$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: Ti6NEXTHCQSL26W8PfniLE3bP/F147wHdRx3CGhtKeA= Subject key identifier: A7:02:79:7E:68:C3:39:C2:C8:81:84:11:03:EA:16:69:85:85:CE:25 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 0180 Signing time: Wed 05 Nov 2025 03:51:00 +0000 Manifest this update: Wed 05 Nov 2025 03:51:00 +0000 Manifest next update: Wed 12 Nov 2025 03:51:00 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: bJfGYPQeZ2RF8+D0PpVyEPHMCyX7MIZJFyM17lPnxA8=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: mEWfsTcA2IvJ08SERafVpG79nAxQN7WQ08fS/psaf1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Nov 5 03:51:00 2025 GMT Not After : Nov 12 03:51:00 2025 GMT Subject: CN=690ac9a4-256d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:d0:b8:09:b8:49:aa:4b:30:a2:e3:04:2d: 60:3e:31:5a:05:43:60:e7:d9:1d:67:b0:72:39:8c: aa:04:d5:6f:d5:82:c8:b3:5e:d9:84:5d:59:8a:dc: d4:45:6a:78:7f:b6:03:2a:3d:e8:76:30:3b:b4:ba: cc:93:86:32:ae:c7:10:8a:43:6a:ed:4f:09:31:23: 4a:50:e7:33:aa:bb:f9:2b:39:2b:2c:3f:7d:31:94: b9:51:d8:5c:41:83:80:26:67:e7:40:c1:00:b8:36: b6:d9:42:19:fb:81:c3:01:7f:f7:2a:17:4f:55:19: b9:60:e1:32:06:64:1e:04:bb:ca:d9:74:d5:14:b4: ab:44:91:fa:be:82:76:e6:3d:00:df:03:2e:5f:76: 5e:d0:94:cb:3f:b0:7d:34:59:cd:d3:5a:5d:fe:1d: 86:50:ef:c8:06:e7:06:29:f2:27:1d:29:cf:63:b3: 6e:33:d3:ce:84:e5:2d:aa:e6:a2:ca:04:fa:dc:50: 25:27:a2:f2:8a:00:5a:f4:2e:66:93:5d:dd:d9:67: 22:a2:cd:6d:be:c7:4c:da:49:51:8b:db:31:0e:7d: c7:5d:f0:1e:dd:95:7e:9f:7d:f9:dd:1a:76:40:7a: 25:81:36:ec:16:4c:c1:74:6b:a5:1a:15:8e:29:e2: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:02:79:7E:68:C3:39:C2:C8:81:84:11:03:EA:16:69:85:85:CE:25 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:06:3b:b2:9d:cd:63:6d:51:16:14:57:de:0d:c2:04:38:57: a7:a0:10:bc:e2:7b:cc:5f:5c:a0:05:7c:0b:98:1d:f7:23:b2: da:53:80:44:2b:76:d5:0d:62:f6:91:c7:e4:ce:1f:78:d8:ed: 64:82:df:70:f6:88:dd:20:5e:4d:3a:7d:f0:9d:90:86:c7:dd: 3f:3f:6c:84:19:a4:5c:df:fa:30:90:71:b3:1e:df:77:97:ea: d1:09:63:53:e3:92:6e:ea:47:15:56:e7:f7:64:3d:92:27:80: e1:16:3a:b5:48:65:13:40:21:96:3b:44:b7:5d:11:8d:0e:34: 67:3a:92:bf:c2:12:f7:e3:86:cf:26:34:81:ff:c9:87:32:a5: 1b:d1:86:8b:72:36:25:2a:b3:8a:ca:85:23:8f:39:e0:6f:df: 3f:bb:3a:76:58:95:b9:f7:e1:78:6c:ee:ee:3c:f2:08:3e:32: 7d:ce:f6:10:29:12:1d:44:44:45:9c:7a:6d:99:91:5d:5b:df: 51:83:45:72:0a:48:2b:e2:ff:e6:b9:73:b2:c2:29:cd:97:74: 10:3f:0d:47:68:e0:e1:66:47:59:67:fc:69:21:2c:5c:78:8d: 4e:89:49:b9:88:28:39:6f:12:00:f7:fb:0a:2b:1d:ca:bc:b1: e1:84:00:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUxMTA1MDM1MTAwWhcNMjUxMTEyMDM1MTAwWjAYMRYwFAYD VQQDEw02OTBhYzlhNC0yNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0TQuAm4SapLMKLjBC1gPjFaBUNg59kdZ7ByOYyqBNVv1YLIs17ZhF1ZitzU RWp4f7YDKj3odjA7tLrMk4YyrscQikNq7U8JMSNKUOczqrv5KzkrLD99MZS5Udhc QYOAJmfnQMEAuDa22UIZ+4HDAX/3KhdPVRm5YOEyBmQeBLvK2XTVFLSrRJH6voJ2 5j0A3wMuX3Ze0JTLP7B9NFnN01pd/h2GUO/IBucGKfInHSnPY7NuM9POhOUtquai ygT63FAlJ6LyigBa9C5mk13d2Wcios1tvsdM2klRi9sxDn3HXfAe3ZV+n3353Rp2 QHolgTbsFkzBdGulGhWOKeKlkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcCeX5o wznCyIGEEQPqFmmFhc4lMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXBjuync1jbVEWFFfeDcIEOFenoBC84nvMX1ygBXwLmB33I7LaU4BE K3bVDWL2kcfkzh942O1kgt9w9ojdIF5NOn3wnZCGx90/P2yEGaRc3/owkHGzHt93 l+rRCWNT45Ju6kcVVuf3ZD2SJ4DhFjq1SGUTQCGWO0S3XRGNDjRnOpK/whL344bP JjSB/8mHMqUb0YaLcjYlKrOKyoUjjzngb98/uzp2WJW59+F4bO7uPPIIPjJ9zvYQ KRIdRERFnHptmZFdW99Rg0VyCkgr4v/muXOywinNl3QQPw1HaODhZkdZZ/xpISxc eI1OiUm5iCg5bxIA9/sKKx3KvLHhhAAV -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:30 2025 by rpki-client