$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: hhaQivJ/Dme1g53YeoyuNozQKl0J0AeVsmuWYSN9BOo= Subject key identifier: 0E:46:D5:CB:61:5A:8F:E5:9E:48:08:E4:35:2A:92:24:61:B9:B2:04 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 0212 Signing time: Mon 03 Nov 2025 02:14:50 +0000 Manifest this update: Mon 03 Nov 2025 02:14:49 +0000 Manifest next update: Mon 10 Nov 2025 02:14:49 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: uWS4mGPS6GI0uTTuipQMNzfMRMmR7kfGEix1Zq6WcUI=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: uvO6HQukwYrPh3gWNmwuzQaBlS53E3Kz5eOoB+lqzW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Nov 3 02:14:49 2025 GMT Not After : Nov 10 02:14:49 2025 GMT Subject: CN=6908101a-cae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:d5:3a:a1:5f:bc:98:ba:44:77:05:d4:d0: eb:ba:4f:2d:e8:f8:a3:e8:1a:ce:f6:88:11:7a:7c: eb:f4:51:dd:8d:41:12:65:78:92:dd:b9:8e:25:d9: 28:2f:e5:45:47:7c:e2:fe:98:b1:a5:a0:93:38:55: 8c:b1:ef:7a:ec:ed:06:ad:ff:73:e8:53:a0:e9:15: 60:b1:6d:99:19:ec:7e:24:6e:ac:00:92:14:81:55: 12:bd:bb:5b:cd:57:00:41:88:90:4e:27:ff:97:9e: 31:6a:ae:36:7b:94:5d:79:d4:9b:60:56:89:5f:6a: 97:c3:fc:3a:4d:1d:58:7a:0b:69:b1:ae:ce:15:1c: 37:65:4d:da:14:60:81:46:0b:36:22:76:89:d8:09: 9f:2d:c5:ee:4a:1d:e6:df:3c:25:1e:25:c4:0f:75: 1a:28:d4:0c:e2:25:43:dd:11:50:ea:a2:3f:40:31: 6c:0f:73:e4:0a:cc:20:3b:a8:78:11:26:17:7e:11: d4:b5:2b:25:46:ce:d8:cb:f8:e2:03:39:02:ad:8c: 19:b7:bc:f8:21:17:b9:9b:22:73:4a:3d:18:59:b5: 06:e1:dd:d8:ec:23:25:09:8d:15:af:19:c3:d5:f5: 94:b7:c6:f9:99:24:d7:86:ce:9b:d1:a8:16:e1:73: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:46:D5:CB:61:5A:8F:E5:9E:48:08:E4:35:2A:92:24:61:B9:B2:04 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:58:06:aa:ed:6f:b4:95:2f:ad:7b:3a:d7:19:ad:40:b8:f1: 06:cf:60:1d:b2:5b:27:29:8a:b8:28:53:61:1f:56:62:01:15: 25:a6:b7:ca:3d:ef:16:48:89:b5:75:8b:43:e9:ce:af:43:a2: d5:6e:49:da:a2:f0:b0:00:d5:ac:d5:cf:a0:61:48:cf:4a:5f: e9:6c:c9:f8:87:99:23:57:2a:46:8a:a2:bc:c4:36:fe:83:5e: 3a:f0:d0:dc:e5:12:0c:16:f5:2e:b2:25:ac:ed:05:b9:c9:12: fc:6f:a8:11:c2:f8:30:1f:00:a0:81:63:2a:9a:56:a6:b7:93: db:a6:0f:cb:5c:cd:ac:2c:47:ea:96:2c:f6:66:42:ee:bb:e2: e3:c0:e0:ed:a7:f5:c7:cb:cd:59:ba:92:26:14:f5:d8:d6:09: 60:37:a3:0f:f7:c7:ca:5c:24:02:65:f9:d4:05:fe:e0:08:19: 9d:60:ad:db:c0:29:a9:2d:86:b3:c6:ae:f4:22:a2:cf:08:e4: 3b:40:a5:67:4c:a6:88:c6:59:72:74:01:ba:4c:b2:04:a3:0a: d3:98:9d:10:8d:38:f7:19:4c:e7:d9:db:5f:57:48:79:bd:fa: 08:34:9e:f9:ba:32:66:a8:a6:8e:4d:c0:0e:ae:13:13:b4:7d: c8:79:b1:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUxMTAzMDIxNDQ5WhcNMjUxMTEwMDIxNDQ5WjAYMRYwFAYD VQQDEw02OTA4MTAxYS1jYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqO/VOqFfvJi6RHcF1NDruk8t6Pij6BrO9ogRenzr9FHdjUESZXiS3bmOJdko L+VFR3zi/pixpaCTOFWMse967O0Grf9z6FOg6RVgsW2ZGex+JG6sAJIUgVUSvbtb zVcAQYiQTif/l54xaq42e5RdedSbYFaJX2qXw/w6TR1Yegtpsa7OFRw3ZU3aFGCB Rgs2InaJ2AmfLcXuSh3m3zwlHiXED3UaKNQM4iVD3RFQ6qI/QDFsD3PkCswgO6h4 ESYXfhHUtSslRs7Yy/jiAzkCrYwZt7z4IRe5myJzSj0YWbUG4d3Y7CMlCY0VrxnD 1fWUt8b5mSTXhs6b0agW4XOx6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5G1cth Wo/lnkgI5DUqkiRhubIEMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWAaq7W+0lS+tezrXGa1AuPEGz2AdslsnKYq4KFNhH1ZiARUlprfK Pe8WSIm1dYtD6c6vQ6LVbknaovCwANWs1c+gYUjPSl/pbMn4h5kjVypGiqK8xDb+ g1468NDc5RIMFvUusiWs7QW5yRL8b6gRwvgwHwCggWMqmlamt5Pbpg/LXM2sLEfq liz2ZkLuu+LjwODtp/XHy81ZupImFPXY1glgN6MP98fKXCQCZfnUBf7gCBmdYK3b wCmpLYazxq70IqLPCOQ7QKVnTKaIxllydAG6TLIEowrTmJ0QjTj3GUzn2dtfV0h5 vfoINJ75ujJmqKaOTcAOrhMTtH3IebHB -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:57 2025 by rpki-client