$ rpki-client -vvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft File: J1fRH3t4Z0h7jocB1yrGGtMnng4.mft (raw, json) Hash identifier: a4jw827+Wi8wGsHCyeh6DH90kZ4f0jI6h7Eku6Aqvpg= Subject key identifier: F4:0F:A4:84:FF:4D:B1:63:2E:21:60:AE:C5:ED:59:E8:86:56:D5:02 Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft Manifest number: 27 Signing time: Mon 03 Nov 2025 07:42:23 +0000 Manifest this update: Mon 03 Nov 2025 07:42:23 +0000 Manifest next update: Mon 10 Nov 2025 07:42:23 +0000 Files and hashes: 1: J1fRH3t4Z0h7jocB1yrGGtMnng4.crl (hash: 7n5Eq1UAcROGE0e90XzWK59Hfa6hf30YPMtBYVoxy40=) 2: 707D9934829811F094DDE01BC4F9AE02.roa (hash: vpJw5tD7ahNx3MYC9rIcR/PLmpedKKSgk44Iu/sVqlc=) 3: 7007614C829811F094DDE01BC4F9AE02.roa (hash: JlL7rH6+ZbtU8No2nd92dJUVhL2GM05xukkBhUx8vso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Validity Not Before: Nov 3 07:42:23 2025 GMT Not After : Nov 10 07:42:23 2025 GMT Subject: CN=69085cdf-83da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:10:ba:aa:e9:4d:0d:fe:48:98:32:27:2f: 51:3c:a3:36:02:5e:c0:b9:82:0a:06:5d:10:20:93: 8c:54:21:9c:f1:4e:15:43:7d:56:32:af:2e:44:f1: 9c:f4:fe:df:fe:83:c0:1b:52:6b:40:43:a2:19:ce: a0:05:01:9a:d3:24:e3:c0:a5:e7:fd:1c:2a:ca:2b: 27:16:cf:a9:d3:f3:c9:0c:55:e0:32:5c:60:68:38: 5f:d3:fb:65:06:bf:d7:7e:c5:8f:fa:ae:a7:36:93: 8e:b3:04:65:bb:47:23:0d:12:2e:cb:d3:92:b8:0b: 0b:58:34:4b:09:19:be:7f:4d:ad:5d:ed:5c:14:9a: 7f:46:f6:ee:10:f3:3e:d7:c3:6a:c5:6e:6c:30:90: 29:71:e0:41:a2:60:0e:c6:f8:fd:04:59:b6:46:97: 24:b3:d5:99:f7:91:96:92:5c:5b:00:93:3e:5c:18: 95:80:6a:2b:9d:f3:e4:7f:34:ec:d1:60:c0:79:58: cb:75:55:6f:8f:51:25:bc:c9:18:10:25:11:75:cc: 43:c4:20:40:11:96:da:b4:17:f5:cf:bd:3b:c2:1d: 6b:83:d3:fb:c4:4a:85:e4:83:51:28:69:cc:43:84: c5:fd:53:8f:df:ac:a9:67:e9:d7:48:85:58:a1:96: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0F:A4:84:FF:4D:B1:63:2E:21:60:AE:C5:ED:59:E8:86:56:D5:02 X509v3 Authority Key Identifier: keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:92:4c:31:bd:b0:d7:fe:8c:a8:8d:8c:4c:0f:f5:bf:fa:06: a5:44:9e:89:ab:90:9b:14:b8:1d:e0:15:f5:25:1e:f0:64:a6: 45:db:29:18:55:99:df:71:f9:1f:37:5d:57:ea:49:0e:25:5f: fc:98:09:c8:3a:df:f5:19:ec:4a:37:a3:bc:da:f0:d7:87:4b: 6c:04:92:d7:fd:7a:e5:4c:b2:18:bd:26:35:4e:83:48:2e:f2: 9b:35:71:4b:21:e3:7b:c2:d1:b9:6e:10:30:eb:9a:f1:36:9d: 61:5a:ca:5a:d6:c0:48:b2:61:c4:c5:1f:8f:27:6b:a4:a3:0c: ed:80:14:14:8d:b9:11:a1:5e:7d:75:5d:55:97:9c:b1:88:f4: 4c:09:2e:05:16:86:06:cc:4e:20:76:00:97:63:1d:c1:a0:a2: 00:8f:a2:dd:b1:cf:fc:fa:f8:45:ed:86:8e:5b:66:51:fb:86: e7:d9:44:f5:ad:44:43:90:50:c7:7a:bd:7e:b6:6b:23:a9:da: 0c:9d:47:e2:5c:7b:7f:7e:e4:88:dc:3e:77:b0:2b:33:99:ec: d0:f2:79:3a:e5:be:ae:ea:e0:18:18:24:02:9f:1a:cf:f0:95: ae:e5:32:0b:2a:71:9f:80:9e:a1:ec:cd:40:54:be:7f:7d:f4: 25:85:b5:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzU3RjExMC8GA1UEBRMoMjc1N0QxMUY3Qjc4Njc0ODdCOEU4NzAxRDcyQUM2MUFE MzI3OUUwRTAeFw0yNTExMDMwNzQyMjNaFw0yNTExMTAwNzQyMjNaMBgxFjAUBgNV BAMTDTY5MDg1Y2RmLTgzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBwRC6qulNDf5ImDInL1E8ozYCXsC5ggoGXRAgk4xUIZzxThVDfVYyry5E8Zz0 /t/+g8AbUmtAQ6IZzqAFAZrTJOPApef9HCrKKycWz6nT88kMVeAyXGBoOF/T+2UG v9d+xY/6rqc2k46zBGW7RyMNEi7L05K4CwtYNEsJGb5/Ta1d7VwUmn9G9u4Q8z7X w2rFbmwwkClx4EGiYA7G+P0EWbZGlySz1Zn3kZaSXFsAkz5cGJWAaiud8+R/NOzR YMB5WMt1VW+PUSW8yRgQJRF1zEPEIEARltq0F/XPvTvCHWuD0/vESoXkg1EoacxD hMX9U4/frKln6ddIhVihlhEFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9A+khP9N sWMuIWCuxe1Z6IZW1QIwHwYDVR0jBBgwFoAUJ1fRH3t4Z0h7jocB1yrGGtMnng4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTdGL0E0Q0NEQzYyN0Y2 RjExRjBCNjNFNEUzQkM0RjlBRTAyL0oxZlJIM3Q0WjBoN2pvY0IxeXJHR3RNbm5n NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjFmUkgzdDRaMGg3am9jQjF5ckdHdE1ubmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTdGL0E0Q0NEQzYyN0Y2RjExRjBCNjNFNEUzQkM0RjlBRTAyL0oxZlJIM3Q0WjBo N2pvY0IxeXJHR3RNbm5nNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKSTDG9sNf+jKiNjEwP9b/6BqVEnomrkJsUuB3gFfUlHvBkpkXbKRhV md9x+R83XVfqSQ4lX/yYCcg63/UZ7Eo3o7za8NeHS2wEktf9euVMshi9JjVOg0gu 8ps1cUsh43vC0bluEDDrmvE2nWFaylrWwEiyYcTFH48na6SjDO2AFBSNuRGhXn11 XVWXnLGI9EwJLgUWhgbMTiB2AJdjHcGgogCPot2xz/z6+EXtho5bZlH7hufZRPWt REOQUMd6vX62ayOp2gydR+Jce39+5IjcPnewKzOZ7NDyeTrlvq7q4BgYJAKfGs/w la7lMgsqcZ+AnqHszUBUvn999CWFtQc= -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:05 2025 by rpki-client