$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft File: jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json) Hash identifier: oiLJGnDuZEaA6bO+K8tI2aWnPVvYRO+qlyDBKCGpIgE= Subject key identifier: 5E:3A:96:D9:7E:38:B8:ED:36:72:9B:8B:62:8B:B6:BD:8C:56:3B:5C Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B Certificate issuer: /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft Manifest number: 0138 Signing time: Wed 05 Nov 2025 04:37:52 +0000 Manifest this update: Wed 05 Nov 2025 04:37:52 +0000 Manifest next update: Wed 12 Nov 2025 04:37:52 +0000 Files and hashes: 1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: eWf3gvsQkD21vnU2GUxriJi0/i1tBDdyeYYhfyKgxK8=) 2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: /HUgZFHQdOKqVGsoyIo8SC7cdtj7Z66CHfzRpJ6gBOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Validity Not Before: Nov 5 04:37:52 2025 GMT Not After : Nov 12 04:37:52 2025 GMT Subject: CN=690ad4a0-8f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:1e:9a:f3:eb:c3:db:8f:bd:84:f1:23:6a: 82:6f:90:3a:14:da:2a:e5:e3:96:98:a5:72:ed:29: 74:3e:82:68:94:20:78:f5:7b:82:0e:e7:2b:38:7e: 19:b0:18:a4:17:09:7a:41:e6:66:9c:f0:da:02:58: 0c:cc:95:2b:31:45:71:08:b7:1e:2d:9f:c5:56:57: 5e:de:a0:eb:3c:80:15:ad:5c:f7:c6:b7:6b:15:fa: 8a:92:03:c4:24:55:d0:62:88:13:b3:d0:6a:51:cc: 09:66:43:5f:4c:80:65:32:52:47:32:f9:33:89:f0: a6:36:8d:21:54:7b:b5:b3:28:bf:39:88:3d:5d:fd: d3:93:a4:00:0f:4e:ae:ee:bd:42:93:cf:4c:44:68: e9:67:70:5d:e2:70:e1:00:d3:1f:18:c9:f7:51:97: 24:b1:b0:ab:b3:56:f6:fd:5b:3e:15:35:1e:a8:48: 45:69:f4:ea:00:fb:03:be:9d:31:c5:76:e4:2b:98: 74:69:65:95:1e:f8:59:5a:7d:b5:71:79:dc:47:bc: d4:04:d2:e9:0f:8e:18:9b:08:29:8f:6d:31:e0:b2: b6:0a:97:29:f6:ce:32:60:0e:d1:49:87:fd:97:5e: 78:06:7c:01:62:97:ff:4d:a7:d6:82:47:07:0c:39: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3A:96:D9:7E:38:B8:ED:36:72:9B:8B:62:8B:B6:BD:8C:56:3B:5C X509v3 Authority Key Identifier: keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3c:48:d0:7f:77:cb:d9:fa:12:d6:7d:f6:b5:c6:43:1b:68: 26:0d:08:9f:5a:aa:ab:54:b6:cc:44:e6:bd:e5:d6:68:f5:a6: c5:8a:de:9d:f8:da:9b:a2:50:8d:77:14:a0:5d:01:a2:39:df: 76:60:89:d9:97:6c:bd:69:48:a6:68:e2:a2:69:69:7c:fe:19: 0c:24:0e:6f:5b:76:19:e0:4f:03:39:b4:a1:8a:6a:60:df:72: c0:ac:f7:26:35:e5:8c:d7:3e:fa:fa:e1:e9:17:f2:27:61:83: 2d:c9:d0:66:91:27:b1:65:89:e4:66:d6:e5:8b:3b:42:01:c8: 0b:f9:22:24:8b:e6:bd:c8:62:96:ad:02:0d:0a:19:3b:1c:66: f8:77:58:62:fe:f4:bd:2c:20:a7:d2:c3:d3:4d:e6:16:c1:8b: d0:72:65:d0:13:c3:58:fb:22:35:a7:85:6f:60:80:e9:02:4c: 2c:b6:2b:ac:f1:6f:05:ff:a2:d3:6f:1a:30:be:5d:0b:50:78: 96:6c:cc:21:26:88:f6:90:8a:ab:e3:06:34:15:75:72:95:2f: 62:5a:19:03:03:04:9b:82:75:b4:99:fd:ea:32:aa:de:7b:4f: ed:ee:b6:2c:09:fe:c2:91:5d:51:ee:94:25:11:f2:83:92:c1: 01:e4:09:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVDQTQxMTAvBgNVBAUTKDhDMUMxNERDMTY3NERCQjY4QjQ5NDMwMTU4N0IzRDJG OThFRDcwMUIwHhcNMjUxMTA1MDQzNzUyWhcNMjUxMTEyMDQzNzUyWjAYMRYwFAYD VQQDEw02OTBhZDRhMC04ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKAemvPrw9uPvYTxI2qCb5A6FNoq5eOWmKVy7Sl0PoJolCB49XuCDucrOH4Z sBikFwl6QeZmnPDaAlgMzJUrMUVxCLceLZ/FVlde3qDrPIAVrVz3xrdrFfqKkgPE JFXQYogTs9BqUcwJZkNfTIBlMlJHMvkzifCmNo0hVHu1syi/OYg9Xf3Tk6QAD06u 7r1Ck89MRGjpZ3Bd4nDhANMfGMn3UZcksbCrs1b2/Vs+FTUeqEhFafTqAPsDvp0x xXbkK5h0aWWVHvhZWn21cXncR7zUBNLpD44Ymwgpj20x4LK2Cpcp9s4yYA7RSYf9 l154BnwBYpf/TafWgkcHDDn+lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF46ltl+ OLjtNnKbi2KLtr2MVjtcMB8GA1UdIwQYMBaAFIwcFNwWdNu2i0lDAVh7PS+Y7XAb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUNBNC80ODVGMzM2QURD RUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3YUxTVU1CV0hzOUw1anRj QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUNBNC80ODVGMzM2QURDRUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3 YUxTVU1CV0hzOUw1anRjQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbPEjQf3fL2foS1n32tcZDG2gmDQifWqqrVLbMROa95dZo9abFit6d +NqbolCNdxSgXQGiOd92YInZl2y9aUimaOKiaWl8/hkMJA5vW3YZ4E8DObShimpg 33LArPcmNeWM1z76+uHpF/InYYMtydBmkSexZYnkZtbliztCAcgL+SIki+a9yGKW rQINChk7HGb4d1hi/vS9LCCn0sPTTeYWwYvQcmXQE8NY+yI1p4VvYIDpAkwstius 8W8F/6LTbxowvl0LUHiWbMwhJoj2kIqr4wY0FXVylS9iWhkDAwSbgnW0mf3qMqre e0/t7rYsCf7CkV1R7pQlEfKDksEB5Ani -----END CERTIFICATE-----Generated at Wed Nov 5 20:07:45 2025 by rpki-client