$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: MzocHqs6urRA32SLLm58GrOdyLZaeiz4CepbfN5b1dE= Subject key identifier: 3E:B6:F1:E7:E1:CF:32:6B:27:E7:0E:FD:E9:90:14:0D:28:8E:B9:E0 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 05EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 05E9 Signing time: Sun 02 Nov 2025 22:57:38 +0000 Manifest this update: Sun 02 Nov 2025 22:57:37 +0000 Manifest next update: Sun 09 Nov 2025 22:57:37 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: StMAe6yKnCEa5Q9RR8eElrFTgzuixFnbuDezH8SiKag=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1518 (0x5ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Nov 2 22:57:37 2025 GMT Not After : Nov 9 22:57:37 2025 GMT Subject: CN=6907e1e2-8c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:7c:05:fd:69:66:06:e8:18:8a:16:ad:7b: fb:32:20:10:17:5e:09:79:21:59:a1:39:77:d0:da: 46:40:ab:91:07:ab:97:60:8b:40:82:5e:28:f7:3b: 0f:bc:47:fd:08:6f:c0:9a:2c:95:f8:15:8a:7d:99: 19:a6:f5:14:ce:ab:83:91:1c:f2:72:d0:04:57:e3: a4:3a:bf:4f:5e:72:5e:d3:d7:39:de:d0:3f:e5:5e: 07:02:f5:af:80:92:5b:c7:8d:be:66:ab:0e:15:0e: 26:21:24:1a:69:7b:4b:3f:4d:6b:dc:72:0d:76:91: 1b:66:1c:1c:8c:79:21:ab:27:0e:cf:a8:5d:f6:2d: ee:de:cc:fc:66:68:56:e0:59:f6:11:8f:94:c7:fa: 27:1d:41:d2:a4:35:bf:91:cf:98:2f:5f:65:bf:3a: 0f:6a:fd:57:a6:98:f3:85:0b:fb:8f:ce:e1:da:8a: 41:fd:bc:93:e8:15:1c:42:93:0f:0b:5b:cb:6a:38: d9:87:35:23:b5:0b:88:99:86:38:ab:e4:b4:9b:c7: d1:d0:81:b6:f4:14:db:b9:b0:52:6c:3c:f8:32:af: 82:86:5a:da:59:55:69:a4:14:d5:fe:56:f2:da:cf: f6:2d:c3:1c:ee:db:d2:c8:eb:89:cc:12:25:13:f9: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:F1:E7:E1:CF:32:6B:27:E7:0E:FD:E9:90:14:0D:28:8E:B9:E0 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:32:04:d5:f5:43:a6:86:7f:a2:ff:2a:7f:b4:2e:aa:e5:7f: 4d:18:00:1a:2f:72:1e:4b:43:3e:2c:3a:77:f0:91:17:82:57: b0:c8:a9:77:d1:61:fd:db:69:75:9a:f2:2f:63:d4:38:39:3e: c7:55:e8:50:5d:e9:65:dc:d1:d4:95:be:af:1f:3c:f7:ea:f0: 34:a6:79:30:f1:0d:a5:5f:78:38:a8:5b:da:b1:78:1f:65:a0: 00:60:c3:d3:5e:33:c1:af:a7:0b:52:18:e4:ed:bd:96:c6:4c: 4e:b7:28:f6:be:d6:20:fc:b1:8c:e2:0c:1d:35:d5:af:d5:97: 86:75:6d:a8:28:1a:a6:3e:80:fc:69:53:21:bc:c1:84:52:b6: 74:8d:75:38:e1:96:58:bf:9d:90:b7:41:6d:85:aa:a3:55:78: ba:05:90:df:b8:08:3c:41:29:16:34:93:07:e3:45:3f:38:8d: 43:2f:85:ed:cf:40:50:62:2b:80:a0:6f:99:d5:8b:92:02:dc: 80:b2:14:a5:0d:7f:f3:d3:17:11:34:09:0a:50:19:8a:2f:eb: e1:7f:89:d0:6f:80:8f:43:45:4a:fe:30:cd:0e:2f:c6:17:67: 42:e5:f0:c0:31:f5:e4:16:ea:45:74:04:8f:9f:56:60:12:a3: f4:9d:77:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjUxMTAyMjI1NzM3WhcNMjUxMTA5MjI1NzM3WjAYMRYwFAYD VQQDEw02OTA3ZTFlMi04YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybt8Bf1pZgboGIoWrXv7MiAQF14JeSFZoTl30NpGQKuRB6uXYItAgl4o9zsP vEf9CG/AmiyV+BWKfZkZpvUUzquDkRzyctAEV+OkOr9PXnJe09c53tA/5V4HAvWv gJJbx42+ZqsOFQ4mISQaaXtLP01r3HINdpEbZhwcjHkhqycOz6hd9i3u3sz8ZmhW 4Fn2EY+Ux/onHUHSpDW/kc+YL19lvzoPav1XppjzhQv7j87h2opB/byT6BUcQpMP C1vLajjZhzUjtQuImYY4q+S0m8fR0IG29BTbubBSbDz4Mq+ChlraWVVppBTV/lby 2s/2LcMc7tvSyOuJzBIlE/mOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD628efh zzJrJ+cO/emQFA0ojrngMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrMgTV9UOmhn+i/yp/tC6q5X9NGAAaL3IeS0M+LDp38JEXglewyKl3 0WH922l1mvIvY9Q4OT7HVehQXell3NHUlb6vHzz36vA0pnkw8Q2lX3g4qFvasXgf ZaAAYMPTXjPBr6cLUhjk7b2WxkxOtyj2vtYg/LGM4gwdNdWv1ZeGdW2oKBqmPoD8 aVMhvMGEUrZ0jXU44ZZYv52Qt0FthaqjVXi6BZDfuAg8QSkWNJMH40U/OI1DL4Xt z0BQYiuAoG+Z1YuSAtyAshSlDX/z0xcRNAkKUBmKL+vhf4nQb4CPQ0VK/jDNDi/G F2dC5fDAMfXkFupFdASPn1ZgEqP0nXcd -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:26 2025 by rpki-client