$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: I3MRZvN+Ppier4eq7F91UIkuUTNO+w5Pg28oPzrcbDg= Subject key identifier: 3A:12:05:49:24:9C:B6:0F:BE:2A:06:B4:5A:8F:56:0F:C6:70:20:5E Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1F36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1F0B Signing time: Sun 02 Nov 2025 16:02:30 +0000 Manifest this update: Sun 02 Nov 2025 16:02:29 +0000 Manifest next update: Sun 09 Nov 2025 16:02:29 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 21Cu1dyI9fG6PuMIRDbIRNstnJvHYQHgeThYcDT00kA=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7990 (0x1f36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Nov 2 16:02:29 2025 GMT Not After : Nov 9 16:02:29 2025 GMT Subject: CN=69078095-6daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f2:02:5a:36:38:08:4a:be:02:06:60:82:26: f9:83:f8:b2:40:9a:e0:a2:e6:39:3b:1d:b4:e0:21: 07:7f:a3:d4:62:8b:7f:54:3c:4a:3a:01:80:f1:4c: c0:c3:39:b0:de:29:7e:54:04:f9:ce:e3:8f:9f:5b: bc:5c:82:5e:ae:08:34:03:15:fb:47:f4:35:56:fe: 33:ec:c1:95:4b:74:48:c5:9f:dc:75:52:3e:8a:c6: 18:c6:ab:f9:81:87:48:1e:d7:e5:87:98:59:cf:db: 19:a5:a5:93:0c:0f:f8:55:07:1b:85:0d:5d:22:35: e3:33:0f:28:5b:6d:1d:e2:23:42:66:bd:5a:37:7d: d0:ab:69:1d:2a:dc:6a:04:b5:bd:40:d5:2d:87:ad: 46:01:d4:97:30:76:11:7f:26:ae:ae:4a:f5:0c:a8: 96:8a:c2:84:1a:b8:7a:28:f6:53:9c:fd:70:1c:e2: b1:d7:2d:a8:77:7c:16:30:33:0b:d2:56:0d:bb:5a: 23:b8:80:bf:5c:96:41:fa:d1:dc:c8:b6:e3:57:2d: 45:10:36:88:41:e7:e3:4e:6a:c0:55:fc:8a:f8:4a: 65:07:02:2c:77:02:80:cc:5c:8b:70:e9:ae:c4:b2: 58:47:c1:80:16:12:5f:3a:c4:56:fb:0d:e2:71:7f: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:12:05:49:24:9C:B6:0F:BE:2A:06:B4:5A:8F:56:0F:C6:70:20:5E X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:03:00:e6:65:0f:97:ef:8b:27:f8:40:d2:30:62:a0:a0:bf: 48:90:96:6e:a1:0b:38:7f:49:49:48:29:89:50:75:e1:50:52: 68:90:7e:06:ef:fe:5b:b4:84:7d:b0:9e:f9:2f:40:58:a0:d4: 6a:b8:55:bf:7f:5a:60:ab:ca:67:08:29:1c:85:9c:a8:92:a4: 71:37:59:09:ef:01:9d:1c:16:02:c1:05:41:fd:77:32:d0:41: 0b:cf:53:05:fd:7e:f3:0d:8e:d2:4d:35:26:d2:56:dd:b5:57: 83:cf:32:57:96:90:27:3d:b6:a0:36:d5:8d:ee:22:db:7b:e9: 2d:cb:0a:9e:e1:fe:39:06:97:99:02:cc:e7:d2:03:6b:30:0c: 2d:16:55:62:15:b3:8a:46:e4:e3:62:e8:6c:2c:cb:1a:25:a8: b4:97:8b:1b:73:5f:72:ea:2b:e8:01:eb:4d:85:9c:ba:36:f7: f0:96:e3:bb:76:0d:82:ea:f7:4a:ff:e3:95:db:3a:c5:c9:c5: 0a:7c:f5:34:5d:a0:84:de:07:f9:66:14:08:3f:00:ab:a9:6a: 08:55:cf:a5:d6:ad:76:7f:62:1b:57:f4:cc:3e:e0:a1:88:b6: 6f:5f:3e:e2:66:2b:5e:9a:f1:f4:1d:b3:4e:58:b6:ef:74:06: 79:cf:13:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUxMTAyMTYwMjI5WhcNMjUxMTA5MTYwMjI5WjAYMRYwFAYD VQQDEw02OTA3ODA5NS02ZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vICWjY4CEq+AgZggib5g/iyQJrgouY5Ox204CEHf6PUYot/VDxKOgGA8UzA wzmw3il+VAT5zuOPn1u8XIJergg0AxX7R/Q1Vv4z7MGVS3RIxZ/cdVI+isYYxqv5 gYdIHtflh5hZz9sZpaWTDA/4VQcbhQ1dIjXjMw8oW20d4iNCZr1aN33Qq2kdKtxq BLW9QNUth61GAdSXMHYRfyaurkr1DKiWisKEGrh6KPZTnP1wHOKx1y2od3wWMDML 0lYNu1ojuIC/XJZB+tHcyLbjVy1FEDaIQefjTmrAVfyK+EplBwIsdwKAzFyLcOmu xLJYR8GAFhJfOsRW+w3icX9KtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoSBUkk nLYPvioGtFqPVg/GcCBeMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXAwDmZQ+X74sn+EDSMGKgoL9IkJZuoQs4f0lJSCmJUHXhUFJokH4G 7/5btIR9sJ75L0BYoNRquFW/f1pgq8pnCCkchZyokqRxN1kJ7wGdHBYCwQVB/Xcy 0EELz1MF/X7zDY7STTUm0lbdtVeDzzJXlpAnPbagNtWN7iLbe+ktywqe4f45BpeZ Aszn0gNrMAwtFlViFbOKRuTjYuhsLMsaJai0l4sbc19y6ivoAetNhZy6NvfwluO7 dg2C6vdK/+OV2zrFycUKfPU0XaCE3gf5ZhQIPwCrqWoIVc+l1q12f2IbV/TMPuCh iLZvXz7iZitemvH0HbNOWLbvdAZ5zxNx -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:14 2025 by rpki-client