$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: AOiF52D/bZNgKl0MhcLz0ijzV/Kl1AgIVYt310EMFvw= Subject key identifier: D8:E0:13:F5:95:D7:A3:89:B6:C9:CE:A5:7F:4A:85:71:1E:D7:E8:0B Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 0134 Signing time: Mon 03 Nov 2025 04:40:21 +0000 Manifest this update: Mon 03 Nov 2025 04:40:21 +0000 Manifest next update: Mon 10 Nov 2025 04:40:21 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: IMudSeQyebQfXAnF9wHOEaHCGm7iDMEP1kQ2bAE3kuQ=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: 5yzlKlMAZKx7ZaDS6lxrvNLvX0b2HNK+sHE9yk3N0Zo=) 3: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (hash: k7/BYTs5AWckPfc2XRwU2AWPU1bg1726dtxN6yLvkRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Nov 3 04:40:21 2025 GMT Not After : Nov 10 04:40:21 2025 GMT Subject: CN=69083235-0937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:97:dd:e9:1c:e2:3b:74:a9:31:0c:b4:da: 9d:f2:4f:15:6a:95:67:6c:1f:82:7f:e3:9e:fd:52: 53:a0:7f:c4:1f:be:7a:35:c5:ef:55:52:2c:74:ae: 89:33:4f:f2:6d:8f:fc:31:eb:7b:8a:1e:c5:ce:40: d8:e0:1c:d8:a0:a2:87:ca:32:4f:82:30:f9:f6:05: 69:dc:59:33:06:64:c3:6c:8e:27:3f:4a:a5:ee:90: e3:47:0a:63:fa:d7:f3:65:cf:a7:02:c0:77:d3:4b: 3b:e8:89:a6:f2:c3:c0:10:48:dc:c5:97:7e:49:d3: 42:13:b8:17:09:c6:8d:5a:8c:48:c8:e5:83:8f:68: 1f:28:ac:0c:47:b9:2a:da:1e:f2:b2:4a:f4:79:71: 96:35:4b:e8:88:6c:3a:b1:ab:84:d5:5b:f1:ad:64: 5e:1a:58:7c:b7:1c:3c:05:9e:a3:d8:2f:42:0f:7b: cf:c7:e1:b0:11:eb:4e:7d:9b:b7:3d:c1:e9:b7:d2: f7:aa:f2:41:51:d6:f6:d6:3e:e7:0c:84:f3:94:c8: 33:91:1b:ef:11:e0:99:0b:af:15:b7:de:70:bc:0d: b9:b8:f1:69:c7:cf:6e:a8:1f:46:e4:fd:84:12:8b: db:af:92:d8:fa:28:82:eb:c1:a2:3a:e4:98:fe:59: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E0:13:F5:95:D7:A3:89:B6:C9:CE:A5:7F:4A:85:71:1E:D7:E8:0B X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9d:14:d9:c0:f2:b2:da:33:55:4b:d8:e8:f5:7b:46:dd:98: 68:ca:ba:49:33:0d:e6:ee:79:5b:01:cb:0f:60:19:66:15:b1: 78:95:51:91:f8:74:86:c9:70:a9:ab:19:61:dd:6d:62:e2:8f: c5:dd:5d:35:de:e8:2b:2c:75:fa:55:21:36:16:f4:9d:b3:e0: f6:cf:93:3d:b0:e2:9d:16:e1:06:73:2c:d8:9d:ec:4a:4a:17: 32:81:63:55:1f:a0:7e:b2:ab:3c:ec:c6:e1:76:09:da:1c:9e: d5:ac:e3:b8:d1:07:aa:f2:0f:7a:38:c3:4d:bf:50:64:dc:85: 48:bd:7d:64:8d:77:49:4e:f3:a5:03:1a:8f:7a:8e:f7:58:f5: 64:87:16:3d:54:5d:1c:f1:2b:06:79:0b:ed:93:ab:0e:a0:a4: db:32:44:9f:03:4f:29:38:80:98:2f:4a:17:2e:bb:ec:52:b5: 5c:92:74:f5:31:b3:0d:92:68:94:e7:51:17:0c:41:b2:54:32: a7:42:c2:85:2f:db:62:82:4e:2a:1d:26:85:ea:a2:83:26:ec: 9b:99:f3:8b:0f:73:f1:03:ef:cd:f4:a6:b9:a9:26:80:fd:09: 6d:a0:9d:0b:2d:67:70:36:9a:c7:f8:dd:9e:c8:50:4b:7e:84: 4c:92:1a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUxMTAzMDQ0MDIxWhcNMjUxMTEwMDQ0MDIxWjAYMRYwFAYD VQQDEw02OTA4MzIzNS0wOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwOX3ekc4jt0qTEMtNqd8k8VapVnbB+Cf+Oe/VJToH/EH756NcXvVVIsdK6J M0/ybY/8Met7ih7FzkDY4BzYoKKHyjJPgjD59gVp3FkzBmTDbI4nP0ql7pDjRwpj +tfzZc+nAsB300s76Imm8sPAEEjcxZd+SdNCE7gXCcaNWoxIyOWDj2gfKKwMR7kq 2h7yskr0eXGWNUvoiGw6sauE1VvxrWReGlh8txw8BZ6j2C9CD3vPx+GwEetOfZu3 PcHpt9L3qvJBUdb21j7nDITzlMgzkRvvEeCZC68Vt95wvA25uPFpx89uqB9G5P2E Eovbr5LY+iiC68GiOuSY/lmgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjgE/WV 16OJtsnOpX9KhXEe1+gLMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqnRTZwPKy2jNVS9jo9XtG3ZhoyrpJMw3m7nlbAcsPYBlmFbF4lVGR +HSGyXCpqxlh3W1i4o/F3V013ugrLHX6VSE2FvSds+D2z5M9sOKdFuEGcyzYnexK ShcygWNVH6B+sqs87MbhdgnaHJ7VrOO40Qeq8g96OMNNv1Bk3IVIvX1kjXdJTvOl AxqPeo73WPVkhxY9VF0c8SsGeQvtk6sOoKTbMkSfA08pOICYL0oXLrvsUrVcknT1 MbMNkmiU51EXDEGyVDKnQsKFL9tigk4qHSaF6qKDJuybmfOLD3PxA+/N9Ka5qSaA /QltoJ0LLWdwNprH+N2eyFBLfoRMkhoX -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:19 2025 by rpki-client