$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: rowN7KmDym/b6IsHXGAeIFklJJx5ZHaRpxgSNI9iFlc= Subject key identifier: 4A:14:39:BA:67:DC:AB:57:4A:F0:FD:10:A5:9C:86:EB:20:BF:B5:85 Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0D9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0D90 Signing time: Sun 02 Nov 2025 17:56:42 +0000 Manifest this update: Sun 02 Nov 2025 17:56:41 +0000 Manifest next update: Sun 09 Nov 2025 17:56:41 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: YDwFT03NFNuyEiEGy4dWkJ89xfDjBLPML7ncI64CmLc=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3483 (0xd9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: Nov 2 17:56:41 2025 GMT Not After : Nov 9 17:56:41 2025 GMT Subject: CN=69079b5a-98aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:ee:0b:1e:3f:a4:d5:4a:40:19:46:95:75: 7f:f1:58:30:05:f7:a1:79:88:c9:f6:94:30:80:d7: 0d:17:bb:de:34:ff:a1:f9:14:bd:9a:cd:24:57:43: 25:da:5a:20:b8:8e:0e:dc:96:76:b3:48:f9:14:0c: 4a:36:04:32:ab:1d:1f:0e:17:a6:a6:92:b5:09:5e: a0:ce:73:9b:bb:db:20:9f:49:69:7e:bb:3c:1b:19: 5d:89:00:1e:70:76:d8:73:e4:05:14:5e:4f:b2:3f: 82:cb:3f:84:d7:c9:7c:12:e4:e5:27:b2:b0:3b:fa: 5b:1b:f4:c0:7f:eb:ab:42:66:9a:7c:ba:5d:97:db: 71:52:e8:9e:c9:05:92:b6:2c:7f:43:61:cc:df:c1: 6f:69:f1:23:59:61:6c:8a:a9:5f:db:c0:a6:ff:fe: 9b:d9:d5:04:02:a7:b5:f5:1a:cf:7e:d2:74:99:bc: a3:19:4f:aa:9b:0e:09:be:67:66:0a:57:44:76:47: 92:2c:0f:24:1d:e3:28:34:34:b9:25:ed:82:66:6b: 78:36:0b:d9:f6:90:90:4a:13:4e:78:05:84:88:0c: a3:89:f9:ce:cb:bf:41:4e:f1:03:3f:57:70:6f:31: 4c:93:a8:3e:1b:87:81:ff:0a:fd:ff:95:03:03:b9: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:14:39:BA:67:DC:AB:57:4A:F0:FD:10:A5:9C:86:EB:20:BF:B5:85 X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5d:26:7a:93:8c:c4:62:a0:8d:68:f4:82:56:d7:fb:59:31: 0d:e4:d9:c2:4f:cb:ea:e1:f3:79:6b:81:5c:db:00:bb:08:8d: 73:63:77:5d:03:15:10:2a:89:53:2a:72:eb:03:58:37:61:f9: 92:18:d4:a2:00:0c:8a:84:f0:76:2a:12:d5:98:da:54:64:13: fe:68:59:8e:45:8d:6b:91:82:ee:57:e9:48:44:0d:a7:b1:39: 7e:7e:72:5d:00:c9:b8:7b:61:15:d1:99:c9:f7:49:e9:95:c7: 7e:36:82:f8:be:0d:a9:3b:0a:5b:82:99:4b:d5:28:f6:34:4f: b2:30:3b:21:10:f7:65:a7:d0:13:41:d2:4c:ed:78:ba:41:7e: 03:09:9e:aa:94:81:be:07:a7:4b:5a:d4:ad:f2:04:08:25:60: 4b:fe:7d:06:83:1a:78:65:69:56:74:97:2f:e4:5e:71:aa:b9: ba:54:d6:a3:19:7a:1b:b6:65:10:2e:13:d1:42:7a:f7:3b:83: 7a:0b:dc:c1:b4:d1:c5:7f:28:01:7b:40:4e:fd:be:50:56:4b: 50:4d:91:95:5b:e7:ae:bd:e6:68:b8:dc:31:a4:53:72:8c:d5: d1:68:ca:01:b4:29:76:83:93:52:91:b4:84:66:1d:da:f7:7e: 7c:5b:91:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUxMTAyMTc1NjQxWhcNMjUxMTA5MTc1NjQxWjAYMRYwFAYD VQQDEw02OTA3OWI1YS05OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9vuCx4/pNVKQBlGlXV/8VgwBfeheYjJ9pQwgNcNF7veNP+h+RS9ms0kV0Ml 2loguI4O3JZ2s0j5FAxKNgQyqx0fDhemppK1CV6gznObu9sgn0lpfrs8GxldiQAe cHbYc+QFFF5Psj+Cyz+E18l8EuTlJ7KwO/pbG/TAf+urQmaafLpdl9txUuieyQWS tix/Q2HM38FvafEjWWFsiqlf28Cm//6b2dUEAqe19RrPftJ0mbyjGU+qmw4Jvmdm CldEdkeSLA8kHeMoNDS5Je2CZmt4NgvZ9pCQShNOeAWEiAyjifnOy79BTvEDP1dw bzFMk6g+G4eB/wr9/5UDA7nykwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoUObpn 3KtXSvD9EKWchusgv7WFMB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgXSZ6k4zEYqCNaPSCVtf7WTEN5NnCT8vq4fN5a4Fc2wC7CI1zY3dd AxUQKolTKnLrA1g3YfmSGNSiAAyKhPB2KhLVmNpUZBP+aFmORY1rkYLuV+lIRA2n sTl+fnJdAMm4e2EV0ZnJ90nplcd+NoL4vg2pOwpbgplL1Sj2NE+yMDshEPdlp9AT QdJM7Xi6QX4DCZ6qlIG+B6dLWtSt8gQIJWBL/n0Ggxp4ZWlWdJcv5F5xqrm6VNaj GXobtmUQLhPRQnr3O4N6C9zBtNHFfygBe0BO/b5QVktQTZGVW+euveZouNwxpFNy jNXRaMoBtCl2g5NSkbSEZh3a9358W5Ea -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:40 2025 by rpki-client