$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json) Hash identifier: nHUM47RD+wln/bbz7IH00O4ISZlxUkvg2UH/DHz7uRw= Subject key identifier: AA:2B:33:C1:0E:62:31:B6:09:BB:AA:EE:98:34:C5:42:8C:D5:E1:24 Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Certificate serial: 19CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft Manifest number: 199A Signing time: Tue 04 Nov 2025 16:29:46 +0000 Manifest this update: Tue 04 Nov 2025 16:29:46 +0000 Manifest next update: Tue 11 Nov 2025 16:29:46 +0000 Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: AEwyNpNSiXrv4bgmiNOOPAbV50HNwSGNtTjzWnQioCc=) 2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: S0mQJNnoeIQivjNGK241Vh1RV7TRfPYTUWmyHatSyzQ=) 3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: eEZPHr2hyWyjDlWLggbbTEM+Nbw1nk3y4RJyg3r84y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6604 (0x19cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Validity Not Before: Nov 4 16:29:46 2025 GMT Not After : Nov 11 16:29:46 2025 GMT Subject: CN=690a29fa-95a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:f6:1e:0c:c6:eb:8f:12:ea:50:1b:20:85: c1:2e:e7:7c:e2:58:90:2c:fc:34:88:46:70:df:e2: 55:75:14:77:fb:8d:e5:de:8e:8a:a2:8f:7c:c4:4d: e4:b7:95:58:11:c8:73:89:7e:33:3c:9a:2d:5d:34: e8:b5:48:94:71:2f:bf:36:ff:64:95:82:ce:b0:4a: c9:84:8d:fc:79:4d:01:bf:8e:3f:b4:2f:cf:4b:b9: 3e:ce:a8:89:00:ab:69:8d:d4:83:4c:74:5b:40:fa: 2c:d4:df:81:f1:2f:85:63:aa:1d:db:77:ab:e0:11: 3b:6b:4e:43:8e:6e:60:af:92:ae:03:ff:3d:cd:92: 11:8d:18:5e:32:b7:59:d2:78:52:91:cf:36:99:72: cd:32:fd:ca:71:73:fd:c6:2b:15:2c:65:9d:bd:6e: a8:9d:fd:5b:2c:8a:83:d2:24:a8:e3:ee:6b:af:23: 6c:d0:83:7d:d7:40:79:f5:0a:02:b6:01:54:49:7d: 8e:37:9e:02:d1:31:cb:44:42:f1:16:11:97:65:0b: da:9b:eb:55:1e:c3:9e:06:68:f2:18:43:49:a1:5b: 16:db:c5:19:09:1a:a8:98:7c:e7:b1:ad:08:d3:ca: cf:5f:d3:da:eb:99:9b:e8:e9:ac:31:ca:1f:42:d7: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2B:33:C1:0E:62:31:B6:09:BB:AA:EE:98:34:C5:42:8C:D5:E1:24 X509v3 Authority Key Identifier: keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f3:3f:b1:00:b1:c0:af:5b:79:f9:03:1b:3b:db:01:65:34: cd:20:42:97:3f:bc:ae:49:bd:65:b7:5b:5f:95:15:1b:d1:42: a2:e1:09:a3:da:04:96:6d:fd:c6:cf:c1:b0:6e:52:bc:7a:b2: 27:17:f0:74:5a:84:ed:b2:52:48:83:a3:2a:81:01:0d:8e:65: 44:d9:e8:7f:cd:ff:58:cd:46:eb:98:18:b3:d6:1b:14:01:80: e0:93:93:a3:b4:b6:79:24:84:8e:c8:fe:42:3e:d4:55:e0:05: 43:6c:f2:7d:14:45:12:71:86:86:8d:d4:bb:5c:5e:f8:f7:29: 47:aa:5f:a7:3d:db:78:57:cf:ae:bc:91:95:fd:92:7b:7c:ea: e5:7b:c8:49:6a:2d:97:04:0c:12:0a:36:58:3c:de:a9:75:e0: c9:f4:c4:52:48:55:97:be:1a:77:6c:f4:fc:b7:55:4a:5a:d4: e7:91:74:05:ea:5e:85:6a:78:3d:d2:18:4a:c7:68:9c:5a:78: 6f:10:b7:e3:28:ed:4f:a1:41:22:e8:49:ed:39:db:4d:78:ec: 56:e8:6a:b7:c8:11:ef:8a:b8:43:a7:19:be:ff:2a:c5:bd:43: 04:5c:73:be:79:0b:0c:ea:6e:a7:95:5f:60:d3:db:a6:bf:76: d0:e9:0b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU4OUExMTAvBgNVBAUTKDI2Mjc5MENEOTE0Q0VBOEVDMTFFMjU4NjlCODk4REUw MDAxRkJEMDkwHhcNMjUxMTA0MTYyOTQ2WhcNMjUxMTExMTYyOTQ2WjAYMRYwFAYD VQQDEw02OTBhMjlmYS05NWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq72HgzG648S6lAbIIXBLud84liQLPw0iEZw3+JVdRR3+43l3o6Koo98xE3k t5VYEchziX4zPJotXTTotUiUcS+/Nv9klYLOsErJhI38eU0Bv44/tC/PS7k+zqiJ AKtpjdSDTHRbQPos1N+B8S+FY6od23er4BE7a05Djm5gr5KuA/89zZIRjRheMrdZ 0nhSkc82mXLNMv3KcXP9xisVLGWdvW6onf1bLIqD0iSo4+5rryNs0IN910B59QoC tgFUSX2ON54C0THLRELxFhGXZQvam+tVHsOeBmjyGENJoVsW28UZCRqomHznsa0I 08rPX9Pa65mb6OmsMcofQtfdgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKorM8EO YjG2Cbuq7pg0xUKM1eEkMB8GA1UdIwQYMBaAFCYnkM2RTOqOwR4lhpuJjeAAH70J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg5QS9BQ0Q2RkI4QTdE OTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZvN0JIaVdHbTRtTjRBQWZ2 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppZVF6WkZNNm83QkhpV0dtNG1ONEFBZnZRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTg5QS9BQ0Q2RkI4QTdEOTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZv N0JIaVdHbTRtTjRBQWZ2UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf8z+xALHAr1t5+QMbO9sBZTTNIEKXP7yuSb1lt1tflRUb0UKi4Qmj 2gSWbf3Gz8GwblK8erInF/B0WoTtslJIg6MqgQENjmVE2eh/zf9YzUbrmBiz1hsU AYDgk5OjtLZ5JISOyP5CPtRV4AVDbPJ9FEUScYaGjdS7XF749ylHql+nPdt4V8+u vJGV/ZJ7fOrle8hJai2XBAwSCjZYPN6pdeDJ9MRSSFWXvhp3bPT8t1VKWtTnkXQF 6l6Fang90hhKx2icWnhvELfjKO1PoUEi6EntOdtNeOxW6Gq3yBHvirhDpxm+/yrF vUMEXHO+eQsM6m6nlV9g09umv3bQ6Qt2 -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:36 2025 by rpki-client