$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft File: jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json) Hash identifier: Otoo7YoSaX75JTJFqtXmAI6eWHQtXEN7xzdIVLi1hJI= Subject key identifier: 07:0E:43:79:AC:FC:5C:9F:56:04:F1:C3:58:CA:E0:6D:CF:CF:91:A7 Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Certificate serial: 14D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft Manifest number: 14CF Signing time: Tue 04 Nov 2025 16:57:00 +0000 Manifest this update: Tue 04 Nov 2025 16:56:59 +0000 Manifest next update: Tue 11 Nov 2025 16:56:59 +0000 Files and hashes: 1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: QIMDHsjwDXh/Jfw479LJLF4UuQP3BNvGLgSU5GOrudk=) 2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5337 (0x14d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Validity Not Before: Nov 4 16:56:59 2025 GMT Not After : Nov 11 16:56:59 2025 GMT Subject: CN=690a305b-eed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:23:2a:42:4c:f8:89:00:1a:95:1e:bc:7d: b2:c4:3c:1f:4d:3c:86:7f:a0:01:aa:1a:cd:c7:a0: 96:3a:84:83:10:17:d6:f2:7b:22:47:b3:40:98:b5: d4:e2:80:27:e3:11:51:1c:d4:3e:63:81:b2:ec:c8: df:fb:f3:0e:bf:51:e2:2c:49:f9:b8:97:ec:dc:47: 19:ea:5d:f0:5b:14:1c:4c:35:ec:db:ce:52:38:2e: 83:10:25:56:46:71:00:57:f1:33:6b:18:e2:40:b5: 4f:26:c3:61:e2:eb:87:96:89:e8:93:8a:9c:8f:a7: 16:c2:8c:b8:05:f3:32:52:db:c0:d0:d0:4e:a5:3a: 0b:f9:f4:38:0f:29:dd:0d:26:f9:02:2f:b8:6c:d6: 1d:64:d4:10:d5:ff:95:21:ba:f9:d3:38:53:96:6a: f8:86:d5:41:bd:a9:e5:9f:25:55:91:95:f8:3a:4f: 0b:95:89:4b:6c:b1:c8:18:a5:0a:db:50:6b:2f:80: 94:64:64:71:e5:07:c6:57:44:7e:34:70:84:11:b4: 67:82:7c:d1:25:a6:4e:d0:cd:9c:71:df:5e:ac:2e: 34:1d:7e:f4:ce:00:4a:29:3d:58:b0:48:98:a2:4a: 0d:dc:6f:99:40:e3:4e:7d:19:42:a2:ce:91:61:02: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0E:43:79:AC:FC:5C:9F:56:04:F1:C3:58:CA:E0:6D:CF:CF:91:A7 X509v3 Authority Key Identifier: keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7f:30:ba:43:53:71:bc:ba:a9:04:cf:20:0e:32:42:0a:9b: 32:6a:6a:4d:00:46:40:0c:e1:25:bb:f7:e8:5b:69:63:9c:c2: 96:a1:4b:a5:5d:80:30:19:09:88:70:94:07:5d:c6:59:72:2d: a3:91:74:e0:71:af:c4:9e:e2:99:74:e7:aa:9f:de:fe:ec:3c: 4f:ae:dd:83:1c:4f:b5:a5:f6:19:4c:04:f2:a3:8f:79:1e:15: 1d:7b:48:8f:4b:9e:57:8d:60:ed:c4:02:ce:8c:9d:6e:a5:ad: 17:15:3d:80:6b:74:8b:3e:e8:ef:91:8d:0f:06:e5:01:91:c6: 6b:ec:97:04:36:61:66:0b:9e:4f:5b:dc:0c:55:5a:34:c9:54: a5:9d:1b:5e:7a:66:e1:a5:9c:03:35:6e:f7:ab:ec:1f:a0:9f: d4:a9:0d:33:51:e3:02:a8:bd:48:7f:12:90:2f:29:58:31:9f: 05:1b:f9:29:e1:96:c5:71:f8:fc:9b:71:a6:71:1f:1e:29:72: 7c:b9:66:83:31:f5:f4:30:fc:11:c1:e5:82:19:a5:f6:5f:9b: 02:d9:03:ea:7f:08:bb:91:07:40:3a:f4:7a:50:61:9d:41:18: 5e:de:e3:d0:21:32:ea:ca:6d:f2:36:a8:08:f2:49:36:84:45: 49:25:40:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE OUU0MTlCNEYwHhcNMjUxMTA0MTY1NjU5WhcNMjUxMTExMTY1NjU5WjAYMRYwFAYD VQQDEw02OTBhMzA1Yi1lZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqukjKkJM+IkAGpUevH2yxDwfTTyGf6ABqhrNx6CWOoSDEBfW8nsiR7NAmLXU 4oAn4xFRHNQ+Y4Gy7Mjf+/MOv1HiLEn5uJfs3EcZ6l3wWxQcTDXs285SOC6DECVW RnEAV/EzaxjiQLVPJsNh4uuHlonok4qcj6cWwoy4BfMyUtvA0NBOpToL+fQ4Dynd DSb5Ai+4bNYdZNQQ1f+VIbr50zhTlmr4htVBvanlnyVVkZX4Ok8LlYlLbLHIGKUK 21BrL4CUZGRx5QfGV0R+NHCEEbRngnzRJaZO0M2ccd9erC40HX70zgBKKT1YsEiY okoN3G+ZQONOfRlCos6RYQLQDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcOQ3ms /FyfVgTxw1jK4G3Pz5GnMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GOTBEOTQ3NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNh enpFeFdDV1gxY3JaNUJtMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpfzC6Q1NxvLqpBM8gDjJCCpsyampNAEZADOElu/foW2ljnMKWoUul XYAwGQmIcJQHXcZZci2jkXTgca/EnuKZdOeqn97+7DxPrt2DHE+1pfYZTATyo495 HhUde0iPS55XjWDtxALOjJ1upa0XFT2Aa3SLPujvkY0PBuUBkcZr7JcENmFmC55P W9wMVVo0yVSlnRteembhpZwDNW73q+wfoJ/UqQ0zUeMCqL1IfxKQLylYMZ8FG/kp 4ZbFcfj8m3GmcR8eKXJ8uWaDMfX0MPwRweWCGaX2X5sC2QPqfwi7kQdAOvR6UGGd QRhe3uPQITLqym3yNqgI8kk2hEVJJUAe -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:25 2025 by rpki-client