$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: yN1Y7eel7hq7EmiRgXtSYE0DruSFIXWD8dQ/8diRkHw= Subject key identifier: B9:F4:F8:AB:96:D0:BC:43:66:17:75:77:76:46:13:F6:D9:B5:98:B7 Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 017F Signing time: Wed 05 Nov 2025 03:55:06 +0000 Manifest this update: Wed 05 Nov 2025 03:55:05 +0000 Manifest next update: Wed 12 Nov 2025 03:55:05 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: KA0HvkrJ+Ug2zXXaAtm6YPfcFtmnTzDwKC/s/68C80c=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: qZFxZlK/s9XuD9ZwE9EGQRrcfUALnpisB8t9uJ9BMCk=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: YumOlFepqCcL4/FMk4aKjlchGI7ETUe9t0yQ6qtDs+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: Nov 5 03:55:05 2025 GMT Not After : Nov 12 03:55:05 2025 GMT Subject: CN=690aca9a-b987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:2e:e5:c4:4a:b4:d6:18:cf:21:1b:af:75: 47:66:46:c5:9a:ca:93:3a:61:69:5f:b3:7a:96:04: 34:cc:56:d9:0f:86:b4:ef:f6:48:77:08:34:08:c6: 10:62:6e:b5:37:c6:a2:6d:9e:ab:07:e3:0f:45:68: d3:4f:ae:03:f6:d5:d3:a4:cb:4d:70:a7:3c:8b:f0: 18:c1:43:5d:fa:80:ec:9d:b4:aa:c5:d5:12:55:b6: c2:e4:03:da:ae:68:b4:9e:48:06:79:06:80:e3:aa: 71:e5:ea:66:f2:8d:f8:d4:7f:4a:fd:55:6c:f6:47: 56:64:c7:28:1e:07:45:e2:4e:89:ba:ef:67:72:21: 6e:26:08:a8:e8:4e:55:ab:e5:c8:34:42:40:d5:70: 98:e8:32:54:56:0d:a3:7a:e1:f1:25:6b:93:d6:e3: 5d:52:cb:07:7e:31:c7:fc:ee:84:8f:bb:e6:76:22: 4b:04:82:1c:88:d8:ba:8b:32:51:e5:0d:c1:5c:9c: e6:8c:86:70:0c:63:8a:9a:aa:f8:66:ae:5f:07:d1: 2b:39:d9:51:7e:b3:83:ba:4b:a6:77:a5:40:df:94: 42:54:73:f3:bb:79:2f:80:42:0a:a9:cf:94:e7:b1: 07:0f:17:03:28:ef:90:48:77:94:63:ac:e1:1c:ce: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F4:F8:AB:96:D0:BC:43:66:17:75:77:76:46:13:F6:D9:B5:98:B7 X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:68:d5:20:7d:3e:18:21:0b:07:24:81:20:55:b0:b5:f3:a0: 90:3e:8d:a9:a8:34:90:16:9d:cb:0e:64:bc:dd:1d:90:09:79: 43:ee:30:4a:fb:26:cb:a6:64:fe:28:06:4b:70:5e:cf:4b:10: 74:e7:cc:a3:95:c3:8f:75:5d:7f:99:ff:0e:cf:59:43:65:32: 19:5f:d1:d2:21:9f:8e:45:f4:fa:03:88:db:d9:63:62:d1:7e: 9f:3c:bd:9b:15:65:21:f1:a4:b0:87:fa:0d:8d:9b:16:73:a7: b5:ed:dd:3e:20:46:31:ea:36:83:fa:f4:09:79:25:50:17:96: 3b:27:e8:6f:8a:d5:04:1a:b3:1f:fd:56:e7:24:f9:26:77:9a: 95:38:50:a9:c7:a3:dc:50:c7:1c:26:21:d5:62:17:8e:de:8e: cf:77:26:97:a6:24:13:8c:d0:83:aa:4d:1e:70:3e:b7:5c:43: 35:2d:ce:8d:ef:96:f1:53:96:18:90:75:2a:d7:2d:48:38:31: 7b:db:0e:cb:d8:cb:ba:f3:67:a5:3e:03:62:d5:52:5e:d4:d6: 6b:a0:fc:f8:14:da:f3:a5:d2:fe:36:7a:8e:d9:2d:62:b0:48: b5:1c:bb:89:5c:5d:94:47:7e:d7:71:d2:85:57:25:44:ae:28: 69:80:f9:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjUxMTA1MDM1NTA1WhcNMjUxMTEyMDM1NTA1WjAYMRYwFAYD VQQDEw02OTBhY2E5YS1iOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurEu5cRKtNYYzyEbr3VHZkbFmsqTOmFpX7N6lgQ0zFbZD4a07/ZIdwg0CMYQ Ym61N8aibZ6rB+MPRWjTT64D9tXTpMtNcKc8i/AYwUNd+oDsnbSqxdUSVbbC5APa rmi0nkgGeQaA46px5epm8o341H9K/VVs9kdWZMcoHgdF4k6Juu9nciFuJgio6E5V q+XINEJA1XCY6DJUVg2jeuHxJWuT1uNdUssHfjHH/O6Ej7vmdiJLBIIciNi6izJR 5Q3BXJzmjIZwDGOKmqr4Zq5fB9ErOdlRfrODukumd6VA35RCVHPzu3kvgEIKqc+U 57EHDxcDKO+QSHeUY6zhHM4k9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn0+KuW 0LxDZhd1d3ZGE/bZtZi3MB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcaNUgfT4YIQsHJIEgVbC186CQPo2pqDSQFp3LDmS83R2QCXlD7jBK +ybLpmT+KAZLcF7PSxB058yjlcOPdV1/mf8Oz1lDZTIZX9HSIZ+ORfT6A4jb2WNi 0X6fPL2bFWUh8aSwh/oNjZsWc6e17d0+IEYx6jaD+vQJeSVQF5Y7J+hvitUEGrMf /VbnJPkmd5qVOFCpx6PcUMccJiHVYheO3o7PdyaXpiQTjNCDqk0ecD63XEM1Lc6N 75bxU5YYkHUq1y1IODF72w7L2Mu682elPgNi1VJe1NZroPz4FNrzpdL+NnqO2S1i sEi1HLuJXF2UR37XcdKFVyVErihpgPld -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:29 2025 by rpki-client