$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: hda8uqoT7h1dOyYH5I0ID03xkC2DMtL6gDjPzJXMpDs= Subject key identifier: B8:4D:1F:AD:54:57:E5:3F:D4:97:92:A6:23:59:5E:D8:07:CA:C2:D1 Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04FF Signing time: Tue 04 Nov 2025 23:44:45 +0000 Manifest this update: Tue 04 Nov 2025 23:44:44 +0000 Manifest next update: Tue 11 Nov 2025 23:44:44 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: 6qRIY6zUh+BAn3F0UAVQsDdWGZUDFQxcCJIdv4+7QpE=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Nov 4 23:44:44 2025 GMT Not After : Nov 11 23:44:44 2025 GMT Subject: CN=690a8fec-5a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:90:99:6d:80:71:80:dc:f2:91:0b:80:0a:9b: 27:f9:3c:ff:2d:b3:4d:19:90:df:61:81:5e:04:6f: 99:c0:97:02:b2:a2:f0:54:3d:9c:48:63:dd:68:25: e6:f8:2f:9d:5f:c1:4e:78:85:ac:df:95:c0:9f:1d: 23:b1:31:b8:18:d7:c1:10:ec:b0:93:df:ed:f2:38: 2c:f7:71:05:95:9f:95:c1:a1:c7:8f:70:55:fc:2c: 4f:2d:a2:01:ab:5d:3f:75:99:05:c1:c2:06:5b:2e: 12:04:c6:c2:bc:b7:4f:a9:d8:2c:60:f8:40:c4:47: 39:c6:a1:fd:4b:f3:51:cb:ec:49:33:c2:5d:bb:ae: 2c:f1:cd:df:9e:3e:79:20:c2:a9:7d:87:dc:ec:68: 89:d7:52:f3:6d:47:e1:72:a6:35:1f:f0:97:9c:4a: ea:c5:8a:6a:9e:a9:50:06:27:b4:92:a0:b9:80:2c: 87:66:c8:f5:48:36:2e:64:75:53:3d:2e:2f:2d:da: 03:1e:9f:89:83:98:d0:95:86:a7:a9:36:7c:61:78: 05:15:d6:71:b9:36:38:14:15:81:76:31:1c:34:9b: 0b:0e:d5:a5:8b:e2:ea:00:94:e8:fb:ea:fc:2b:8f: 71:4b:28:0a:62:a3:62:0a:f1:cb:89:b2:78:13:29: 6b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4D:1F:AD:54:57:E5:3F:D4:97:92:A6:23:59:5E:D8:07:CA:C2:D1 X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d1:c9:32:dd:95:14:25:45:5f:78:aa:68:7a:82:91:21:6f: 61:8f:68:d4:c2:92:71:73:fc:3a:fb:96:ce:af:67:52:a6:f4: 5b:ae:07:a1:f8:2b:b7:e6:9e:ae:d4:a5:2b:99:92:9e:66:b8: 1f:d9:52:bf:b4:ce:b9:fb:ff:c6:9b:2d:0b:d6:09:b8:07:32: ff:df:b2:36:ce:b0:22:9e:54:80:4b:35:13:a1:71:e6:84:e6: 47:97:d1:e2:1a:28:71:12:c8:86:08:d3:1a:d1:fb:ed:7e:81: a3:c8:1d:f7:2d:19:d6:1c:c6:00:e9:a5:e6:db:47:c6:d7:4f: 39:40:8f:ed:d9:a7:ea:87:aa:df:6e:53:1c:ce:36:de:8d:e0: a6:e4:ae:25:92:94:a3:6e:65:5f:8b:42:d6:3c:37:41:c9:71: 2a:39:42:13:af:4f:01:ab:29:95:3e:90:74:14:8b:a6:12:95: 7b:4d:f1:64:c7:46:b0:ea:a0:4f:47:41:84:73:61:ca:31:9c: b6:ee:a7:b3:6f:15:0e:4e:02:be:31:0d:f3:e2:44:f8:fa:d3: 48:af:67:2d:28:f2:32:87:73:f8:c4:36:09:c3:68:b3:7f:78: 57:5e:60:50:85:47:17:7f:e6:08:25:30:85:31:ca:08:ee:7c: fa:0e:cb:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUxMTA0MjM0NDQ0WhcNMjUxMTExMjM0NDQ0WjAYMRYwFAYD VQQDEw02OTBhOGZlYy01YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ZCZbYBxgNzykQuACpsn+Tz/LbNNGZDfYYFeBG+ZwJcCsqLwVD2cSGPdaCXm +C+dX8FOeIWs35XAnx0jsTG4GNfBEOywk9/t8jgs93EFlZ+VwaHHj3BV/CxPLaIB q10/dZkFwcIGWy4SBMbCvLdPqdgsYPhAxEc5xqH9S/NRy+xJM8Jdu64s8c3fnj55 IMKpfYfc7GiJ11LzbUfhcqY1H/CXnErqxYpqnqlQBie0kqC5gCyHZsj1SDYuZHVT PS4vLdoDHp+Jg5jQlYanqTZ8YXgFFdZxuTY4FBWBdjEcNJsLDtWli+LqAJTo++r8 K49xSygKYqNiCvHLibJ4EylrawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhNH61U V+U/1JeSpiNZXtgHysLRMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT0cky3ZUUJUVfeKpoeoKRIW9hj2jUwpJxc/w6+5bOr2dSpvRbrgeh +Cu35p6u1KUrmZKeZrgf2VK/tM65+//Gmy0L1gm4BzL/37I2zrAinlSASzUToXHm hOZHl9HiGihxEsiGCNMa0fvtfoGjyB33LRnWHMYA6aXm20fG1085QI/t2afqh6rf blMczjbejeCm5K4lkpSjbmVfi0LWPDdByXEqOUITr08BqymVPpB0FIumEpV7TfFk x0aw6qBPR0GEc2HKMZy27qezbxUOTgK+MQ3z4kT4+tNIr2ctKPIyh3P4xDYJw2iz f3hXXmBQhUcXf+YIJTCFMcoI7nz6Dss6 -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:58 2025 by rpki-client