$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: z7CdaTD5LK39A0ZCHnedHIHuWaGKJ9EK8MWP2J8DRgo= Subject key identifier: F7:6C:D3:82:48:01:C4:38:A4:09:FC:48:42:13:20:6C:4E:3F:1B:DF Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 350C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 34EE Signing time: Sun 02 Nov 2025 15:16:50 +0000 Manifest this update: Sun 02 Nov 2025 15:16:50 +0000 Manifest next update: Sun 09 Nov 2025 15:16:50 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: 7V6/lgm3n3KALa0XRPO8DYbuf7HIGoyqoxtGqcI6fho=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 6cC6tQeQd87kGRdq2QumL1i69ExtEnVSm6iU0IQLUOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13580 (0x350c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Nov 2 15:16:50 2025 GMT Not After : Nov 9 15:16:50 2025 GMT Subject: CN=690775e2-ce3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:10:b8:86:95:13:f5:cb:dd:94:c5:fa:0d: 13:3f:b5:57:93:b0:29:cd:36:02:00:8f:48:15:35: 5c:7f:b2:92:96:c5:23:9c:c2:2f:66:6c:a8:4e:f4: 31:4f:d3:73:4a:bd:8e:83:50:d3:66:bb:92:89:16: 84:16:e2:1e:dd:73:d7:6c:72:9b:a5:33:d2:05:29: 57:49:17:07:f8:d1:42:a6:a4:2a:11:8d:fa:f6:eb: 20:16:5b:f0:55:82:08:34:91:59:72:9b:3d:f0:34: e9:53:20:26:c8:cc:72:e6:06:31:68:b9:c6:04:2e: ce:42:ad:de:08:4b:c2:08:bf:74:e4:3e:18:8a:08: 4e:48:7f:a7:c5:cf:76:80:30:cf:2d:35:49:da:fc: b8:bf:b6:84:aa:03:df:1a:d7:19:11:cd:92:73:b9: 54:a5:df:74:ae:1b:31:54:fe:fb:6e:29:c4:79:0a: 0a:cd:70:b4:1b:c8:3a:ae:e4:ec:bc:b2:87:cf:82: a5:1b:31:8b:01:c6:7e:1a:52:30:e6:d3:d3:93:a5: 35:f9:61:3f:83:c1:ef:8c:0b:bc:07:a1:ea:80:58: cc:02:d6:bc:fe:6c:fa:01:15:91:77:d0:0c:b0:b2: 13:b0:1c:2c:cc:44:94:90:1a:60:49:e8:90:bd:48: f0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6C:D3:82:48:01:C4:38:A4:09:FC:48:42:13:20:6C:4E:3F:1B:DF X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6a:6f:0e:3b:fc:48:71:94:2a:3b:fc:5c:a8:58:e5:03:44: b0:bd:75:e6:a5:f9:01:01:c4:0c:15:80:50:29:49:f6:25:9b: 07:43:39:60:77:89:3a:79:da:e0:4c:0b:15:c8:c8:c1:d1:fa: f5:03:e9:64:18:1f:3c:df:ac:51:e0:34:aa:49:2a:3d:2b:c2: 5d:15:4e:61:5c:a1:03:b2:a7:52:6a:39:57:09:b9:2f:17:89: a0:d7:e3:7b:64:3a:f2:4d:49:31:64:03:cd:f9:21:99:03:34: e1:85:6a:3f:ff:59:53:56:99:3d:4e:37:4d:d1:ec:e0:b0:ca: a3:06:ce:5e:f9:e5:88:69:51:13:1c:e2:9e:b9:74:e0:91:4f: b8:26:11:f4:17:d3:a4:a2:72:66:05:ff:f8:30:be:78:16:9b: 56:a2:9d:43:8f:91:b2:33:4c:cc:c6:c9:65:69:bd:61:86:19: e7:d5:04:27:06:ee:86:7d:bc:a6:b1:97:e4:39:49:06:f7:8c: ac:31:85:5e:5a:e2:93:6e:48:28:86:82:79:ac:22:5d:98:20: cf:97:1e:7d:dc:60:f5:f3:97:bc:f2:b3:fa:0d:0a:49:24:ae: ec:58:47:81:0c:f2:0c:55:99:1d:b1:ba:41:77:3f:10:d0:69: a8:56:61:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUxMTAyMTUxNjUwWhcNMjUxMTA5MTUxNjUwWjAYMRYwFAYD VQQDEw02OTA3NzVlMi1jZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz0QuIaVE/XL3ZTF+g0TP7VXk7ApzTYCAI9IFTVcf7KSlsUjnMIvZmyoTvQx T9NzSr2Og1DTZruSiRaEFuIe3XPXbHKbpTPSBSlXSRcH+NFCpqQqEY369usgFlvw VYIINJFZcps98DTpUyAmyMxy5gYxaLnGBC7OQq3eCEvCCL905D4YighOSH+nxc92 gDDPLTVJ2vy4v7aEqgPfGtcZEc2Sc7lUpd90rhsxVP77binEeQoKzXC0G8g6ruTs vLKHz4KlGzGLAcZ+GlIw5tPTk6U1+WE/g8HvjAu8B6HqgFjMAta8/mz6ARWRd9AM sLITsBwszESUkBpgSeiQvUjw+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPds04JI AcQ4pAn8SEITIGxOPxvfMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcam8OO/xIcZQqO/xcqFjlA0SwvXXmpfkBAcQMFYBQKUn2JZsHQzlg d4k6edrgTAsVyMjB0fr1A+lkGB8836xR4DSqSSo9K8JdFU5hXKEDsqdSajlXCbkv F4mg1+N7ZDryTUkxZAPN+SGZAzThhWo//1lTVpk9TjdN0ezgsMqjBs5e+eWIaVET HOKeuXTgkU+4JhH0F9OkonJmBf/4ML54FptWop1Dj5GyM0zMxsllab1hhhnn1QQn Bu6GfbymsZfkOUkG94ysMYVeWuKTbkgohoJ5rCJdmCDPlx593GD185e88rP6DQpJ JK7sWEeBDPIMVZkdsbpBdz8Q0GmoVmHX -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:30 2025 by rpki-client