$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json) Hash identifier: HZ7NGDEra6PGdMSGIEmHHLaRAUtkP/eJEwjE0oD/BUM= Subject key identifier: 26:12:88:2F:2E:1E:C7:E4:8E:F1:7E:F3:A9:F5:3A:88:72:CC:B7:1B Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Certificate serial: 3514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft Manifest number: 34F5 Signing time: Tue 04 Nov 2025 15:19:20 +0000 Manifest this update: Tue 04 Nov 2025 15:19:19 +0000 Manifest next update: Tue 11 Nov 2025 15:19:19 +0000 Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: nSV8y/cYllmjNb4wGAiv6kQtMkxrDNGpsAlkUng/e7U=) 2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: rwJT2YdcBWIo+AYt6oaAo4E5fXWOqiy9ZBXvVvPoImY=) 3: 9554034062CB11EEA41B6D2EC4F9AE02.roa (hash: x5SsZ9fPo44FXXa4cVncXx0ome2Tsxvse4Uv1sTSAKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13588 (0x3514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Validity Not Before: Nov 4 15:19:19 2025 GMT Not After : Nov 11 15:19:19 2025 GMT Subject: CN=690a1978-3481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:33:06:d2:7c:1a:35:4d:a7:d2:b9:93:c9: 46:4a:e1:03:76:d0:8f:bf:b6:51:5d:50:6b:57:21: 1e:07:83:05:3c:bb:ed:69:53:16:e4:7a:13:42:78: 95:a2:f1:5e:73:25:bb:12:3e:fb:a9:2e:06:02:02: 5e:02:b8:d1:f1:ad:20:f0:26:af:4b:7e:b9:cd:b0: 5d:56:5d:96:be:30:5f:b9:07:2b:8c:09:c6:7d:ae: 23:6f:d2:f9:4f:ce:46:5d:e2:c3:1d:ff:e0:97:2d: 9a:06:66:e2:c6:43:9b:2c:87:7d:25:b9:0b:98:f2: 96:48:2c:12:c1:02:4d:db:f8:b9:99:03:1e:50:44: fc:92:ce:fe:50:78:0d:1e:69:74:ee:1f:ad:5c:27: 96:a9:aa:4f:19:18:72:47:25:a8:af:26:a4:aa:b2: 27:a0:c6:45:e2:3e:d2:42:d2:a7:93:7b:83:6c:c5: 92:d6:21:87:12:e8:b4:15:ec:34:39:dd:a6:68:fd: cb:8a:4f:15:b2:a0:8e:3f:f6:75:eb:5a:82:85:c7: cb:70:51:19:8f:b7:1a:e1:ce:01:df:99:2e:9b:cf: 6d:d7:0e:71:19:6b:55:76:15:67:6c:b6:d0:5d:ee: 8f:1c:d1:82:f4:69:d3:e4:38:16:60:0a:06:a7:45: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:12:88:2F:2E:1E:C7:E4:8E:F1:7E:F3:A9:F5:3A:88:72:CC:B7:1B X509v3 Authority Key Identifier: keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:85:3d:4d:38:a5:6f:12:d8:74:13:0b:a6:22:c0:86:b6: 5b:5e:e6:6d:5b:60:44:81:8b:0f:3e:ec:c5:e7:58:b1:01:a8: 7e:af:fa:bb:a9:df:cb:5f:dc:eb:62:77:7d:ca:64:6a:0c:b2: bc:55:70:25:55:3a:41:f7:19:53:ef:d9:f2:83:c5:ce:79:48: 32:92:44:a5:27:e8:dd:51:bc:64:db:fa:73:39:9a:0f:c4:d1: f1:34:34:1e:a3:b4:2e:2d:4e:ac:f0:88:a5:d6:7c:67:38:fa: 70:cc:8b:92:59:05:b8:59:f9:8c:a6:1e:08:5b:e9:12:f7:9d: 02:fa:67:55:5f:7a:7b:34:a4:01:ff:97:33:80:3f:46:23:85: 9e:7f:68:88:5d:58:46:14:0f:13:96:03:6d:ae:3b:dc:c2:4a: ef:6d:63:ed:69:fb:bf:67:d3:aa:85:af:76:7c:48:34:fa:dc: c0:95:b1:cc:54:1a:f1:c5:0b:0f:cb:c0:53:c4:1f:d0:de:9e: be:dc:ac:81:02:09:ec:5e:e5:66:8c:e2:32:ff:5e:2c:33:17: 7b:c2:b0:62:95:78:bd:a7:83:93:26:e9:b0:92:c7:71:25:0f: a2:c7:81:e8:a4:f1:60:50:8a:c6:10:81:24:5f:9e:3e:bc:43: ea:7d:bd:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG NTVFNjAzNUYwHhcNMjUxMTA0MTUxOTE5WhcNMjUxMTExMTUxOTE5WjAYMRYwFAYD VQQDEw02OTBhMTk3OC0zNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxozBtJ8GjVNp9K5k8lGSuEDdtCPv7ZRXVBrVyEeB4MFPLvtaVMW5HoTQniV ovFecyW7Ej77qS4GAgJeArjR8a0g8CavS365zbBdVl2WvjBfuQcrjAnGfa4jb9L5 T85GXeLDHf/gly2aBmbixkObLId9JbkLmPKWSCwSwQJN2/i5mQMeUET8ks7+UHgN Hml07h+tXCeWqapPGRhyRyWoryakqrInoMZF4j7SQtKnk3uDbMWS1iGHEui0Few0 Od2maP3Lik8VsqCOP/Z161qChcfLcFEZj7ca4c4B35kum89t1w5xGWtVdhVnbLbQ Xe6PHNGC9GnT5DgWYAoGp0UGlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYSiC8u HsfkjvF+86n1OohyzLcbMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRk eTB1d2FGaDVlWm4xWG1BMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZpoU9TTilbxLYdBMLpiLAhrZbXuZtW2BEgYsPPuzF51ixAah+r/q7 qd/LX9zrYnd9ymRqDLK8VXAlVTpB9xlT79nyg8XOeUgykkSlJ+jdUbxk2/pzOZoP xNHxNDQeo7QuLU6s8Iil1nxnOPpwzIuSWQW4WfmMph4IW+kS950C+mdVX3p7NKQB /5czgD9GI4Wef2iIXVhGFA8TlgNtrjvcwkrvbWPtafu/Z9Oqha92fEg0+tzAlbHM VBrxxQsPy8BTxB/Q3p6+3KyBAgnsXuVmjOIy/14sMxd7wrBilXi9p4OTJumwksdx JQ+ix4HopPFgUIrGEIEkX54+vEPqfb1s -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:54 2025 by rpki-client