$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: B38jUH3xzXfuGV6Nk7+edLhIHKwdp8cFai6yQga96S4= Subject key identifier: 97:82:90:A8:63:A0:51:8D:39:75:2B:7D:D4:DF:A0:F4:3B:39:06:B6 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 02CB Signing time: Mon 03 Nov 2025 01:22:15 +0000 Manifest this update: Mon 03 Nov 2025 01:22:15 +0000 Manifest next update: Mon 10 Nov 2025 01:22:15 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: GkqbTlI6vuSyhlxMNfX8dFtOT+tnPyXoAPTRSANjvb8=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Nov 3 01:22:15 2025 GMT Not After : Nov 10 01:22:15 2025 GMT Subject: CN=690803c7-62a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:42:25:97:10:ce:4f:d1:02:73:58:55:92: 0f:7f:41:8b:ae:c5:ea:32:9d:de:02:f6:cb:78:e7: df:ff:fd:e1:43:32:b3:85:d7:1a:c7:97:2b:a1:b4: f7:1b:dc:c8:0b:83:e1:db:21:d7:8b:38:7e:2d:3c: fa:50:14:65:1b:69:02:e6:ab:a0:fc:5a:e3:fd:7d: 34:96:db:49:6b:10:24:61:6e:70:b3:b5:c7:39:38: 3d:b9:46:fd:30:32:60:cd:ed:11:fa:65:07:c8:70: 7b:7a:21:db:86:bc:18:9b:a1:f9:a1:56:65:78:23: 54:c4:34:87:59:82:68:39:80:3f:6b:7a:55:26:71: cb:78:40:5d:d3:e9:37:81:97:a9:97:ea:b2:6d:53: 67:b0:f0:58:ea:f9:52:38:f7:35:ac:c4:e6:7e:2b: 3e:67:97:81:cb:50:49:c6:f4:8d:6f:a0:b8:d3:b4: 15:ef:1e:80:fa:4f:1f:6c:50:2f:e7:65:d4:3d:19: d9:33:88:b4:7d:cc:fc:26:ce:96:78:70:5f:34:17: 17:37:75:8b:9e:05:a8:56:14:29:a0:7e:36:bd:e8: e2:7d:27:b3:0d:ac:71:5c:31:fa:93:5a:af:64:c0: 16:cb:f2:88:53:d7:e2:61:67:a8:b3:14:5e:a5:e5: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:82:90:A8:63:A0:51:8D:39:75:2B:7D:D4:DF:A0:F4:3B:39:06:B6 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:53:fe:cd:92:83:e3:5d:43:18:d9:ff:c4:72:a9:ef:b6:9f: 7c:95:bc:ad:7e:d7:66:90:35:b5:d5:b7:af:ef:9a:5b:45:1f: a3:2e:34:0a:85:8a:65:f9:95:be:e5:58:d6:dc:f4:e8:77:04: d3:11:33:6d:db:44:62:0c:da:64:d5:0d:0d:7b:e9:34:c5:56: c6:96:e6:93:33:86:00:b2:22:37:04:d5:47:9e:d8:3a:e9:51: c5:b1:61:13:d3:c0:bb:f3:99:35:8a:74:91:7a:83:1d:51:bd: d8:26:2a:94:7c:21:48:70:f1:64:7c:a6:a5:a9:c1:bb:e5:fd: 28:f8:d8:a7:59:a7:a4:ad:8f:71:eb:a0:bf:4e:99:91:63:4b: 57:05:c2:cb:98:14:7a:87:bd:e4:f2:9c:98:6e:17:b3:7d:07: b3:75:8a:36:2e:fb:9b:4c:ba:66:cd:13:2e:7d:23:a0:e1:13: 4a:81:b9:c5:82:5f:39:47:c2:2f:4b:77:d6:b7:ca:2b:55:b1: ef:e0:36:13:96:64:8c:73:62:28:07:3a:9b:54:b6:c6:ff:7c: 06:ed:55:6b:dc:52:32:7f:6a:81:2f:4d:f5:81:e3:0e:5a:42: 09:6e:98:66:d5:a2:c2:5e:84:10:9a:ae:71:0a:20:3c:9d:08: cb:8a:05:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUxMTAzMDEyMjE1WhcNMjUxMTEwMDEyMjE1WjAYMRYwFAYD VQQDEw02OTA4MDNjNy02MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubdCJZcQzk/RAnNYVZIPf0GLrsXqMp3eAvbLeOff//3hQzKzhdcax5crobT3 G9zIC4Ph2yHXizh+LTz6UBRlG2kC5qug/Frj/X00lttJaxAkYW5ws7XHOTg9uUb9 MDJgze0R+mUHyHB7eiHbhrwYm6H5oVZleCNUxDSHWYJoOYA/a3pVJnHLeEBd0+k3 gZepl+qybVNnsPBY6vlSOPc1rMTmfis+Z5eBy1BJxvSNb6C407QV7x6A+k8fbFAv 52XUPRnZM4i0fcz8Js6WeHBfNBcXN3WLngWoVhQpoH42vejifSezDaxxXDH6k1qv ZMAWy/KIU9fiYWeosxRepeWNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeCkKhj oFGNOXUrfdTfoPQ7OQa2MB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjU/7NkoPjXUMY2f/Ecqnvtp98lbytftdmkDW11bev75pbRR+jLjQK hYpl+ZW+5VjW3PTodwTTETNt20RiDNpk1Q0Ne+k0xVbGluaTM4YAsiI3BNVHntg6 6VHFsWET08C785k1inSReoMdUb3YJiqUfCFIcPFkfKalqcG75f0o+NinWaekrY9x 66C/TpmRY0tXBcLLmBR6h73k8pyYbhezfQezdYo2LvubTLpmzRMufSOg4RNKgbnF gl85R8IvS3fWt8orVbHv4DYTlmSMc2IoBzqbVLbG/3wG7VVr3FIyf2qBL031geMO WkIJbphm1aLCXoQQmq5xCiA8nQjLigU4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:05 2025 by rpki-client