$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json) Hash identifier: kqP85Bmpl7Pk7k+xphKGTxrOkUUg06cCbvk0Fcygubg= Subject key identifier: 31:78:0C:28:56:C7:CC:54:C8:77:FA:3A:16:87:BB:41:47:86:00:C7 Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft Manifest number: 09D9 Signing time: Tue 04 Nov 2025 20:01:53 +0000 Manifest this update: Tue 04 Nov 2025 20:01:53 +0000 Manifest next update: Tue 11 Nov 2025 20:01:53 +0000 Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: tM4MDIaR06b4U0CoLT724nZPEVGY1YTaRzGwHuf7Ij8=) 2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: OjAcbEOp0amxQNPqpOvSSPyQnwHnVe9MoEWy3pew2ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Validity Not Before: Nov 4 20:01:53 2025 GMT Not After : Nov 11 20:01:53 2025 GMT Subject: CN=690a5bb1-37db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:47:7c:10:31:83:e1:d9:e1:ae:cf:2c:8c: 7f:b4:8e:11:4e:f2:f4:c7:e4:38:a7:6c:50:6e:45: 3b:2b:40:55:f6:15:84:55:b4:8e:d6:f2:08:c3:d5: b4:75:86:6a:b5:06:8f:5a:ab:93:3d:9d:39:56:ac: 3c:da:47:91:dc:e3:86:42:b9:87:d1:df:75:4f:7a: 63:fd:3e:68:0c:17:75:63:09:24:05:a0:60:8b:7b: c2:08:ab:49:b3:7e:bd:e7:1b:11:db:85:8b:a6:53: 6f:4c:1c:42:8c:f2:82:c9:4a:0d:e3:a0:30:c3:67: fc:6c:54:92:9e:19:c4:76:1e:c5:85:06:a0:26:2b: 89:76:59:24:50:c7:cd:74:af:e0:49:ea:4c:6b:71: d9:21:7d:49:c3:a3:81:19:46:07:2d:43:4a:53:22: d3:12:3d:fa:1e:82:0f:b0:ef:c4:94:84:de:b7:c7: b5:e2:3a:85:11:f8:5c:49:2c:bf:05:ae:cc:ee:ea: e9:6a:76:4c:ee:45:49:5b:f4:a0:c9:f1:0c:ff:96: 9e:89:01:fe:34:21:5e:b2:1b:51:30:6e:3c:34:bc: ac:65:63:b6:bb:2f:96:16:cd:39:58:d6:ec:69:54: c3:0f:90:c3:43:c4:9f:18:09:bc:b7:b8:f9:a0:a4: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:78:0C:28:56:C7:CC:54:C8:77:FA:3A:16:87:BB:41:47:86:00:C7 X509v3 Authority Key Identifier: keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c2:d2:36:b2:21:c1:21:fe:78:e8:cb:d7:bb:ad:35:d8:21: c5:6f:81:58:dc:e2:6e:7f:34:85:20:70:18:70:b2:4a:19:2c: 0c:5d:3c:57:ee:b7:9e:bf:5b:9b:76:ed:2d:22:54:d3:7f:ed: b3:98:cf:cc:69:af:9a:7e:5e:76:ca:c2:56:93:0e:2f:9e:23: a1:e0:10:97:56:88:e9:96:ee:9b:65:7e:7e:5f:77:2f:0e:bd: f8:76:25:42:26:30:15:78:70:47:09:d0:fd:ca:66:8e:f4:5b: 8d:82:14:83:3c:11:d4:ad:26:7d:9b:a9:d7:df:99:99:4d:2e: 5e:64:c2:8f:1e:16:12:a2:f5:f4:4b:6e:9a:a4:16:9b:b2:cc: 2b:6c:3e:e8:fe:b4:3b:9f:75:32:ff:74:75:c7:e6:3b:67:b4: c3:48:d4:89:b8:b5:bd:a9:1b:85:48:b7:f5:a5:b1:6f:36:a9: da:ab:13:d9:69:9c:32:4b:fd:6f:01:b5:fb:73:63:a3:ad:54: 3b:27:c0:2b:23:f1:17:10:53:74:9c:d0:2a:03:db:4a:d5:bb: 9b:b5:a3:0a:4d:8b:60:7d:24:f3:35:e4:a5:81:df:8e:d8:98: 4c:35:ef:a0:c6:82:35:e2:29:0b:33:53:c2:a6:08:0a:9d:30: 5f:69:8c:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw Q0M2RjI5MEIwHhcNMjUxMTA0MjAwMTUzWhcNMjUxMTExMjAwMTUzWjAYMRYwFAYD VQQDEw02OTBhNWJiMS0zN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YBHfBAxg+HZ4a7PLIx/tI4RTvL0x+Q4p2xQbkU7K0BV9hWEVbSO1vIIw9W0 dYZqtQaPWquTPZ05Vqw82keR3OOGQrmH0d91T3pj/T5oDBd1YwkkBaBgi3vCCKtJ s3695xsR24WLplNvTBxCjPKCyUoN46Aww2f8bFSSnhnEdh7FhQagJiuJdlkkUMfN dK/gSepMa3HZIX1Jw6OBGUYHLUNKUyLTEj36HoIPsO/ElITet8e14jqFEfhcSSy/ Ba7M7urpanZM7kVJW/SgyfEM/5aeiQH+NCFeshtRMG48NLysZWO2uy+WFs05WNbs aVTDD5DDQ8SfGAm8t7j5oKTAmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDF4DChW x8xUyHf6OhaHu0FHhgDHMB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2 NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvwtI2siHBIf546MvXu6012CHFb4FY3OJufzSFIHAYcLJKGSwMXTxX 7reev1ubdu0tIlTTf+2zmM/Maa+afl52ysJWkw4vniOh4BCXVojplu6bZX5+X3cv Dr34diVCJjAVeHBHCdD9ymaO9FuNghSDPBHUrSZ9m6nX35mZTS5eZMKPHhYSovX0 S26apBabsswrbD7o/rQ7n3Uy/3R1x+Y7Z7TDSNSJuLW9qRuFSLf1pbFvNqnaqxPZ aZwyS/1vAbX7c2OjrVQ7J8ArI/EXEFN0nNAqA9tK1bubtaMKTYtgfSTzNeSlgd+O 2JhMNe+gxoI14ikLM1PCpggKnTBfaYzz -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:24 2025 by rpki-client