$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: wZ3RA+zG8F4J2JNjNMH3MeyJhG7cWqLLx04iV+O4FiY= Subject key identifier: 0B:45:A9:90:62:F8:11:35:11:22:90:85:E4:A1:D7:49:AA:E2:27:B1 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 0402 Signing time: Wed 05 Nov 2025 00:32:44 +0000 Manifest this update: Wed 05 Nov 2025 00:32:44 +0000 Manifest next update: Wed 12 Nov 2025 00:32:44 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: hLxnyroyZP9/GVDWu3A5vm/bbZW4SACM0qkGD++7cko=) 2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: IBhhnGT/LDWxhpFmUfJvAC1XxzhmOqtNwlJxeyVAKjs=) 3: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: uty0bQMtFLX3vFRuGwVZyzSxCI+QZbbY8EJL7k1alPY=) 4: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: haDneSQGCMY7l4tq6KzMKr1NagFdvDH5g3zFSu/oH0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Nov 5 00:32:44 2025 GMT Not After : Nov 12 00:32:44 2025 GMT Subject: CN=690a9b2c-89ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:89:42:75:7a:1d:7f:55:60:3c:e1:4c:d6: b6:29:d7:10:5f:54:1a:70:f2:04:5b:d3:16:6c:13: 15:e2:ba:f2:d2:53:31:1f:21:45:e2:b3:34:db:84: 9a:50:f8:c2:d2:4d:37:dd:74:23:fa:eb:e0:ef:c6: e2:46:8b:6c:58:63:a5:f6:dc:85:f4:bf:48:53:21: 74:68:a5:23:70:36:f0:de:93:30:f9:ca:eb:1a:3c: 2f:73:f2:a8:aa:7a:01:73:7f:bb:c3:ab:a1:0e:c1: cd:61:04:e7:a7:10:ec:ec:75:14:f7:73:1d:a7:c7: 1f:63:52:d4:3f:ea:95:62:9e:c0:36:3c:f6:e9:70: c9:c4:d6:fa:07:74:09:23:68:8f:08:da:29:b5:cb: c7:3e:36:55:62:64:ef:0b:d5:d0:a2:35:df:e4:39: 6a:da:10:65:4b:09:88:a8:c1:81:9e:59:3c:c3:89: 7e:78:bf:bb:a8:21:a5:55:e0:e7:7a:74:a5:af:c6: 79:71:29:1f:a1:82:7d:cf:1e:30:51:95:7d:3a:73: 8f:c5:13:71:f6:9b:19:c8:27:bc:1e:c3:3c:a3:1d: 31:1d:c1:51:a3:13:6d:a1:7b:e8:47:c9:fe:96:9f: 6b:96:11:c0:6b:9c:59:05:b8:f2:88:b2:b8:20:a9: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:45:A9:90:62:F8:11:35:11:22:90:85:E4:A1:D7:49:AA:E2:27:B1 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:7a:ba:a5:71:82:4c:ad:26:51:87:02:17:da:76:f8:2a: 99:96:39:db:a2:2f:82:e8:b4:98:e6:cb:49:aa:38:6b:16:f3: d5:af:08:42:41:28:7a:a0:7b:54:a2:bf:b6:9b:ea:7e:e8:c9: dc:7f:30:88:9f:60:4d:1a:69:e3:b2:b3:db:38:43:be:fa:d3: 68:c2:ac:8d:9f:63:bc:2a:33:85:b9:00:b6:13:6c:6f:aa:0f: fd:6a:9c:a9:eb:01:84:99:0e:4a:fc:f8:a0:d1:06:2f:27:3c: 61:5d:b2:91:75:8f:b8:54:6d:8c:0e:f0:23:58:a2:e4:4e:2f: 4a:c2:b3:f8:bd:83:7c:4d:f4:f8:fb:ea:95:e1:49:44:16:97: 77:08:5c:06:05:1a:32:84:ac:c8:0f:e1:20:eb:8c:b1:85:82: f8:e2:04:4f:94:65:f6:11:da:0a:5e:f2:a5:b6:45:13:4b:f3: 16:c1:09:21:41:69:26:f1:f9:7d:a4:ae:93:03:b2:41:92:eb: 0c:5a:63:22:e9:a6:87:e1:8e:b1:06:4e:b4:7c:ae:8d:cc:6e: 27:6e:65:8c:e9:d1:3c:04:d8:7e:cc:da:d7:57:5e:c4:ad:9f: 7b:92:fc:03:fc:36:88:d9:2e:2c:2d:36:3c:ef:6f:c8:fb:8b: 36:f8:6c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjUxMTA1MDAzMjQ0WhcNMjUxMTEyMDAzMjQ0WjAYMRYwFAYD VQQDEw02OTBhOWIyYy04OWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFyJQnV6HX9VYDzhTNa2KdcQX1QacPIEW9MWbBMV4rry0lMxHyFF4rM024Sa UPjC0k033XQj+uvg78biRotsWGOl9tyF9L9IUyF0aKUjcDbw3pMw+crrGjwvc/Ko qnoBc3+7w6uhDsHNYQTnpxDs7HUU93Mdp8cfY1LUP+qVYp7ANjz26XDJxNb6B3QJ I2iPCNoptcvHPjZVYmTvC9XQojXf5Dlq2hBlSwmIqMGBnlk8w4l+eL+7qCGlVeDn enSlr8Z5cSkfoYJ9zx4wUZV9OnOPxRNx9psZyCe8HsM8ox0xHcFRoxNtoXvoR8n+ lp9rlhHAa5xZBbjyiLK4IKnVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtFqZBi +BE1ESKQheSh10mq4iexMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbuHq6pXGCTK0mUYcCF9p2+CqZljnboi+C6LSY5stJqjhrFvPVrwhC QSh6oHtUor+2m+p+6MncfzCIn2BNGmnjsrPbOEO++tNowqyNn2O8KjOFuQC2E2xv qg/9apyp6wGEmQ5K/Pig0QYvJzxhXbKRdY+4VG2MDvAjWKLkTi9KwrP4vYN8TfT4 ++qV4UlEFpd3CFwGBRoyhKzID+Eg64yxhYL44gRPlGX2EdoKXvKltkUTS/MWwQkh QWkm8fl9pK6TA7JBkusMWmMi6aaH4Y6xBk60fK6NzG4nbmWM6dE8BNh+zNrXV17E rZ97kvwD/DaI2S4sLTY872/I+4s2+Gw4 -----END CERTIFICATE-----Generated at Wed Nov 5 14:32:05 2025 by rpki-client