$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: WDewy9p6dNdE6lOeFVH5Ki3D3SsM+8knwlDiBdebUjo= Subject key identifier: ED:7B:C7:7C:65:FF:96:A4:22:D9:79:6B:64:68:65:2F:2E:9F:78:C5 Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 165B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 1651 Signing time: Tue 04 Nov 2025 16:49:46 +0000 Manifest this update: Tue 04 Nov 2025 16:49:45 +0000 Manifest next update: Tue 11 Nov 2025 16:49:45 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: LoJqI4gxB+SW6sV6lZrPPmNP9SmRrpvhLRBOqmMk9bE=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5723 (0x165b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: Nov 4 16:49:45 2025 GMT Not After : Nov 11 16:49:45 2025 GMT Subject: CN=690a2eaa-136d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:20:a4:76:ae:8a:0c:d3:cc:59:1f:a0:c6:95: 29:c3:46:8c:74:f2:93:f9:4d:5c:f7:d6:26:91:f2: 31:8c:56:8c:f4:c3:93:86:8d:d2:10:d4:2a:ec:82: 99:ff:d9:c3:a2:b5:b6:38:45:a8:0e:28:99:dc:db: 10:ab:0a:ab:58:e8:14:27:dc:57:21:24:a3:c6:a2: e2:ff:ed:37:26:0e:41:44:9f:2e:f5:09:2a:a9:58: 3a:c6:2d:e0:19:55:4f:ae:34:28:b2:93:59:0d:ff: d2:40:22:cc:34:86:f2:05:20:42:e6:70:09:cd:0d: 3f:17:82:cc:54:08:e6:8d:41:2d:57:63:24:52:7b: 12:65:a9:a3:eb:67:5a:52:33:99:0e:2a:40:a2:ee: 42:f5:c1:80:c5:70:7c:6a:c8:89:86:65:db:c0:cd: 35:b5:da:c3:fa:1f:d3:54:00:1f:4b:7b:72:b9:bc: 61:91:ca:eb:57:c3:f1:26:3a:f4:4a:e1:e2:92:a4: 8d:e4:67:67:e6:b7:bc:87:4d:52:01:7d:28:bb:39: af:f8:a0:0c:4d:4c:c8:29:e0:b1:2a:01:1b:15:98: b8:d7:b9:15:1d:7a:41:46:26:d5:cb:d1:d2:cf:c4: 9f:08:04:05:46:a2:3a:b5:77:b3:f4:e3:03:e1:fb: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:C7:7C:65:FF:96:A4:22:D9:79:6B:64:68:65:2F:2E:9F:78:C5 X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:67:e5:eb:91:11:9f:f2:3b:1f:c9:68:4e:09:4b:ac:c4:9e: e2:8c:84:02:93:c1:99:77:fa:ba:4e:87:c1:35:f0:95:92:5e: 1c:d9:4a:f6:5f:f1:73:32:25:ac:ba:b8:14:ea:34:35:c1:cb: 36:69:8d:76:25:b1:f6:b3:40:ad:cf:e0:12:bf:dd:a7:eb:e0: fd:45:bc:fa:c5:20:ac:f2:9d:e7:ec:17:1d:79:69:98:30:69: 0b:cf:1a:11:74:e1:2e:e2:33:b7:2a:cf:d2:cd:80:92:ce:bb: c5:d1:79:01:c5:ce:04:63:e3:1f:17:19:99:06:ac:1e:04:7f: cb:15:fa:c2:03:45:4d:f4:83:b5:b6:b8:93:5e:e3:84:99:cb: 9b:23:7a:a5:c4:ce:0c:24:a0:0d:33:09:c3:45:92:7d:32:e1: e0:7b:e2:27:81:ac:3d:6c:80:02:be:2d:df:ce:39:9b:9c:41: 1f:27:1f:b2:d0:98:79:af:0b:27:86:cd:ba:36:c4:76:66:b5: 80:b1:9d:ad:d8:e2:95:85:f2:e3:eb:1f:ee:6e:72:2f:b4:46: b0:b1:9d:e1:71:2a:b3:a1:f4:4b:a2:2b:b3:78:80:f1:44:8d: 4e:14:55:63:2d:7e:5d:6d:f5:45:9f:92:71:b1:d2:e3:d5:18: eb:54:59:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUxMTA0MTY0OTQ1WhcNMjUxMTExMTY0OTQ1WjAYMRYwFAYD VQQDEw02OTBhMmVhYS0xMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SCkdq6KDNPMWR+gxpUpw0aMdPKT+U1c99YmkfIxjFaM9MOTho3SENQq7IKZ /9nDorW2OEWoDiiZ3NsQqwqrWOgUJ9xXISSjxqLi/+03Jg5BRJ8u9QkqqVg6xi3g GVVPrjQospNZDf/SQCLMNIbyBSBC5nAJzQ0/F4LMVAjmjUEtV2MkUnsSZamj62da UjOZDipAou5C9cGAxXB8asiJhmXbwM01tdrD+h/TVAAfS3tyubxhkcrrV8PxJjr0 SuHikqSN5Gdn5re8h01SAX0ouzmv+KAMTUzIKeCxKgEbFZi417kVHXpBRibVy9HS z8SfCAQFRqI6tXez9OMD4fszfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO17x3xl /5akItl5a2RoZS8un3jFMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Z+XrkRGf8jsfyWhOCUusxJ7ijIQCk8GZd/q6TofBNfCVkl4c2Ur2 X/FzMiWsurgU6jQ1wcs2aY12JbH2s0Ctz+ASv92n6+D9Rbz6xSCs8p3n7BcdeWmY MGkLzxoRdOEu4jO3Ks/SzYCSzrvF0XkBxc4EY+MfFxmZBqweBH/LFfrCA0VN9IO1 triTXuOEmcubI3qlxM4MJKANMwnDRZJ9MuHge+Ingaw9bIACvi3fzjmbnEEfJx+y 0Jh5rwsnhs26NsR2ZrWAsZ2t2OKVhfLj6x/ubnIvtEawsZ3hcSqzofRLoiuzeIDx RI1OFFVjLX5dbfVFn5JxsdLj1RjrVFk9 -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:18 2025 by rpki-client