$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: En2W9Pq0zlijzdShz6PJW1U3xGNxRDHPAqC2kEs/VE8= Subject key identifier: AE:38:39:9C:0A:1B:92:1D:55:60:C5:10:31:4C:14:1F:86:C2:66:A6 Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: AE Signing time: Mon 03 Nov 2025 06:07:53 +0000 Manifest this update: Mon 03 Nov 2025 06:07:52 +0000 Manifest next update: Mon 10 Nov 2025 06:07:52 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: MgtePIRJLBoGIp61ZtNitgVHTZzbsovQSbFYh/lynF8=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Nov 3 06:07:52 2025 GMT Not After : Nov 10 06:07:52 2025 GMT Subject: CN=690846b9-78d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:31:81:ff:59:58:16:ba:4a:a1:71:2d:b3:ff: bd:4e:2b:b0:74:fe:16:6c:0d:6c:43:3d:82:3d:12: 34:14:47:4f:24:ca:ed:6d:69:3e:db:c2:f4:6c:de: f7:4d:8e:61:ef:e5:fc:2c:a7:b5:ff:22:d3:d4:55: e5:a6:b0:2e:4f:d2:c2:d4:b0:03:ff:86:9d:3d:87: 40:2f:c2:32:00:9f:1f:9d:99:fb:dd:d4:19:ac:8e: 75:89:3c:1a:27:b6:0e:d9:28:eb:86:85:dc:a0:e9: 4b:d4:41:eb:1b:b7:58:0f:e8:fb:17:d7:fe:80:d8: d9:0c:c3:b1:a9:58:e1:f6:1d:96:a7:42:0e:30:6b: 0a:e6:f2:2d:59:0c:28:34:5b:ee:7f:47:fa:a5:a3: c7:ee:19:4c:ca:f8:6b:ce:b2:00:29:ec:e0:38:62: 4e:e2:c0:fa:95:35:58:9c:98:e8:73:c4:a6:40:02: f0:63:ea:a9:01:2b:32:66:93:a0:a0:2e:41:10:aa: f4:28:11:2d:49:f4:2c:0c:2c:56:07:82:a2:0d:2a: f6:a6:82:94:82:a3:18:69:eb:e2:f9:f7:0f:22:e9: a5:78:a4:03:c1:44:c1:db:6b:5f:20:79:61:64:31: 97:e6:cb:8d:ec:b3:2c:24:c2:f1:c2:59:2a:38:22: 75:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:38:39:9C:0A:1B:92:1D:55:60:C5:10:31:4C:14:1F:86:C2:66:A6 X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:94:99:3a:19:4a:eb:3f:7d:31:7b:09:98:3b:ca:87:25:9a: d4:cf:a9:4c:5a:e7:bd:7c:cf:92:b9:37:f9:35:2f:a2:63:b4: 87:29:05:ea:96:8f:ad:c9:cf:ea:10:c0:5a:4b:f4:2f:95:d6: 94:7e:43:03:df:5e:75:a3:e2:16:fb:b8:4f:57:ef:41:03:f1: 2f:7a:8b:c2:f7:c2:00:96:6a:92:22:28:40:2e:1e:74:2e:4e: d9:3b:1e:2d:31:0a:30:9d:31:20:ec:79:3e:c6:9c:df:47:3a: 2f:1b:dc:31:e8:71:8b:2c:7c:4d:b1:f5:80:12:5b:a1:91:5b: 90:cc:19:2d:a4:57:28:ac:02:bd:58:c5:8d:19:36:89:dd:73: d8:f7:e8:cd:eb:93:eb:b6:20:a7:3e:f5:cc:e4:04:04:87:15: f6:d1:23:7a:70:d5:bc:9d:ba:a7:02:c6:bf:71:db:64:f4:0c: e7:b2:d4:de:ec:db:f0:00:a9:8d:8c:80:57:f8:46:96:e1:99: f5:61:09:db:78:f5:e1:64:27:48:a7:06:59:68:31:aa:b2:d5: cc:99:40:2e:cf:5c:73:d0:bb:1d:36:c5:ed:76:27:ff:ad:dc: 5b:62:e9:5c:67:24:84:0e:d6:66:ac:e7:dd:01:43:48:94:90: a7:d6:12:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0MjAxMTAvBgNVBAUTKDdFM0FBNDhENjdFQjk5Njk5QzAyQjgxRjcxNjk2REY0 NjVBOEE2RTUwHhcNMjUxMTAzMDYwNzUyWhcNMjUxMTEwMDYwNzUyWjAYMRYwFAYD VQQDEw02OTA4NDZiOS03OGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkzGB/1lYFrpKoXEts/+9TiuwdP4WbA1sQz2CPRI0FEdPJMrtbWk+28L0bN73 TY5h7+X8LKe1/yLT1FXlprAuT9LC1LAD/4adPYdAL8IyAJ8fnZn73dQZrI51iTwa J7YO2SjrhoXcoOlL1EHrG7dYD+j7F9f+gNjZDMOxqVjh9h2Wp0IOMGsK5vItWQwo NFvuf0f6paPH7hlMyvhrzrIAKezgOGJO4sD6lTVYnJjoc8SmQALwY+qpASsyZpOg oC5BEKr0KBEtSfQsDCxWB4KiDSr2poKUgqMYaevi+fcPIumleKQDwUTB22tfIHlh ZDGX5suN7LMsJMLxwlkqOCJ1MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK44OZwK G5IdVWDFEDFMFB+GwmamMB8GA1UdIwQYMBaAFH46pI1n65lpnAK4H3FpbfRlqKbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQyMC9DNDJCMzNENEFD OEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1XbWNBcmdmY1dsdDlHV29w dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQyMC9DNDJCMzNENEFDOEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1X bWNBcmdmY1dsdDlHV29wdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARlJk6GUrrP30xewmYO8qHJZrUz6lMWue9fM+SuTf5NS+iY7SHKQXq lo+tyc/qEMBaS/QvldaUfkMD3151o+IW+7hPV+9BA/EveovC98IAlmqSIihALh50 Lk7ZOx4tMQownTEg7Hk+xpzfRzovG9wx6HGLLHxNsfWAEluhkVuQzBktpFcorAK9 WMWNGTaJ3XPY9+jN65PrtiCnPvXM5AQEhxX20SN6cNW8nbqnAsa/cdtk9AznstTe 7NvwAKmNjIBX+EaW4Zn1YQnbePXhZCdIpwZZaDGqstXMmUAuz1xz0LsdNsXtdif/ rdxbYulcZySEDtZmrOfdAUNIlJCn1hK0 -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:20 2025 by rpki-client