$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: ZTbuQwuwD9nxtfYws/mgp+6gsBHoo/i3qM8tYb042m4= Subject key identifier: 19:C4:AC:08:99:76:06:7C:C7:21:09:AF:F9:59:18:F9:51:86:85:35 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 01FE Signing time: Mon 03 Nov 2025 02:26:31 +0000 Manifest this update: Mon 03 Nov 2025 02:26:30 +0000 Manifest next update: Mon 10 Nov 2025 02:26:30 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: p8KKOluEpWgr2/PIJes0PmPbIAQBZV0S2DiGISkpoXg=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: jmqDKa5arq4fgvLtUOSSDm4TPSp4JnFMPE58CkrLpbg=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: DgdiiCMEKe93Jsgcn1AG1optizE0ES0MbtD24A2hP+4=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: RaeRinKNGLed6XLJqu8FU+BHOJQNHJHt8FZoOYMBImQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Nov 3 02:26:30 2025 GMT Not After : Nov 10 02:26:30 2025 GMT Subject: CN=690812d7-72d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:61:9b:48:67:a5:b4:e7:0c:96:04:6f:9a: 28:27:31:c4:9f:4c:89:26:7b:e7:4a:9b:60:dd:f4: 2b:88:d2:6e:25:d7:6d:f7:41:90:55:80:9f:03:ad: a1:c7:81:75:5f:88:95:50:5e:ad:5b:00:81:97:54: 65:d3:1a:a0:f6:ed:4c:90:3f:5b:f4:1e:4b:f2:97: aa:22:2c:ef:8b:97:51:cd:27:0f:10:e0:52:81:54: e7:cd:e5:7d:44:7d:f9:b2:ad:14:de:36:3b:04:ce: a6:1d:a5:23:f4:c5:c3:0c:8c:13:0c:1d:ce:19:df: 87:43:0f:b4:56:45:2d:5d:72:47:97:7a:93:8e:11: eb:fb:33:e4:16:7c:4f:e7:33:65:ff:22:21:80:d7: e5:38:c9:e1:5c:0f:56:8c:86:ea:5d:31:56:64:26: 13:4b:db:d3:03:b5:3f:29:90:32:1d:09:aa:04:a4: 2e:37:17:cf:95:29:b1:6d:c2:48:4c:bd:8e:61:67: 64:98:77:fa:13:fc:63:a8:58:e2:30:63:35:4b:6d: 1a:58:ac:0f:1b:97:ef:0f:53:b3:26:1c:81:29:85: f3:6d:05:22:26:f1:63:61:0c:7c:82:20:38:80:f8: 56:00:50:3e:2d:16:ab:ee:97:7c:b1:21:6d:58:15: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:AC:08:99:76:06:7C:C7:21:09:AF:F9:59:18:F9:51:86:85:35 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:60:56:fb:53:22:0a:a8:b5:f2:20:e8:9d:8c:e9:f4:10:2b: ba:a7:8f:1e:be:ca:86:c3:81:0d:60:d5:f1:42:9a:ee:87:6d: 9a:72:2c:bf:52:e7:75:7d:f4:ec:c8:76:b2:73:e0:62:59:00: a3:17:88:3a:25:b4:a0:eb:c1:0f:68:76:bd:00:cf:c2:b9:bc: 34:d0:fd:10:cf:b6:72:dc:fc:70:00:14:fd:28:32:f0:14:18: ca:3f:26:c9:3c:5c:8c:ac:4f:74:3b:60:3f:43:bc:6e:73:df: 23:64:ec:8b:43:04:ce:fc:0a:85:d5:69:a0:b2:4e:38:2c:65: b4:40:e4:21:c9:fc:86:e0:a0:98:3a:b4:92:ef:71:1a:9c:c8: 2f:37:83:d0:cc:c2:ab:43:8b:0b:a7:cc:07:c0:b5:4a:bd:a6: 83:09:db:39:f5:7c:a2:e4:eb:7d:5c:4a:f6:92:55:e5:dd:a1: 64:90:6c:95:38:12:cf:46:32:30:6e:af:ae:e5:20:da:19:39: 9d:74:43:96:de:71:6b:b0:94:60:d9:e3:e2:19:6c:7d:d4:83: b0:c3:ba:45:3a:9c:2d:da:fb:96:fa:f6:9c:b2:9b:7a:fc:09: 17:8f:db:89:70:a7:f3:ff:f9:87:57:36:a9:4b:57:a6:67:f1: 27:9b:87:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUxMTAzMDIyNjMwWhcNMjUxMTEwMDIyNjMwWjAYMRYwFAYD VQQDEw02OTA4MTJkNy03MmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtBhm0hnpbTnDJYEb5ooJzHEn0yJJnvnSptg3fQriNJuJddt90GQVYCfA62h x4F1X4iVUF6tWwCBl1Rl0xqg9u1MkD9b9B5L8peqIizvi5dRzScPEOBSgVTnzeV9 RH35sq0U3jY7BM6mHaUj9MXDDIwTDB3OGd+HQw+0VkUtXXJHl3qTjhHr+zPkFnxP 5zNl/yIhgNflOMnhXA9WjIbqXTFWZCYTS9vTA7U/KZAyHQmqBKQuNxfPlSmxbcJI TL2OYWdkmHf6E/xjqFjiMGM1S20aWKwPG5fvD1OzJhyBKYXzbQUiJvFjYQx8giA4 gPhWAFA+LRar7pd8sSFtWBVYewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnErAiZ dgZ8xyEJr/lZGPlRhoU1MB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0YFb7UyIKqLXyIOidjOn0ECu6p48evsqGw4ENYNXxQpruh22aciy/ Uud1ffTsyHayc+BiWQCjF4g6JbSg68EPaHa9AM/Cubw00P0Qz7Zy3PxwABT9KDLw FBjKPybJPFyMrE90O2A/Q7xuc98jZOyLQwTO/AqF1Wmgsk44LGW0QOQhyfyG4KCY OrSS73EanMgvN4PQzMKrQ4sLp8wHwLVKvaaDCds59Xyi5Ot9XEr2klXl3aFkkGyV OBLPRjIwbq+u5SDaGTmddEOW3nFrsJRg2ePiGWx91IOww7pFOpwt2vuW+vacspt6 /AkXj9uJcKfz//mHVzapS1emZ/Enm4c/ -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:40 2025 by rpki-client