$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: zP5E3O2Ne4HpdO81EZJwMbASNMPlEIj/sKs0w2QbeF8= Subject key identifier: 22:8F:74:FB:E9:23:CF:B2:CE:84:22:90:F4:97:DA:5A:12:E2:4B:51 Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 0204 Signing time: Mon 27 Oct 2025 03:58:55 +0000 Manifest this update: Mon 27 Oct 2025 03:58:54 +0000 Manifest next update: Mon 03 Nov 2025 03:58:54 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: gt7buKdPS8TsjNY1Jr33esVXUrEdbkO8jNg2SIIhiTc=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Oct 27 03:58:54 2025 GMT Not After : Nov 3 03:58:54 2025 GMT Subject: CN=68feedff-12f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b5:f3:d2:86:92:8b:99:0f:1b:50:f2:bf:f4: a7:46:f3:9f:25:70:e1:4a:14:7a:f8:de:d4:4b:a5: 9e:a2:8a:df:dd:ff:ac:55:22:ca:30:01:60:28:da: 84:96:8a:00:ff:8d:4d:4f:a3:68:f8:c9:24:38:43: 63:ed:91:ee:89:8c:ee:6d:51:fa:ef:bc:91:86:59: 1f:b5:77:fb:9e:db:b8:6f:01:6d:48:66:b2:91:ec: fd:4b:bc:9a:12:f7:d9:c7:a7:29:e1:fa:2c:3a:cf: a4:df:97:69:e9:8a:e4:30:57:75:0b:d7:bc:2a:2c: c1:ed:3d:c1:84:ee:63:cd:3f:4d:37:aa:c3:4c:7c: 6c:da:10:81:84:a8:ec:23:a9:34:97:cb:c4:3c:b1: 7d:21:5a:e6:66:1c:d6:6b:f4:3c:58:e1:fc:91:04: 5b:cf:5f:32:43:65:4c:74:9f:ed:0d:01:f7:8b:b7: cf:83:23:92:ff:66:6c:9b:ac:74:4c:61:58:ea:c7: cc:b8:88:51:20:04:8b:bd:ea:4a:0f:a5:6b:2d:31: 95:db:f5:37:aa:09:6a:35:22:2a:cf:86:d2:d9:84: 27:cd:06:bb:b4:1a:60:d4:38:14:e0:b2:30:cf:74: f3:22:c5:b1:67:23:74:96:7a:a5:6c:47:dc:46:ad: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:74:FB:E9:23:CF:B2:CE:84:22:90:F4:97:DA:5A:12:E2:4B:51 X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:89:64:4c:fc:bf:7b:e9:20:94:d6:f4:02:f7:8e:aa:cc:c2: 1e:e5:ce:3f:e8:0f:07:cb:d4:0b:8f:de:86:69:1c:ae:c8:9c: 36:70:8d:3a:f0:f6:97:aa:03:6a:10:63:8b:03:33:8b:05:29: 1f:1c:07:76:cb:26:02:93:1a:60:a5:1d:9c:0c:c9:c2:da:03: c4:97:c9:2a:18:e5:ba:18:e3:01:7f:c6:05:1d:1b:61:ea:3d: e9:d4:dd:dd:39:a4:40:57:88:9a:5a:9d:62:5c:22:ab:d3:ae: 71:d2:00:91:8c:29:14:fd:ad:ce:e6:55:ba:8d:0f:c8:92:02: 79:5f:91:cb:e3:29:4f:53:42:da:78:84:c0:c8:2b:fe:1f:7e: 3d:87:05:ed:d3:e7:52:2c:b6:8f:a7:ca:3a:61:d3:d8:fd:79: c9:a6:40:44:bf:b7:c5:88:68:7d:35:f0:a1:b2:ce:2e:4d:3e: 32:87:d4:21:c0:bf:4b:6f:2a:fc:cc:84:bb:b9:ce:41:76:40: c4:77:14:ae:ee:0d:09:2a:2a:d6:78:5f:76:4f:41:f5:23:ae: 33:7a:62:e1:ad:55:ce:2a:13:00:af:a7:75:59:05:b1:76:27: 31:0e:9e:8f:26:da:c6:f2:8b:f8:d9:df:e3:38:f5:27:11:a9: ce:55:e0:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUxMDI3MDM1ODU0WhcNMjUxMTAzMDM1ODU0WjAYMRYwFAYD VQQDEw02OGZlZWRmZi0xMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LXz0oaSi5kPG1Dyv/SnRvOfJXDhShR6+N7US6Weoorf3f+sVSLKMAFgKNqE looA/41NT6No+MkkOENj7ZHuiYzubVH677yRhlkftXf7ntu4bwFtSGaykez9S7ya EvfZx6cp4fosOs+k35dp6YrkMFd1C9e8KizB7T3BhO5jzT9NN6rDTHxs2hCBhKjs I6k0l8vEPLF9IVrmZhzWa/Q8WOH8kQRbz18yQ2VMdJ/tDQH3i7fPgyOS/2Zsm6x0 TGFY6sfMuIhRIASLvepKD6VrLTGV2/U3qglqNSIqz4bS2YQnzQa7tBpg1DgU4LIw z3TzIsWxZyN0lnqlbEfcRq2cuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKPdPvp I8+yzoQikPSX2loS4ktRMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHiWRM/L976SCU1vQC946qzMIe5c4/6A8Hy9QLj96GaRyuyJw2cI06 8PaXqgNqEGOLAzOLBSkfHAd2yyYCkxpgpR2cDMnC2gPEl8kqGOW6GOMBf8YFHRth 6j3p1N3dOaRAV4iaWp1iXCKr065x0gCRjCkU/a3O5lW6jQ/IkgJ5X5HL4ylPU0La eITAyCv+H349hwXt0+dSLLaPp8o6YdPY/XnJpkBEv7fFiGh9NfChss4uTT4yh9Qh wL9Lbyr8zIS7uc5BdkDEdxSu7g0JKirWeF92T0H1I64zemLhrVXOKhMAr6d1WQWx dicxDp6PJtrG8ov42d/jOPUnEanOVeDJ -----END CERTIFICATE-----Generated at Tue Oct 28 01:32:32 2025 by rpki-client