$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: NB9IU6GRQVgwGgUqEryoouFMwWSDSgi+pcuw3yKSV1g= Subject key identifier: 39:0C:A7:39:90:93:13:E5:F5:94:56:09:27:26:79:9F:D9:D6:14:71 Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 08A4 Signing time: Tue 04 Nov 2025 20:36:21 +0000 Manifest this update: Tue 04 Nov 2025 20:36:21 +0000 Manifest next update: Tue 11 Nov 2025 20:36:21 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: HmUL5cBruVgzl7JfOSBy+ob7EVRCWdaNAD9q6EO/M8Y=) 2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: SYp3+Qw2NUOxAP2PI8VyKC4eZrJ7XxwyTmQykIlzc3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Nov 4 20:36:21 2025 GMT Not After : Nov 11 20:36:21 2025 GMT Subject: CN=690a63c5-51e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:42:11:9c:dc:d4:a1:aa:7c:69:59:78:23: 6d:03:e1:9d:0d:9f:bb:cc:88:73:99:71:b0:13:62: 2d:e3:49:fa:30:df:c5:95:67:1d:0a:41:fe:1b:83: 9f:40:1f:a3:1e:62:6f:46:3c:98:e5:db:8f:4c:47: b7:14:1e:05:f6:54:51:19:d8:3c:6d:39:1d:cb:54: 31:1a:f8:1d:c5:e5:fb:e1:2e:3e:11:fb:f1:d2:b3: 6c:9a:d0:7a:1d:2e:e0:38:3e:6d:b3:1b:76:15:78: 32:8c:23:43:0e:90:84:ee:80:0a:a6:fd:c5:1e:b2: 98:65:a2:0c:b1:79:ac:e5:6b:97:bd:b3:60:3c:be: 85:ac:68:48:f9:9d:b4:76:01:21:ef:3a:ee:10:f6: b4:3c:80:3e:00:01:fe:4d:33:ad:bd:a5:9a:c2:f0: 31:d1:17:41:3c:ce:15:a9:b9:93:4d:74:52:03:c7: 54:29:fc:cf:03:ee:9c:a8:56:0b:81:bf:89:ab:21: c6:b9:5d:36:99:c4:b4:db:6b:17:86:ad:ed:7d:ea: cf:33:3a:8f:fe:7c:c6:01:ee:cc:a7:1b:2d:4a:d0: 39:46:bb:5a:eb:7f:6b:a6:0f:69:94:d3:27:0d:62: 2d:8b:99:89:b4:81:2d:25:1d:bc:52:32:45:4b:3e: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0C:A7:39:90:93:13:E5:F5:94:56:09:27:26:79:9F:D9:D6:14:71 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:21:d4:8e:fc:af:dc:ca:63:d2:bb:66:56:31:69:3f:df:72: ec:9b:95:39:14:55:14:b6:8d:83:85:f1:a4:fd:d8:6c:44:0b: 63:27:7d:47:c6:b9:e4:39:99:de:7c:05:91:b7:e4:4b:49:f4: 9c:bb:7d:ed:aa:e7:58:92:3d:2d:3c:3d:e0:8f:2e:98:3b:95: 81:ac:02:51:a4:45:db:28:9f:eb:86:dc:a1:8a:8e:cd:4b:19: 8c:cb:27:26:0d:f1:77:dd:84:1a:02:aa:5c:f6:e7:01:e8:43: 6b:1c:36:b3:99:34:f6:0c:dc:6d:3f:c2:79:37:52:fa:73:c8: fd:5c:04:63:10:8f:3a:82:97:92:f2:02:08:19:03:41:b3:e3: 79:0b:75:ca:f1:ce:98:f8:d3:b4:87:dd:28:83:d2:20:9c:f8: 3a:7f:ef:f6:21:91:4a:07:5a:ba:13:f5:c9:d9:7f:63:ce:e3: 85:51:0c:98:d4:a0:9d:2e:cb:e1:79:04:79:51:ff:f3:55:fc: 5f:83:aa:77:13:9e:d7:47:b0:24:a1:58:a1:61:43:fa:77:9c: a3:f3:b0:e1:93:1d:79:d7:22:ee:cd:d2:9a:01:22:f7:8d:4e: ea:d1:ab:29:07:61:4e:4a:da:da:bd:48:96:c3:15:eb:61:53: 5c:9a:a0:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUxMTA0MjAzNjIxWhcNMjUxMTExMjAzNjIxWjAYMRYwFAYD VQQDEw02OTBhNjNjNS01MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BpCEZzc1KGqfGlZeCNtA+GdDZ+7zIhzmXGwE2It40n6MN/FlWcdCkH+G4Of QB+jHmJvRjyY5duPTEe3FB4F9lRRGdg8bTkdy1QxGvgdxeX74S4+Efvx0rNsmtB6 HS7gOD5tsxt2FXgyjCNDDpCE7oAKpv3FHrKYZaIMsXms5WuXvbNgPL6FrGhI+Z20 dgEh7zruEPa0PIA+AAH+TTOtvaWawvAx0RdBPM4VqbmTTXRSA8dUKfzPA+6cqFYL gb+JqyHGuV02mcS022sXhq3tferPMzqP/nzGAe7MpxstStA5Rrta639rpg9plNMn DWIti5mJtIEtJR28UjJFSz61EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkMpzmQ kxPl9ZRWCScmeZ/Z1hRxMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJIdSO/K/cymPSu2ZWMWk/33Lsm5U5FFUUto2DhfGk/dhsRAtjJ31H xrnkOZnefAWRt+RLSfScu33tqudYkj0tPD3gjy6YO5WBrAJRpEXbKJ/rhtyhio7N SxmMyycmDfF33YQaAqpc9ucB6ENrHDazmTT2DNxtP8J5N1L6c8j9XARjEI86gpeS 8gIIGQNBs+N5C3XK8c6Y+NO0h90og9IgnPg6f+/2IZFKB1q6E/XJ2X9jzuOFUQyY 1KCdLsvheQR5Uf/zVfxfg6p3E57XR7AkoVihYUP6d5yj87Dhkx151yLuzdKaASL3 jU7q0aspB2FOStravUiWwxXrYVNcmqCn -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:26 2025 by rpki-client