$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: mOtcYjyDPD1uaWQuIwkT5LCjQV925ZqWFa0NFlOkHgA= Subject key identifier: F9:34:50:B6:04:48:5E:4F:B7:65:2E:66:9E:36:33:C4:66:E5:6C:31 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: BB Signing time: Mon 03 Nov 2025 05:57:53 +0000 Manifest this update: Mon 03 Nov 2025 05:57:52 +0000 Manifest next update: Mon 10 Nov 2025 05:57:52 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: aOQVt5wOJQ8hL82x1Pm57adHfy2l8gGdWwsugx+MDLw=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Nov 3 05:57:52 2025 GMT Not After : Nov 10 05:57:52 2025 GMT Subject: CN=69084460-f375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:80:3c:e8:a5:05:7c:9c:c6:87:10:f2:d3: 6a:df:53:af:ce:26:52:65:b8:d7:4d:e2:88:3f:33: 13:e3:a9:b9:f6:95:eb:d4:d8:92:cd:8d:9f:c7:fa: dd:3c:76:4e:18:a8:02:e9:54:07:ee:e4:5f:fe:fa: 54:d7:58:be:3a:99:b5:7f:eb:9e:8c:c9:c1:89:16: 61:06:8c:53:2f:1a:1e:cd:72:85:c9:14:be:5f:90: c7:19:d5:2f:97:77:67:bb:1c:db:6a:d8:5b:0a:93: 77:6b:5f:3d:12:67:a0:39:c2:3d:e9:af:da:58:b3: 05:cd:bb:45:ef:28:c2:00:55:24:e0:86:96:f7:62: 3d:7b:f9:0a:c6:6e:ed:00:32:9b:e6:44:50:e6:76: 80:20:c3:df:0f:62:b8:00:42:24:74:ac:06:4b:23: 97:06:ef:6d:6f:06:8e:b7:0c:ec:8b:2a:2a:32:cc: 09:8a:08:15:15:ff:f8:e6:1a:e7:15:98:8e:18:a7: ef:5f:4d:ef:f9:c2:63:ae:bf:70:c0:38:84:d0:54: a1:2c:0d:7b:d0:bd:6b:81:e9:aa:aa:f4:2f:84:25: ee:4e:1b:0e:b1:60:5d:4b:d7:83:d9:b9:34:53:04: 22:44:dc:55:85:f0:6f:4d:4c:3c:42:d1:e5:42:05: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:34:50:B6:04:48:5E:4F:B7:65:2E:66:9E:36:33:C4:66:E5:6C:31 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:6a:59:af:61:8e:6b:49:fe:51:e2:37:a0:6b:9e:e8:54:fe: 61:34:a3:68:7f:56:42:f2:7d:d5:79:56:27:ae:05:91:83:e3: b0:1d:7f:d8:fc:f3:23:f0:13:9f:97:7e:e2:e2:65:68:85:d4: be:34:08:c8:54:e7:84:62:bc:b9:75:91:0e:4e:ae:6f:db:75: 5f:44:22:c3:1e:33:e9:e7:fa:c1:e1:21:98:62:26:78:fb:a2: 4d:97:27:39:5b:d3:6c:48:6e:7c:df:f9:d3:fa:ec:03:f8:a4: 0e:21:fa:e0:e3:ca:64:ec:5e:41:17:1d:6d:c2:d7:78:8a:43: 02:40:76:e9:e8:5c:ca:6f:59:32:7d:fe:1a:69:ca:35:a5:d5: 9f:67:96:a2:77:e2:d7:2e:72:49:83:a1:f1:a6:5c:ed:8d:55: 3a:57:3d:ed:1f:d2:9a:d5:e4:76:52:64:3a:41:98:9f:44:68: f8:3d:20:66:d8:d1:0e:69:77:47:82:c6:91:db:88:04:12:13: 4f:f7:d0:bf:8d:a4:16:04:06:77:8e:58:1f:c1:bd:26:15:d3: 1e:b5:32:0c:bb:1f:31:8b:76:c8:61:48:25:a9:3e:57:ab:2b: 93:fc:49:3d:ca:51:18:da:b9:6a:93:e2:98:35:52:a6:55:76: 94:aa:98:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDNkExMTAvBgNVBAUTKDQ0OUQwN0RBOTIwREEwMjYzNDJCRjZFMjY4OUNDN0Uw RjBBM0NBRkMwHhcNMjUxMTAzMDU1NzUyWhcNMjUxMTEwMDU1NzUyWjAYMRYwFAYD VQQDEw02OTA4NDQ2MC1mMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP2APOilBXycxocQ8tNq31OvziZSZbjXTeKIPzMT46m59pXr1NiSzY2fx/rd PHZOGKgC6VQH7uRf/vpU11i+Opm1f+uejMnBiRZhBoxTLxoezXKFyRS+X5DHGdUv l3dnuxzbathbCpN3a189EmegOcI96a/aWLMFzbtF7yjCAFUk4IaW92I9e/kKxm7t ADKb5kRQ5naAIMPfD2K4AEIkdKwGSyOXBu9tbwaOtwzsiyoqMswJiggVFf/45hrn FZiOGKfvX03v+cJjrr9wwDiE0FShLA170L1rgemqqvQvhCXuThsOsWBdS9eD2bk0 UwQiRNxVhfBvTUw8QtHlQgWVGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk0ULYE SF5Pt2UuZp42M8Rm5WwxMB8GA1UdIwQYMBaAFESdB9qSDaAmNCv24micx+Dwo8r8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUM2QS85MDY2MkVCNjlD MEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9DWTBLX2JpYUp6SDRQQ2p5 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUM2QS85MDY2MkVCNjlDMEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9D WTBLX2JpYUp6SDRQQ2p5dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjalmvYY5rSf5R4jega57oVP5hNKNof1ZC8n3VeVYnrgWRg+OwHX/Y /PMj8BOfl37i4mVohdS+NAjIVOeEYry5dZEOTq5v23VfRCLDHjPp5/rB4SGYYiZ4 +6JNlyc5W9NsSG583/nT+uwD+KQOIfrg48pk7F5BFx1twtd4ikMCQHbp6FzKb1ky ff4aaco1pdWfZ5aid+LXLnJJg6HxplztjVU6Vz3tH9Ka1eR2UmQ6QZifRGj4PSBm 2NEOaXdHgsaR24gEEhNP99C/jaQWBAZ3jlgfwb0mFdMetTIMux8xi3bIYUglqT5X qyuT/Ek9ylEY2rlqk+KYNVKmVXaUqpjT -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:56 2025 by rpki-client