$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft File: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json) Hash identifier: KDTFtswLcFnUs/ubrPOjMlXga9jkKBMXdCzfvCJ5uFY= Subject key identifier: FE:8D:76:FD:BF:19:CA:82:6E:E0:FB:F7:98:7E:DF:CB:48:32:DD:2A Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft Manifest number: 0499 Signing time: Wed 05 Nov 2025 00:10:31 +0000 Manifest this update: Wed 05 Nov 2025 00:10:30 +0000 Manifest next update: Wed 12 Nov 2025 00:10:30 +0000 Files and hashes: 1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: 4az36ZuDDkQb9CzaYHeLQsJgPi7QApKYmppyMUJ0Tl0=) 2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: oX7iVEw87PxrlXLRiZsATHbTumAb9Jcb4paecAnP08M=) 3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Validity Not Before: Nov 5 00:10:30 2025 GMT Not After : Nov 12 00:10:30 2025 GMT Subject: CN=690a95f7-ded3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:60:ae:bc:7f:69:a2:f7:c0:58:49:5c:2c:5a: 8a:67:76:56:ae:dc:1f:75:0f:9a:6b:e2:67:3a:86: 77:a7:2a:17:0e:39:ae:7d:89:d8:4e:34:1c:2b:4b: 29:64:0b:a7:38:48:a3:61:ac:bf:00:0e:9b:51:75: e1:b5:28:27:f7:81:fe:d4:1b:4e:09:23:63:93:7c: 65:22:50:40:9e:ec:53:3a:93:8d:d3:5a:5f:94:8e: 7e:f4:86:61:ce:98:33:b0:bc:e3:7d:99:9b:63:b4: e1:39:82:8c:30:84:80:94:29:bc:e5:fe:39:32:68: 8f:ab:ef:1d:44:8f:08:af:0d:0c:a4:b0:31:2b:2d: 9a:97:4e:45:d2:b7:68:0d:ed:da:20:aa:21:60:4b: d6:87:03:e6:5b:02:33:59:89:db:0c:0c:dc:e7:b1: 07:6f:c3:3c:34:f8:64:51:2e:86:91:2a:c5:d2:11: 16:60:04:97:a2:65:f0:83:34:5c:76:a3:34:e8:22: dd:25:ad:20:a3:e7:81:db:f1:62:96:3f:fe:1d:bb: 64:8d:6e:31:3f:91:fa:df:78:e5:57:ac:7f:18:a2: f0:58:d2:c7:73:0d:3c:ef:57:a2:95:5c:e3:bb:66: 45:37:c3:48:72:84:a9:69:3b:d7:e9:5d:82:f8:9c: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8D:76:FD:BF:19:CA:82:6E:E0:FB:F7:98:7E:DF:CB:48:32:DD:2A X509v3 Authority Key Identifier: keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2c:b3:6d:73:28:45:ac:22:f2:8a:da:9e:68:59:af:c1:0e: ed:1f:47:c6:4f:03:6c:2b:16:c9:a9:b3:8f:15:11:23:9a:34: 60:0d:87:a0:cd:c5:28:c6:d3:b1:aa:96:59:34:13:28:16:8d: 33:72:cd:73:4c:36:03:05:d1:53:07:87:14:e9:d2:ad:a0:b5: ab:02:d1:c6:fc:3d:15:e7:c2:9d:7e:24:1e:99:04:e5:51:5b: f9:68:5b:c0:f3:95:ed:d3:c3:9a:24:7c:f6:19:f9:cc:51:61: cb:8f:6c:1b:50:e5:05:c8:f0:73:0a:08:91:8c:03:52:64:18: f3:b3:74:27:2e:fd:7e:3e:ea:54:75:fe:08:a1:e9:64:e0:67: 8e:00:e1:c7:04:81:d2:a7:ac:30:0f:2b:48:f6:77:68:51:37: 27:b2:c8:5e:00:68:96:5a:91:b9:f1:65:f5:b1:5d:e7:c8:09: 2c:8f:ea:27:ac:33:8d:d2:0c:da:54:3e:26:85:26:4c:e3:a6: 2c:b1:da:31:07:0b:8c:60:18:d6:9e:e4:0e:00:93:3d:69:74: 98:6b:19:4c:34:9c:5a:e0:0d:39:2d:75:59:7d:29:80:97:c7: a8:00:26:eb:eb:2a:2e:b6:5a:f9:ab:8e:96:18:7a:a1:aa:64: d9:5a:1f:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZGMkMxMTAvBgNVBAUTKEZFM0RBMTdCNTRBNEQ0MkY3QzVDOUE4QTY3RDM3OTA2 N0E3NjA4MEUwHhcNMjUxMTA1MDAxMDMwWhcNMjUxMTEyMDAxMDMwWjAYMRYwFAYD VQQDEw02OTBhOTVmNy1kZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GCuvH9povfAWElcLFqKZ3ZWrtwfdQ+aa+JnOoZ3pyoXDjmufYnYTjQcK0sp ZAunOEijYay/AA6bUXXhtSgn94H+1BtOCSNjk3xlIlBAnuxTOpON01pflI5+9IZh zpgzsLzjfZmbY7ThOYKMMISAlCm85f45MmiPq+8dRI8Irw0MpLAxKy2al05F0rdo De3aIKohYEvWhwPmWwIzWYnbDAzc57EHb8M8NPhkUS6GkSrF0hEWYASXomXwgzRc dqM06CLdJa0go+eB2/Filj/+HbtkjW4xP5H633jlV6x/GKLwWNLHcw0871eilVzj u2ZFN8NIcoSpaTvX6V2C+JyEZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6Ndv2/ GcqCbuD795h+38tIMt0qMB8GA1UdIwQYMBaAFP49oXtUpNQvfFyaimfTeQZ6dggO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkYyQy9FRDM1NTZEQTVG MzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFDOThYSnFLWjlONUJucDJD QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qMmhlMVNrMUM5OFhKcUtaOU41Qm5wMkNBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkYyQy9FRDM1NTZEQTVGMzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFD OThYSnFLWjlONUJucDJDQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiLLNtcyhFrCLyitqeaFmvwQ7tH0fGTwNsKxbJqbOPFREjmjRgDYeg zcUoxtOxqpZZNBMoFo0zcs1zTDYDBdFTB4cU6dKtoLWrAtHG/D0V58KdfiQemQTl UVv5aFvA85Xt08OaJHz2GfnMUWHLj2wbUOUFyPBzCgiRjANSZBjzs3QnLv1+PupU df4Ioelk4GeOAOHHBIHSp6wwDytI9ndoUTcnssheAGiWWpG58WX1sV3nyAksj+on rDON0gzaVD4mhSZM46YssdoxBwuMYBjWnuQOAJM9aXSYaxlMNJxa4A05LXVZfSmA l8eoACbr6youtlr5q46WGHqhqmTZWh9P -----END CERTIFICATE-----Generated at Wed Nov 5 05:12:10 2025 by rpki-client