$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: G0uHFu/6AlzwEh1Wj3ZuyyA15Av4R+hvLyJzMnmaNSU= Subject key identifier: FC:0B:7B:6D:4A:03:23:67:63:50:FF:B1:0A:CE:EE:CD:F8:82:E6:5A Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 74 Signing time: Mon 03 Nov 2025 06:57:01 +0000 Manifest this update: Mon 03 Nov 2025 06:57:01 +0000 Manifest next update: Mon 10 Nov 2025 06:57:01 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: k6NYBZ8CukiwOoLI6/tVxYSTX4w39/Q/z3oC+gk7ck8=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: SWRmAGbxh5hY7JV5X8hEzDbtYDfPhYpW9hzMkzuDG3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Nov 3 06:57:01 2025 GMT Not After : Nov 10 06:57:01 2025 GMT Subject: CN=6908523d-969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a0:ba:de:5e:d4:c3:95:8d:69:68:94:74:6a: 29:dd:55:4e:22:ef:3b:be:48:4a:19:e6:b9:6f:42: e0:a4:8e:62:bf:27:b4:aa:3a:d4:bd:04:f9:9d:b8: ef:ae:08:4f:73:6d:28:c7:6c:b2:ed:7f:bd:d1:d3: d0:f4:89:29:f1:8f:03:33:2f:c2:25:9b:1c:64:bd: 77:e0:20:ba:e7:5b:c1:27:47:98:55:c2:32:45:4b: 51:30:8a:d6:c9:c5:b4:0c:a9:53:bc:48:f7:9d:ae: e2:66:9a:35:8b:94:0a:a8:97:28:70:71:5d:c9:7c: ef:7d:8c:35:5d:75:4e:dd:2a:aa:bb:1e:0e:22:48: 16:63:8f:6d:c2:7f:4f:13:40:47:66:de:e0:dd:18: c1:4d:93:5b:66:2e:b9:b0:45:63:ca:47:b9:63:9d: ba:4d:31:f5:77:9b:2b:b7:b5:89:a0:5d:e1:4b:78: 67:b0:b8:85:52:f5:62:51:f4:b3:fa:f0:cd:d0:2e: 4c:38:06:cc:c9:f1:2d:5a:a8:d8:35:10:19:5e:51: 3d:75:c2:82:63:56:09:86:a6:7c:71:47:49:ac:c7: 5f:71:23:58:74:1f:9b:1e:71:a5:77:74:93:13:5a: 67:e3:f8:cc:a1:00:b1:80:24:41:2d:f7:cf:9f:4b: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0B:7B:6D:4A:03:23:67:63:50:FF:B1:0A:CE:EE:CD:F8:82:E6:5A X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4c:21:e0:ba:64:2d:ea:7b:2b:a2:2f:99:3b:f0:17:77:36: e7:2e:d5:42:0d:67:ed:5b:6d:f4:c1:ab:31:90:c5:2a:76:33: 0a:cd:d5:7d:56:aa:01:b3:92:00:b6:a4:14:bc:65:bf:bf:97: 3f:f0:cb:69:2c:db:f6:3d:39:e0:1f:7c:65:11:28:62:13:ee: 35:c2:f1:70:94:5c:61:ad:b1:e3:4e:f5:0d:f7:ef:46:fc:a0: 8e:2a:da:7b:7b:e0:1a:0b:0a:88:97:0c:c7:1a:96:eb:62:fa: 50:ce:c2:3f:ad:9e:33:92:54:9e:87:3c:15:01:0f:a9:a5:a1: e5:c7:57:d0:47:d8:cf:ea:41:e6:dd:b9:63:be:cc:f7:0e:0f: 41:38:06:bd:f5:2b:d1:57:77:41:4f:b4:e0:32:62:17:d4:43: 17:24:cf:ea:02:6b:fb:eb:2e:4e:3d:f2:74:2f:bb:69:41:54: 8c:8e:1a:19:30:36:53:c0:00:30:cd:67:b7:02:b8:ab:cd:2d: 07:77:a5:00:03:0f:01:a6:10:9d:a6:98:61:3e:fe:75:ec:a3: 8e:5e:3e:f1:e3:8e:af:73:36:3d:87:9e:ab:3d:3e:8c:f0:40: 4c:c2:7c:35:53:64:43:f7:e0:47:ef:1d:ef:3c:f0:73:c3:a0: e1:48:31:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0I1RjExMC8GA1UEBRMoOTQ5NkIxRkM2MDYzNjQ0MzcyMzk4Q0VBMzM4QjgyMjQy NTkxNzVDQjAeFw0yNTExMDMwNjU3MDFaFw0yNTExMTAwNjU3MDFaMBgxFjAUBgNV BAMTDTY5MDg1MjNkLTk2OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnoLreXtTDlY1paJR0aindVU4i7zu+SEoZ5rlvQuCkjmK/J7SqOtS9BPmduO+u CE9zbSjHbLLtf73R09D0iSnxjwMzL8IlmxxkvXfgILrnW8EnR5hVwjJFS1EwitbJ xbQMqVO8SPedruJmmjWLlAqolyhwcV3JfO99jDVddU7dKqq7Hg4iSBZjj23Cf08T QEdm3uDdGMFNk1tmLrmwRWPKR7ljnbpNMfV3myu3tYmgXeFLeGewuIVS9WJR9LP6 8M3QLkw4BszJ8S1aqNg1EBleUT11woJjVgmGpnxxR0msx19xI1h0H5secaV3dJMT Wmfj+MyhALGAJEEt98+fSwcNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/At7bUoD I2djUP+xCs7uzfiC5lowHwYDVR0jBBgwFoAUlJax/GBjZENyOYzqM4uCJCWRdcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQjVGL0JBMDBDNTE0MTM2 NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEpheF9HQmpaRU55T1l6cU00dUNKQ1dSZGNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVO eU9ZenFNNHVDSkNXUmRjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC5MIeC6ZC3qeyuiL5k78Bd3Nucu1UINZ+1bbfTBqzGQxSp2MwrN1X1W qgGzkgC2pBS8Zb+/lz/wy2ks2/Y9OeAffGURKGIT7jXC8XCUXGGtseNO9Q3370b8 oI4q2nt74BoLCoiXDMcaluti+lDOwj+tnjOSVJ6HPBUBD6mloeXHV9BH2M/qQebd uWO+zPcOD0E4Br31K9FXd0FPtOAyYhfUQxckz+oCa/vrLk498nQvu2lBVIyOGhkw NlPAADDNZ7cCuKvNLQd3pQADDwGmEJ2mmGE+/nXso45ePvHjjq9zNj2Hnqs9Pozw QEzCfDVTZEP34EfvHe888HPDoOFIMUA= -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:05 2025 by rpki-client