$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: 7BxE1Xcxhf42jTfRfCMDv7T+KI72Datnc5GTlJWIcG4= Subject key identifier: 12:6D:F2:78:B0:28:EB:FC:36:64:E6:EF:35:1F:B4:E7:1C:40:9D:BB Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0AFA Signing time: Tue 04 Nov 2025 19:29:05 +0000 Manifest this update: Tue 04 Nov 2025 19:29:04 +0000 Manifest next update: Tue 11 Nov 2025 19:29:04 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: ey/surL1RxtcYJwRlhGxPeXjMoBWJ9fEGyxyjLFkfqc=) 2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=) 3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=) 4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Nov 4 19:29:04 2025 GMT Not After : Nov 11 19:29:04 2025 GMT Subject: CN=690a5401-21cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:ad:be:37:c4:43:29:70:bb:64:54:04:74: 77:d5:57:56:03:2c:e8:e3:26:4b:52:ad:5a:62:b4: 1f:08:07:9c:98:bd:ec:88:fe:ce:43:d5:76:bb:2b: 38:96:62:d2:4c:0b:d2:64:4d:2d:26:8d:81:f7:4e: fa:d2:92:cc:48:da:e1:29:dd:fd:fe:60:ed:82:83: c9:5f:b9:b3:2b:d5:93:30:6c:83:e8:09:a5:6d:6d: 74:86:4a:f3:37:e0:66:7a:57:2e:fe:99:8d:72:1c: 1a:c0:0d:7d:6f:88:74:a2:a3:50:d9:eb:25:ad:4a: 83:7d:f4:80:ca:b2:ba:e0:9f:ae:f5:61:ad:10:e2: 86:6e:e4:dd:cf:61:4f:94:9a:00:06:43:c8:7b:d7: 34:eb:9e:af:61:f5:aa:fa:f6:ca:ed:b5:1c:11:17: 6f:54:95:80:99:4c:6a:55:9e:60:74:59:69:57:9b: 5c:0e:78:c4:2b:20:e5:10:ae:35:88:2d:3c:ed:c2: 5f:9a:2a:0e:c5:c7:7f:45:4f:ac:18:b1:60:00:de: b1:3b:eb:3a:84:b3:4e:83:25:dd:29:a9:2a:1a:40: 36:35:d9:0b:67:46:9e:61:a2:de:91:1e:c8:f1:c4: 9a:ab:18:51:63:35:5f:5e:ab:64:50:f5:0b:20:d6: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6D:F2:78:B0:28:EB:FC:36:64:E6:EF:35:1F:B4:E7:1C:40:9D:BB X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ff:7f:21:82:b9:eb:f2:76:43:49:08:df:bc:a7:78:b8:a3: 53:53:15:30:1c:54:e3:30:8c:12:fa:e1:ce:0a:b2:7f:12:61: eb:dc:ca:bc:6f:3d:85:18:bd:5c:18:57:55:e9:3f:48:c4:d9: 3a:ef:fc:e4:e1:56:85:d3:ca:71:cb:65:6f:b5:59:14:c1:c3: 43:c8:20:2e:bd:f6:8e:90:c4:27:6c:8a:e7:e5:71:da:3b:d2: 93:6c:74:55:a1:2c:3e:08:d9:e7:5a:44:83:34:f6:2f:d0:61: 4a:0e:88:e4:fe:51:74:ed:d4:76:1e:f6:7b:24:35:1a:06:95: 0f:4f:d4:62:4e:9f:fe:50:9d:75:2c:b3:3c:0c:32:3f:49:d6: 4d:66:b7:99:9d:7c:e8:3f:4d:91:db:18:29:9a:51:cf:06:1a: 4d:c9:1d:9c:77:ed:2c:7b:72:64:1f:2b:f7:d5:3b:49:a4:16: 05:99:32:90:51:a2:3a:09:83:c8:7f:f1:58:b9:c3:9a:42:52: 07:6a:42:b3:ec:26:0c:9c:8a:1e:ed:ec:25:bb:7c:78:ba:c7: 96:39:28:1a:0d:bd:13:05:8f:33:a0:b9:bd:d7:eb:25:dc:b2: 05:3c:f9:42:5b:8e:69:e3:01:89:f4:55:c9:aa:1e:33:27:b4: f4:34:12:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjUxMTA0MTkyOTA0WhcNMjUxMTExMTkyOTA0WjAYMRYwFAYD VQQDEw02OTBhNTQwMS0yMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDWtvjfEQylwu2RUBHR31VdWAyzo4yZLUq1aYrQfCAecmL3siP7OQ9V2uys4 lmLSTAvSZE0tJo2B90760pLMSNrhKd39/mDtgoPJX7mzK9WTMGyD6AmlbW10hkrz N+Bmelcu/pmNchwawA19b4h0oqNQ2eslrUqDffSAyrK64J+u9WGtEOKGbuTdz2FP lJoABkPIe9c0656vYfWq+vbK7bUcERdvVJWAmUxqVZ5gdFlpV5tcDnjEKyDlEK41 iC087cJfmioOxcd/RU+sGLFgAN6xO+s6hLNOgyXdKakqGkA2NdkLZ0aeYaLekR7I 8cSaqxhRYzVfXqtkUPULINYIbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJt8niw KOv8NmTm7zUftOccQJ27MB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3/38hgrnr8nZDSQjfvKd4uKNTUxUwHFTjMIwS+uHOCrJ/EmHr3Mq8 bz2FGL1cGFdV6T9IxNk67/zk4VaF08pxy2VvtVkUwcNDyCAuvfaOkMQnbIrn5XHa O9KTbHRVoSw+CNnnWkSDNPYv0GFKDojk/lF07dR2HvZ7JDUaBpUPT9RiTp/+UJ11 LLM8DDI/SdZNZreZnXzoP02R2xgpmlHPBhpNyR2cd+0se3JkHyv31TtJpBYFmTKQ UaI6CYPIf/FYucOaQlIHakKz7CYMnIoe7ewlu3x4useWOSgaDb0TBY8zoLm91+sl 3LIFPPlCW45p4wGJ9FXJqh4zJ7T0NBK4 -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:05 2025 by rpki-client