$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: yP7KdspYpAst6e/I44Pp4CCt/dYSwCDow8BliaasABE= Subject key identifier: 32:86:C6:FF:F6:6C:EC:A7:AF:C7:FA:1F:8E:AA:91:CB:AF:36:6F:7F Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0A53 Signing time: Thu 06 Nov 2025 18:35:22 +0000 Manifest this update: Thu 06 Nov 2025 18:35:22 +0000 Manifest next update: Thu 13 Nov 2025 18:35:22 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: w2UStHOype1MF+bqXO2Kc5KyxYlctOcJaH9e0VVvT10=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 3nC+gG2mDTZBTV04V3x6XaZzq6tvXUY+nCHa8UvPHpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 18:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Nov 6 18:35:22 2025 GMT Not After : Nov 13 18:35:22 2025 GMT Subject: CN=690cea6a-2be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:7c:e5:ad:5f:35:bf:15:ea:36:c4:44:69: 4a:62:f1:2b:ef:03:84:20:ac:43:fa:d7:48:6c:fc: 50:f1:78:4a:11:4b:0e:ff:80:54:41:0d:d8:77:95: f2:a4:51:ea:5b:91:08:55:b7:05:9b:bf:76:4c:29: 20:8e:1b:27:5d:d4:85:aa:31:44:27:3b:bf:4d:e5: c3:80:0d:08:67:86:51:6c:33:fc:c3:c6:a5:13:be: a9:c8:94:8a:6a:53:b1:fd:e6:1a:3c:a1:25:01:4e: 65:f1:76:76:ab:19:14:29:17:ee:e9:fa:56:12:a1: 3b:26:76:83:45:13:59:a2:2c:31:ef:7d:96:2a:3e: 71:fa:89:a6:8d:99:44:d1:f2:c6:7b:47:01:ab:d3: 9a:3d:7e:c0:8b:f2:8b:8b:4e:d2:eb:a8:16:6d:60: 3b:b7:14:95:d9:7b:35:1d:9b:ee:08:5e:4a:4f:81: 05:f4:6b:10:bd:c3:c0:02:e7:eb:09:18:fc:90:03: ce:5b:d0:7b:18:cc:42:f4:31:64:3a:c9:3b:10:6b: 7c:dc:c8:aa:30:05:c9:70:09:9f:8a:dc:7d:95:78: e1:12:d5:8d:e0:7b:00:a3:95:40:0e:6f:ea:4f:9d: fe:fd:f2:87:84:06:eb:ba:eb:92:43:e6:9b:db:93: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:C6:FF:F6:6C:EC:A7:AF:C7:FA:1F:8E:AA:91:CB:AF:36:6F:7F X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:68:ee:0f:fa:bb:f8:2c:08:47:25:84:5e:4a:ca:94:f6:8d: 52:01:3f:e4:b0:ae:1d:57:4f:6f:2f:b8:d4:fe:14:a4:1b:e5: d1:7d:3b:30:0f:a1:1c:b1:13:c1:87:63:5f:c1:e8:1d:6e:62: ff:0b:02:59:78:b0:4d:c7:5e:7e:9f:8a:dc:7d:ba:fd:28:f0: bb:51:bf:f0:88:6c:41:b4:a8:b2:92:cd:17:80:14:d7:69:58: 7c:ad:03:2b:64:ee:ff:d5:68:6f:fd:ad:fb:c7:32:36:81:af: 8d:bb:90:a8:9d:e0:68:73:87:b7:99:f1:23:8a:cb:2a:80:3a: b9:e4:fc:64:cb:6c:60:20:00:4e:71:62:d9:e3:9a:f8:4f:85: e9:46:12:d3:e3:6a:b8:01:9d:e5:7c:73:9f:76:dc:c8:86:71: 8c:93:2e:f6:e3:eb:34:6d:6b:86:60:c1:27:a0:a3:5b:33:42: d4:31:be:55:37:3b:e4:06:f4:6f:2c:23:b8:19:0c:c0:84:7c: 7a:5b:5f:ee:c7:be:e8:3f:97:e1:c5:bc:c4:a5:2e:51:6d:d2: cb:8d:84:d8:7f:19:ad:5c:6c:be:8c:60:e9:b6:d5:e6:dc:aa: 51:2f:7f:30:80:61:04:b6:09:49:77:6a:ee:71:21:ad:c1:b9: 7b:33:ad:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUxMTA2MTgzNTIyWhcNMjUxMTEzMTgzNTIyWjAYMRYwFAYD VQQDEw02OTBjZWE2YS0yYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWp85a1fNb8V6jbERGlKYvEr7wOEIKxD+tdIbPxQ8XhKEUsO/4BUQQ3Yd5Xy pFHqW5EIVbcFm792TCkgjhsnXdSFqjFEJzu/TeXDgA0IZ4ZRbDP8w8alE76pyJSK alOx/eYaPKElAU5l8XZ2qxkUKRfu6fpWEqE7JnaDRRNZoiwx732WKj5x+ommjZlE 0fLGe0cBq9OaPX7Ai/KLi07S66gWbWA7txSV2Xs1HZvuCF5KT4EF9GsQvcPAAufr CRj8kAPOW9B7GMxC9DFkOsk7EGt83MiqMAXJcAmfitx9lXjhEtWN4HsAo5VADm/q T53+/fKHhAbruuuSQ+ab25MWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKGxv/2 bOynr8f6H46qkcuvNm9/MB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApaO4P+rv4LAhHJYReSsqU9o1SAT/ksK4dV09vL7jU/hSkG+XRfTsw D6EcsRPBh2NfwegdbmL/CwJZeLBNx15+n4rcfbr9KPC7Ub/wiGxBtKiyks0XgBTX aVh8rQMrZO7/1Whv/a37xzI2ga+Nu5ConeBoc4e3mfEjissqgDq55Pxky2xgIABO cWLZ45r4T4XpRhLT42q4AZ3lfHOfdtzIhnGMky724+s0bWuGYMEnoKNbM0LUMb5V NzvkBvRvLCO4GQzAhHx6W1/ux77oP5fhxbzEpS5RbdLLjYTYfxmtXGy+jGDpttXm 3KpRL38wgGEEtglJd2rucSGtwbl7M63D -----END CERTIFICATE-----Generated at Fri Nov 7 16:57:19 2025 by rpki-client