$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: bNGlLO86bHB2ldHxzER7fs0qLOxRXar/6Qd+SMbFpaY= Subject key identifier: 99:2E:F2:CB:9E:A5:E7:5D:D3:CA:7A:97:77:F2:15:9D:88:56:EE:FD Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 073C Signing time: Sun 02 Nov 2025 21:44:13 +0000 Manifest this update: Sun 02 Nov 2025 21:44:13 +0000 Manifest next update: Sun 09 Nov 2025 21:44:13 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: VwDqzs1mOG3lCZys4ZIbF//AijLAAZI2F7Cq6BSaDzg=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: Nov 2 21:44:13 2025 GMT Not After : Nov 9 21:44:13 2025 GMT Subject: CN=6907d0ad-f0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:5d:5d:ef:76:a2:8c:f0:d8:c1:ce:d8:20: 4f:4a:c8:50:8b:34:38:c9:ac:0a:07:a1:0b:2f:da: 87:f8:2a:e2:d1:40:c6:06:4f:8b:ee:19:fb:b4:6f: b2:8e:fd:54:0c:8d:bd:41:ce:13:1a:be:d2:3a:bb: 6c:ec:f9:3d:dc:9d:77:9d:49:7d:2e:41:6c:22:95: bb:50:06:31:7f:db:ab:b5:93:3a:a3:93:00:86:10: e4:83:41:53:bb:45:40:fe:42:85:b5:2d:84:45:52: 66:91:f3:49:5d:fd:fd:8d:d2:42:19:a6:b7:d8:c2: f4:e6:fc:73:81:d6:21:c5:14:52:34:09:26:d4:60: a4:d4:e0:ab:52:1f:ed:bb:5d:8c:c9:8a:f5:41:d2: 44:b5:07:64:a2:07:67:e7:f6:d8:46:84:ec:c1:f6: 81:98:ed:37:aa:57:94:7f:03:8b:ee:1f:1c:b3:87: 0d:ab:fb:74:af:2b:4c:ea:48:bf:09:5c:2d:11:0e: a7:11:f5:60:d3:6b:3d:a3:90:bc:c6:ac:1f:00:15: c0:6d:15:08:52:fb:31:c8:cd:39:c2:d8:51:4c:a7: 05:52:4b:9f:59:52:e1:96:7f:03:b8:f6:d6:dd:e6: 74:7c:df:62:cd:34:fc:34:1a:8e:bd:1c:37:5a:b5: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2E:F2:CB:9E:A5:E7:5D:D3:CA:7A:97:77:F2:15:9D:88:56:EE:FD X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d4:7a:24:42:1a:dd:d5:11:9a:40:86:ff:81:85:af:fb:f2: bb:41:70:35:74:2c:36:d1:ae:58:c5:33:bb:e1:d8:10:99:7e: ff:ef:f9:4a:5d:53:99:71:69:f8:b0:0d:3a:92:6f:cb:60:f1: 84:08:56:ba:b4:f8:b9:2e:80:1c:88:48:65:71:cb:e5:a3:89: af:97:2c:18:3c:c8:87:52:0d:08:e5:bf:12:e1:24:1b:6d:39: b5:97:34:92:1f:cb:ac:af:de:93:27:21:cd:3e:0f:a1:cc:fe: 5d:01:8d:57:54:b9:70:b9:f1:54:ad:6e:8c:9b:82:8d:3d:24: ce:bb:f6:b9:36:3e:53:1a:b9:87:0c:49:14:6d:3c:52:99:de: 38:09:4e:7c:53:7f:0d:58:9b:a8:b1:61:f5:a9:f7:fc:21:6f: 98:fd:c2:d5:77:f8:77:4f:3d:f6:6e:00:c9:56:59:f3:70:85: 1f:92:b2:81:7d:8b:4a:6e:3d:ac:8a:11:83:ea:17:18:3f:64: 77:60:f9:22:43:b5:05:f9:24:27:56:10:ed:9a:f8:f2:fa:08: a7:c1:4b:2b:7d:85:fe:0a:22:0f:8a:4d:44:38:04:7a:64:0e: 42:36:48:05:af:61:de:2e:5c:3f:01:8b:ce:e3:c2:ad:c7:ad: 13:9d:cf:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUxMTAyMjE0NDEzWhcNMjUxMTA5MjE0NDEzWjAYMRYwFAYD VQQDEw02OTA3ZDBhZC1mMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRhdXe92oozw2MHO2CBPSshQizQ4yawKB6ELL9qH+Cri0UDGBk+L7hn7tG+y jv1UDI29Qc4TGr7SOrts7Pk93J13nUl9LkFsIpW7UAYxf9urtZM6o5MAhhDkg0FT u0VA/kKFtS2ERVJmkfNJXf39jdJCGaa32ML05vxzgdYhxRRSNAkm1GCk1OCrUh/t u12MyYr1QdJEtQdkogdn5/bYRoTswfaBmO03qleUfwOL7h8cs4cNq/t0rytM6ki/ CVwtEQ6nEfVg02s9o5C8xqwfABXAbRUIUvsxyM05wthRTKcFUkufWVLhln8DuPbW 3eZ0fN9izTT8NBqOvRw3WrXYWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJku8sue pedd08p6l3fyFZ2IVu79MB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB41HokQhrd1RGaQIb/gYWv+/K7QXA1dCw20a5YxTO74dgQmX7/7/lK XVOZcWn4sA06km/LYPGECFa6tPi5LoAciEhlccvlo4mvlywYPMiHUg0I5b8S4SQb bTm1lzSSH8usr96TJyHNPg+hzP5dAY1XVLlwufFUrW6Mm4KNPSTOu/a5Nj5TGrmH DEkUbTxSmd44CU58U38NWJuosWH1qff8IW+Y/cLVd/h3Tz32bgDJVlnzcIUfkrKB fYtKbj2sihGD6hcYP2R3YPkiQ7UF+SQnVhDtmvjy+ginwUsrfYX+CiIPik1EOAR6 ZA5CNkgFr2HeLlw/AYvO48Ktx60Tnc9w -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:02 2025 by rpki-client