$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: 1Meh+Wlw+kkn8wwat9TY2yjFLS8opy4+ZGZzFuUtL5I= Subject key identifier: E4:F1:08:F2:18:2E:1E:AF:B6:F7:08:22:9C:98:EA:B9:22:07:9E:8C Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 0708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 0701 Signing time: Sun 02 Nov 2025 21:54:01 +0000 Manifest this update: Sun 02 Nov 2025 21:54:01 +0000 Manifest next update: Sun 09 Nov 2025 21:54:01 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: aW0cvYFIEIRtrtHJJ3iXXKJbNlBOzBDQfdI3JFfYlRo=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1800 (0x708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Nov 2 21:54:01 2025 GMT Not After : Nov 9 21:54:01 2025 GMT Subject: CN=6907d2f9-0948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:c1:2a:0e:08:20:d1:ee:0d:3b:c7:56:93: 78:bf:17:29:10:8d:0b:6c:b8:74:d2:b9:a1:67:b7: 2f:8e:9a:08:be:a6:0f:70:fb:00:68:b3:6c:e7:20: 29:be:78:74:3e:9a:ed:b2:23:8c:82:30:00:95:f2: f3:6f:b8:9b:32:a6:e2:a5:c2:19:6d:c3:e6:fc:ef: 3f:4b:c2:ff:d5:cb:bc:c4:8a:6e:2d:f4:98:5e:e3: da:f8:ea:18:a1:ae:ba:d8:f1:9c:eb:23:86:cf:30: bb:d2:ae:c4:9e:b4:60:7c:a3:d5:91:2f:80:dd:39: 84:46:3b:92:e5:cd:d2:b3:76:07:94:ad:52:e7:ca: b8:af:8a:f7:5d:4b:f7:5e:8d:7e:63:9e:a1:ab:46: 3e:02:de:c0:31:38:33:b3:35:b2:7b:53:7e:c1:54: 45:2d:39:ce:06:76:79:1e:59:b1:e0:30:b7:ca:41: 51:3d:fa:9a:1e:d0:ac:e8:89:55:ba:d8:43:5d:68: ee:cd:e8:45:da:e3:2d:16:7d:0c:49:4b:7c:c9:f6: e4:7b:ad:ba:c7:77:d0:e0:5f:d8:bf:57:bc:d7:c9: 67:cd:5a:56:eb:1f:1c:f5:b6:76:03:98:d0:63:ab: db:53:58:f6:e9:0c:75:e4:00:85:da:84:54:50:fb: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F1:08:F2:18:2E:1E:AF:B6:F7:08:22:9C:98:EA:B9:22:07:9E:8C X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:d0:fa:0b:5b:a9:1e:6f:94:b2:0c:08:8b:85:18:bd:a9: a6:e9:34:5d:62:1c:a1:ab:d5:e1:29:e5:22:38:8b:47:c7:8d: c2:fb:cc:91:05:a1:32:75:b1:33:63:06:7c:80:e2:f5:a5:92: a2:fe:9a:f5:44:ce:9e:ae:22:a7:95:cc:21:ca:f0:c2:ad:a6: 01:89:2c:ca:af:75:5c:24:09:f6:38:f0:40:aa:86:88:0e:71: a4:76:5b:d4:65:b3:1b:bf:40:eb:84:fd:cf:c7:ce:3f:b5:1a: 81:2b:fd:58:c7:bd:2e:0d:75:0a:d0:ed:06:a6:d2:e0:88:ba: 1f:28:87:ee:44:2e:24:6d:69:b2:f0:20:7f:57:5f:48:89:02: e3:9d:21:a5:7c:dc:ac:20:c6:0d:06:8c:93:3e:7c:f6:5b:36: e3:58:60:a1:78:86:d7:4f:13:14:9f:99:7b:11:e8:50:7a:bc: ab:92:80:90:b7:a7:ba:c2:ef:6e:26:90:b6:2a:73:ef:c3:15: de:5c:2c:0c:be:fb:99:64:60:ad:12:e4:63:d4:9d:77:d7:b9: 3f:46:a5:18:2d:3c:8e:12:fd:e1:89:e5:4f:86:2f:c4:49:54: c7:84:2f:65:c6:05:83:d9:92:ac:a2:2c:c7:2f:05:50:9b:b0: 5a:21:6f:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUxMTAyMjE1NDAxWhcNMjUxMTA5MjE1NDAxWjAYMRYwFAYD VQQDEw02OTA3ZDJmOS0wOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprDBKg4IINHuDTvHVpN4vxcpEI0LbLh00rmhZ7cvjpoIvqYPcPsAaLNs5yAp vnh0PprtsiOMgjAAlfLzb7ibMqbipcIZbcPm/O8/S8L/1cu8xIpuLfSYXuPa+OoY oa662PGc6yOGzzC70q7EnrRgfKPVkS+A3TmERjuS5c3Ss3YHlK1S58q4r4r3XUv3 Xo1+Y56hq0Y+At7AMTgzszWye1N+wVRFLTnOBnZ5Hlmx4DC3ykFRPfqaHtCs6IlV uthDXWjuzehF2uMtFn0MSUt8yfbke626x3fQ4F/Yv1e818lnzVpW6x8c9bZ2A5jQ Y6vbU1j26Qx15ACF2oRUUPtsOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTxCPIY Lh6vtvcIIpyY6rkiB56MMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4gdD6C1upHm+UsgwIi4UYvamm6TRdYhyhq9XhKeUiOItHx43C+8yR BaEydbEzYwZ8gOL1pZKi/pr1RM6eriKnlcwhyvDCraYBiSzKr3VcJAn2OPBAqoaI DnGkdlvUZbMbv0DrhP3Px84/tRqBK/1Yx70uDXUK0O0GptLgiLofKIfuRC4kbWmy 8CB/V19IiQLjnSGlfNysIMYNBoyTPnz2WzbjWGCheIbXTxMUn5l7EehQeryrkoCQ t6e6wu9uJpC2KnPvwxXeXCwMvvuZZGCtEuRj1J1317k/RqUYLTyOEv3hieVPhi/E SVTHhC9lxgWD2ZKsoizHLwVQm7BaIW9R -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:39 2025 by rpki-client