$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: 5YQe+Syi6sUDUqT8AIrpa9iUQKlmrqNTo4EOHR3IrwI= Subject key identifier: B0:D0:14:2F:AE:8D:6F:97:F5:5C:80:02:66:ED:83:52:44:20:A3:AC Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0B05 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0B03 Signing time: Tue 04 Nov 2025 16:45:11 +0000 Manifest this update: Tue 04 Nov 2025 16:45:10 +0000 Manifest next update: Tue 11 Nov 2025 16:45:10 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: 6fOreFexaJJ0OGi+FveTp99RJMtybuBuSUEeu+4nMHE=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: X6qLGESMHlCjgInNJuuQgeTL462kIXu1+dGUahA9Gs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Nov 4 16:45:10 2025 GMT Not After : Nov 11 16:45:10 2025 GMT Subject: CN=690a2d96-1fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:18:74:2d:1b:7e:b3:5a:98:21:19:a4:f5:03: 71:7c:55:89:8d:90:8c:7b:88:2c:3a:99:8e:8e:fb: f1:8f:98:c3:40:b0:a6:af:3e:70:2a:fe:59:ea:a3: 82:f7:b6:1b:8c:75:5f:9c:44:e8:02:11:c6:fa:77: de:5a:fe:57:e0:8c:c7:2b:82:ab:cf:13:0f:f3:e3: b0:fe:10:af:60:23:7c:aa:cf:ad:75:a7:6e:7c:d2: 8f:0d:71:8c:02:14:59:19:f4:b7:d5:35:8e:6d:70: 2b:04:a8:f5:37:de:02:16:aa:37:ba:d5:6a:cf:53: 40:27:0d:ba:5d:12:5a:52:1f:25:fb:36:68:70:65: b9:67:1b:ac:c9:b9:09:74:a3:1a:10:99:e5:a5:66: 3d:4b:c1:e0:8d:a4:3e:10:e7:c4:7d:04:01:0c:e1: ca:b2:80:3e:32:4b:7c:cf:f9:c3:9b:c8:a0:79:75: 76:20:6c:1a:9d:8f:a8:eb:e4:cf:0f:fa:44:2b:b2: 7b:2f:2d:da:d1:87:77:f5:7e:2e:c0:07:fc:5f:8d: a0:b5:9c:36:56:d4:5e:0d:32:19:10:b6:51:8c:e1: 8a:56:ab:bd:07:3e:8f:7d:b3:83:bb:0b:37:1a:c1: 81:d6:de:5c:f5:c6:d9:e8:2c:a5:0c:84:63:2c:b6: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D0:14:2F:AE:8D:6F:97:F5:5C:80:02:66:ED:83:52:44:20:A3:AC X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4d:64:8b:07:bf:f3:0d:45:bd:45:f7:85:90:43:60:5d:53: 35:9e:99:c0:12:4d:37:72:e7:81:59:ac:bd:bc:ac:88:7e:16: e3:19:96:e2:d7:69:02:50:39:63:3d:e8:44:6a:96:42:2b:b0: d3:46:84:f5:72:e3:11:6f:17:02:5c:93:94:62:90:03:f6:c5: 3c:73:ed:c4:36:9d:ca:9c:97:67:71:5e:8f:76:35:c7:df:7b: e1:97:42:fc:15:d4:80:e7:a4:d8:e8:6e:8e:f6:e7:07:28:aa: 1d:79:6c:81:49:68:47:ee:6d:13:18:c0:ec:01:04:c4:3f:1c: ae:fa:70:02:ff:7a:83:54:4b:c6:82:db:19:c1:a9:34:43:23: aa:65:10:41:80:4e:7a:b6:0a:70:67:98:56:ed:67:ff:02:0d: f0:3f:5a:89:11:ed:d0:01:e5:4e:6f:8a:09:d5:fa:23:5e:6d: f4:34:be:6e:49:62:a5:3a:8a:2b:79:9e:53:5d:30:12:35:25: 01:60:d2:64:b1:71:c0:34:21:88:71:5c:50:aa:b2:86:e1:45: 02:1e:e0:97:df:c7:68:78:4e:ed:85:ce:eb:61:a7:02:dd:f7: da:87:20:18:84:71:a2:c6:dc:db:73:cc:33:cf:fa:16:f1:3d: 1b:a4:12:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjUxMTA0MTY0NTEwWhcNMjUxMTExMTY0NTEwWjAYMRYwFAYD VQQDEw02OTBhMmQ5Ni0xZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Bh0LRt+s1qYIRmk9QNxfFWJjZCMe4gsOpmOjvvxj5jDQLCmrz5wKv5Z6qOC 97YbjHVfnEToAhHG+nfeWv5X4IzHK4KrzxMP8+Ow/hCvYCN8qs+tdadufNKPDXGM AhRZGfS31TWObXArBKj1N94CFqo3utVqz1NAJw26XRJaUh8l+zZocGW5ZxusybkJ dKMaEJnlpWY9S8HgjaQ+EOfEfQQBDOHKsoA+Mkt8z/nDm8igeXV2IGwanY+o6+TP D/pEK7J7Ly3a0Yd39X4uwAf8X42gtZw2VtReDTIZELZRjOGKVqu9Bz6PfbODuws3 GsGB1t5c9cbZ6CylDIRjLLbcaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDQFC+u jW+X9VyAAmbtg1JEIKOsMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2TWSLB7/zDUW9RfeFkENgXVM1npnAEk03cueBWay9vKyIfhbjGZbi 12kCUDljPehEapZCK7DTRoT1cuMRbxcCXJOUYpAD9sU8c+3ENp3KnJdncV6PdjXH 33vhl0L8FdSA56TY6G6O9ucHKKodeWyBSWhH7m0TGMDsAQTEPxyu+nAC/3qDVEvG gtsZwak0QyOqZRBBgE56tgpwZ5hW7Wf/Ag3wP1qJEe3QAeVOb4oJ1fojXm30NL5u SWKlOooreZ5TXTASNSUBYNJksXHANCGIcVxQqrKG4UUCHuCX38doeE7thc7rYacC 3ffahyAYhHGixtzbc8wzz/oW8T0bpBKQ -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:02 2025 by rpki-client