$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: 8j6e8lceI8d2d3NxlaqjVQthR3JvIZCO8kxNSWfhHBg= Subject key identifier: 25:DB:15:54:78:9B:B9:F7:0E:37:ED:02:90:F9:DF:58:28:2A:64:54 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1F67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1F63 Signing time: Tue 04 Nov 2025 16:05:48 +0000 Manifest this update: Tue 04 Nov 2025 16:05:48 +0000 Manifest next update: Tue 11 Nov 2025 16:05:48 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: EVv4jE7qfGhKUo914QLxzzXMXeU+DzSIcQSiHv1048c=) 2: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: Q+uFycE7+V0oo3Wg+zV0C0ahPstb+VAATgmaTbfe6Ok=) 3: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: ibBODN1+4t8yWfSYY+KvUP9ZEG2mJoJSb+sBmfr0WGQ=) 4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: BJs0/jRPcsGJBvrYHUb3ul04BseX67DNX5XwfN1Yugw=) 5: 899DC6D2AF8411F0B9D1E64AC4F9AE02.roa (hash: Y4e0zUUmm0EtOQAVb1xGQ/WyDzb4AhxO88RKDT2NuDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8039 (0x1f67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Nov 4 16:05:48 2025 GMT Not After : Nov 11 16:05:48 2025 GMT Subject: CN=690a245c-f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:a4:46:dc:44:5e:e1:cc:97:88:40:51:29: dc:55:fc:4b:b5:08:76:ce:e7:c9:5b:ec:b2:ee:56: df:52:53:9e:a1:79:36:55:82:cf:49:a6:b5:47:49: 6b:ae:25:4a:8d:6d:cf:cd:5a:48:2c:e9:27:46:e2: b1:56:5c:40:e6:1c:c6:8e:b0:4c:75:11:93:32:f3: a6:df:c3:57:a5:b5:be:55:a5:20:0c:07:b9:3c:45: 52:8c:90:42:96:9a:e1:a2:a8:28:a7:2e:8d:f9:84: 21:2b:95:f9:c9:61:96:95:fb:c0:c1:dd:0c:55:02: b2:d2:2e:f1:8e:21:c6:cf:07:f9:be:5b:81:94:5e: d9:c7:52:cd:fe:f8:76:00:16:9c:a6:aa:ac:d6:48: 4f:d0:01:52:1f:93:8e:75:a0:58:93:1f:46:d4:b5: 3d:8e:1d:c6:bf:66:1f:e8:f4:65:b3:f7:a2:7e:10: 82:09:ce:86:fe:d9:34:ef:83:ac:ec:f6:72:1b:40: 97:eb:e0:24:67:47:91:35:37:04:55:2e:f6:89:b7: a5:1c:29:2e:ad:99:71:97:26:5c:ce:d5:96:5f:e4: 6a:1f:80:0c:bd:4f:50:08:8d:ce:e9:e4:d7:cf:4d: a4:78:76:dc:d0:11:06:36:20:60:a6:8b:f1:b8:69: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:15:54:78:9B:B9:F7:0E:37:ED:02:90:F9:DF:58:28:2A:64:54 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9b:80:b9:2b:05:14:b3:74:8f:60:e4:72:50:5e:82:94:61: 96:ee:d6:86:41:96:ac:a0:e5:19:16:d7:de:55:01:8f:04:7d: ad:3a:e3:35:46:08:29:c7:87:8c:33:f0:07:4e:91:7d:15:ec: f8:d2:6e:49:a1:bb:ca:34:12:85:e3:92:c3:87:c4:5d:ec:c4: be:ed:31:7a:08:16:11:fc:c9:7f:f3:e7:8a:12:51:ff:34:7e: 0f:af:cd:d2:2a:66:c3:56:55:97:a0:51:30:ac:0c:81:26:fa: 4c:c5:df:f7:f5:82:84:34:f2:ec:cf:3c:34:5f:ee:93:28:ba: 74:1c:78:ba:6e:30:23:5a:e7:8f:e7:82:41:f8:b2:c4:11:ec: d6:f9:40:69:c5:71:fb:0e:89:97:03:ca:b9:f9:a2:a8:e1:bf: c8:22:23:cd:b8:af:5f:9b:b6:4e:ea:7a:a1:68:6c:6b:ab:73: c3:74:b5:f7:2d:c3:57:46:b6:db:83:6f:2f:4d:4b:bc:c5:3f: 3b:c3:52:6f:62:51:47:e2:e5:bf:6f:e3:0b:47:ef:bb:d6:aa: ef:f7:8f:d6:f9:83:7a:05:4c:2d:b0:3b:f8:e5:e2:51:aa:47: 89:f1:1d:b9:83:c0:56:d3:55:bb:49:30:31:21:6c:72:e8:98: 55:05:74:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUxMTA0MTYwNTQ4WhcNMjUxMTExMTYwNTQ4WjAYMRYwFAYD VQQDEw02OTBhMjQ1Yy1mOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzykRtxEXuHMl4hAUSncVfxLtQh2zufJW+yy7lbfUlOeoXk2VYLPSaa1R0lr riVKjW3PzVpILOknRuKxVlxA5hzGjrBMdRGTMvOm38NXpbW+VaUgDAe5PEVSjJBC lprhoqgopy6N+YQhK5X5yWGWlfvAwd0MVQKy0i7xjiHGzwf5vluBlF7Zx1LN/vh2 ABacpqqs1khP0AFSH5OOdaBYkx9G1LU9jh3Gv2Yf6PRls/eifhCCCc6G/tk074Os 7PZyG0CX6+AkZ0eRNTcEVS72ibelHCkurZlxlyZcztWWX+RqH4AMvU9QCI3O6eTX z02keHbc0BEGNiBgpovxuGn2owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXbFVR4 m7n3DjftApD531goKmRUMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjm4C5KwUUs3SPYORyUF6ClGGW7taGQZasoOUZFtfeVQGPBH2tOuM1 Rggpx4eMM/AHTpF9Fez40m5JobvKNBKF45LDh8Rd7MS+7TF6CBYR/Ml/8+eKElH/ NH4Pr83SKmbDVlWXoFEwrAyBJvpMxd/39YKENPLszzw0X+6TKLp0HHi6bjAjWueP 54JB+LLEEezW+UBpxXH7DomXA8q5+aKo4b/IIiPNuK9fm7ZO6nqhaGxrq3PDdLX3 LcNXRrbbg28vTUu8xT87w1JvYlFH4uW/b+MLR++71qrv94/W+YN6BUwtsDv45eJR qkeJ8R25g8BW01W7STAxIWxy6JhVBXTx -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:46 2025 by rpki-client