$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: aQTGD832gyUChTOaurox7/Fg/NuDFIfbUFle0dAz3s0= Subject key identifier: 30:3A:D8:6A:19:03:FC:15:20:53:0B:72:29:28:70:D0:3E:DA:E5:41 Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 06CE Signing time: Sun 02 Nov 2025 22:00:23 +0000 Manifest this update: Sun 02 Nov 2025 22:00:23 +0000 Manifest next update: Sun 09 Nov 2025 22:00:23 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: mAzmTd0wVw/LxHhif+LNWpnDo9zXdO/BIyCxgcaqnTw=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Nov 2 22:00:23 2025 GMT Not After : Nov 9 22:00:23 2025 GMT Subject: CN=6907d477-3b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:57:d9:8d:fe:f0:ea:2e:75:16:1f:70:f9: 0a:52:49:ee:c6:2f:f5:dc:e0:70:4b:1b:26:73:23: 0c:90:bd:b5:97:32:0d:e3:c5:12:2f:5a:a7:75:c2: cc:c2:bf:28:76:59:e9:8a:cc:06:bc:3f:03:a5:bc: 52:0f:c9:35:97:05:29:09:40:c4:02:36:cc:f0:2c: 11:cf:97:50:d5:9b:3a:38:d4:bb:a4:00:a1:b0:b5: 25:e6:70:40:fa:cd:bf:14:07:db:f1:ce:7b:0f:b8: ac:eb:bb:70:83:8f:77:e2:27:c9:ad:b1:00:de:54: 27:a5:b4:29:aa:64:9d:2d:3e:25:22:d0:4a:6c:ea: d1:28:56:8f:02:d6:14:c6:77:49:44:f6:d2:a8:9e: 1b:5c:ca:3e:84:ea:5f:2e:ff:2e:9f:27:be:41:67: e8:ff:67:e6:50:f7:51:65:c9:36:9a:6c:83:29:25: a9:ce:87:63:3e:cf:24:ed:ac:3b:b1:05:68:a9:2b: f3:13:cf:84:2a:bd:30:e4:02:dd:50:d0:13:84:2f: db:24:f5:a4:43:fb:7a:04:10:d2:7d:29:08:ff:9f: 6e:32:66:5e:0d:38:3b:11:22:a4:3c:40:94:86:b9: 7d:fa:19:c5:11:b3:cf:db:7c:5a:04:bf:65:2a:3e: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3A:D8:6A:19:03:FC:15:20:53:0B:72:29:28:70:D0:3E:DA:E5:41 X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:dd:ae:e7:f3:7a:98:67:4f:6d:b6:a6:dd:20:32:5d:92:e7: 70:d7:1b:5e:72:db:5a:b7:79:9f:80:c7:99:66:04:32:df:fa: cb:c4:4f:b7:c0:87:c1:10:6f:df:81:10:f3:a8:8d:4f:63:14: 05:61:cc:08:d9:e5:2a:f4:f3:63:5c:0f:97:6b:71:f9:bd:24: 65:92:f7:6a:4b:27:6c:d8:2f:03:3a:93:f2:71:5f:4f:06:b3: 2b:76:d3:81:88:62:9b:76:74:67:96:22:41:b4:12:8d:30:bc: 9e:30:54:45:4a:49:c5:c6:5f:5b:f8:66:30:f9:16:81:76:0b: 11:11:b3:8c:87:1a:e0:b7:7f:ff:8e:2d:de:03:ea:20:e1:ca: f4:87:b2:7e:40:a4:9e:9c:17:bf:d4:6a:53:53:92:d5:fd:a2: a5:f2:23:e5:e0:1d:08:cc:79:af:d2:92:0a:6f:83:85:4f:23: 66:2c:ff:49:f3:14:c7:92:80:be:25:2a:a6:47:cb:e1:a1:55: a3:f9:f7:44:cd:30:a4:32:91:ae:48:74:f3:10:4f:9d:6f:08: 71:63:42:93:90:e0:09:4a:c4:40:ef:39:cd:98:f8:de:74:87: 0e:6f:69:17:53:a3:f5:29:ba:9e:f6:ec:10:fb:ee:70:61:83: d6:90:fe:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUxMTAyMjIwMDIzWhcNMjUxMTA5MjIwMDIzWjAYMRYwFAYD VQQDEw02OTA3ZDQ3Ny0zYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPFX2Y3+8OoudRYfcPkKUknuxi/13OBwSxsmcyMMkL21lzIN48USL1qndcLM wr8odlnpiswGvD8DpbxSD8k1lwUpCUDEAjbM8CwRz5dQ1Zs6ONS7pAChsLUl5nBA +s2/FAfb8c57D7is67twg4934ifJrbEA3lQnpbQpqmSdLT4lItBKbOrRKFaPAtYU xndJRPbSqJ4bXMo+hOpfLv8unye+QWfo/2fmUPdRZck2mmyDKSWpzodjPs8k7aw7 sQVoqSvzE8+EKr0w5ALdUNAThC/bJPWkQ/t6BBDSfSkI/59uMmZeDTg7ESKkPECU hrl9+hnFEbPP23xaBL9lKj5NuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA62GoZ A/wVIFMLcikocNA+2uVBMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt3a7n83qYZ09ttqbdIDJdkudw1xtecttat3mfgMeZZgQy3/rLxE+3 wIfBEG/fgRDzqI1PYxQFYcwI2eUq9PNjXA+Xa3H5vSRlkvdqSyds2C8DOpPycV9P BrMrdtOBiGKbdnRnliJBtBKNMLyeMFRFSknFxl9b+GYw+RaBdgsREbOMhxrgt3// ji3eA+og4cr0h7J+QKSenBe/1GpTU5LV/aKl8iPl4B0IzHmv0pIKb4OFTyNmLP9J 8xTHkoC+JSqmR8vhoVWj+fdEzTCkMpGuSHTzEE+dbwhxY0KTkOAJSsRA7znNmPje dIcOb2kXU6P1Kbqe9uwQ++5wYYPWkP6t -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:00 2025 by rpki-client