86:3a:6f:bb:e0:05:cf:be:0f: 1d:af:ed:dc:21:17:99:37:5e:fc:60:5c:2f:95:60: d0:f9:c8:cd:21:a9:27:33:d6:ba:f3:fc:c2:31:67: ec:bd:1c:00:85:59:1d:4c:e1:d0:94:a0:bf:92:20: 40:28:63:e4:de:fe:46:05:22:b4:15:33:fa:a9:88: 27:83:17:5e:51:33:25:78:4c:e1:d2:e8:1f:55:b5: 0b:1d:f6:f3:1d:2a:3e:a0:ec:2c:2b:2a:07:89:39: f3:f8:f8:2a:ee:71:d5:7a:c2:89:e7:37:28:2e:c7: 09:8b:05:50:a9:4b:c7:14:e3:f6:f5:64:87:19:b4: 54:3a:be:68:66:46:14:18:1d:a4:44:fc:84:30:22: 08:72:bc:55:26:22:6f:e1:f3:06:2e:f7:2c:cc:44: 79:49:f9:37:bf:3e:87:25:6c:6b:c7:cb:1d:9d:b2: 2b:58:ef:5e:d9:91:3d:ee:5a:ac:c2:33:5a:ce:e2: 8b:7f:2f:88:1c:1f:b7:00:9c:4b:52:59:11:fd:6c: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:CB:A0:B8:16:7C:D6:86:AE:96:E3:F1:66:FA:B5:3B:3F:47:9D X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:53:16:14:5a:87:15:a1:8d:61:ab:8f:b3:88:c0:5f:2d:4d: 28:e7:95:49:e7:d2:92:18:37:40:65:5e:97:23:d1:ea:34:5f: e0:a6:f7:52:a6:ea:5a:3f:36:b0:24:dc:eb:2f:06:81:ba:5a: fe:1f:9c:bc:6f:7e:8e:70:bc:a9:f9:e7:e9:ae:33:95:f3:c7: b7:10:ed:e1:81:f5:ba:84:c7:7f:0a:c2:78:e8:a1:b5:9f:f4: c5:1c:2a:75:f1:1a:93:fd:ae:90:51:ae:39:1d:08:58:c0:6c: 00:a3:bd:2d:90:49:4d:b2:aa:d9:66:84:82:64:1c:93:a0:de: 94:5c:60:9f:45:ab:34:50:7f:3f:83:79:6b:db:a9:4f:8d:c1: d6:92:15:08:69:fe:e9:09:6f:58:f0:8e:fe:a1:a6:37:74:60: 13:38:3d:1d:1d:7f:c9:93:d1:cf:74:be:e5:ee:9c:c9:3f:6f: b9:ac:50:19:ca:70:8a:ac:f6:76:20:9b:a7:e9:ec:90:2b:7d: fa:7b:74:84:8f:82:c0:04:98:fb:2d:59:05:1f:43:eb:9a:b8: aa:20:29:43:4c:92:81:44:5a:7e:da:64:1a:4c:cb:da:90:49: 2e:fa:31:0b:fd:08:7b:b1:9c:86:d1:b3:01:e7:06:76:b1:c3: ef:24:57:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoOERFOUQwNzRGRjNDOEQ1MTU0MTVFQkYwRjBFNTZBQzAz RUVBREQzQTAeFw0yNTExMDMwNzE1MTRaFw0yNTExMTAwNzE1MTRaMBgxFjAUBgNV BAMTDTY5MDg1NjgyLTlmN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC73SygnmitWskY0ccxHQbVsiiTxlhF9dVyVNKXQ2BPZq7M3WV+wDw4gd8MiQ9j 3QMA7oY6b7vgBc++Dx2v7dwhF5k3XvxgXC+VYND5yM0hqScz1rrz/MIxZ+y9HACF WR1M4dCUoL+SIEAoY+Te/kYFIrQVM/qpiCeDF15RMyV4TOHS6B9VtQsd9vMdKj6g 7CwrKgeJOfP4+CrucdV6wonnNyguxwmLBVCpS8cU4/b1ZIcZtFQ6vmhmRhQYHaRE /IQwIghyvFUmIm/h8wYu9yzMRHlJ+Te/PoclbGvHyx2dsitY717ZkT3uWqzCM1rO 4ot/L4gcH7cAnEtSWRH9bJUtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAGHLoLgW fNaGrpbj8Wb6tTs/R50wHwYDVR0jBBgwFoAUjenQdP88jVFUFevw8OVqwD7q3Tow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzNEOEFDNTQ2M0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamVuUWRQODhqVkZVRmV2dzhPVnF3RDdxM1RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzNEOEFDNTQ2M0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZG VUZldnc4T1Zxd0Q3cTNUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAARTFhRahxWhjWGrj7OIwF8tTSjnlUnn0pIYN0BlXpcj0eo0X+Cm91Km 6lo/NrAk3OsvBoG6Wv4fnLxvfo5wvKn55+muM5Xzx7cQ7eGB9bqEx38KwnjoobWf 9MUcKnXxGpP9rpBRrjkdCFjAbACjvS2QSU2yqtlmhIJkHJOg3pRcYJ9FqzRQfz+D eWvbqU+NwdaSFQhp/ukJb1jwjv6hpjd0YBM4PR0df8mT0c90vuXunMk/b7msUBnK cIqs9nYgm6fp7JArffp7dISPgsAEmPstWQUfQ+uauKogKUNMkoFEWn7aZBpMy9qQ SS76MQv9CHuxnIbRswHnBnaxw+8kV3w= -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:03 2025 by rpki-client