$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: 9O2jz4HNUoe5GUCj7Wu3/tX4hnwaYMzMAIYPFF/3JSE= Subject key identifier: F1:C9:5D:DA:FF:2B:6C:F9:4E:8C:7E:B4:56:D3:B7:11:B9:94:A0:92 Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: 0132 Signing time: Wed 05 Nov 2025 04:45:02 +0000 Manifest this update: Wed 05 Nov 2025 04:45:01 +0000 Manifest next update: Wed 12 Nov 2025 04:45:01 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: TQKeSB+FImXAlII7xGf7IoKH+11mB0GE4OMDpe7jm3w=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: dc2h2jrx/pzY7NawNYOcmGXVTRsJnjaghC5xI/+fBaQ=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: M93I+sdFWlIBfdq9LG68VSm5ThgyN+STMXDJdl1g8Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Nov 5 04:45:01 2025 GMT Not After : Nov 12 04:45:01 2025 GMT Subject: CN=690ad64e-db4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:2e:34:42:30:80:e4:88:03:96:d7:aa:3c: 8a:cb:d4:93:40:20:e7:22:58:7b:38:81:8f:8f:c3: 6f:c4:a0:05:71:c5:72:d5:20:a5:bd:b7:03:22:38: db:46:39:28:c0:d5:0d:d5:67:0d:fb:9c:45:0e:19: ea:b6:20:2f:f3:e9:ff:55:e9:5f:8f:3f:6c:23:d2: 5a:2a:e1:74:76:eb:9f:77:b2:b6:9a:54:38:de:1d: 03:47:b4:84:40:d5:ef:76:88:5b:65:9d:cb:4a:46: 02:87:6e:2d:eb:10:1e:51:7a:bd:eb:6e:05:40:16: 0e:d7:df:73:85:5f:b5:93:19:cf:48:e1:ac:51:25: 3f:9b:b2:c5:b6:41:ac:66:4a:41:9e:f2:4d:a7:78: 99:f3:a0:0d:95:2d:99:4a:b8:56:96:9c:ee:ea:cf: 85:d6:5e:23:ca:d8:b9:03:50:27:cf:94:ba:52:0c: c9:a3:7f:7a:04:e2:d0:6b:ad:6c:4e:57:d5:de:45: f4:3e:a7:d0:c2:56:2b:81:d6:f9:1a:24:1c:9a:c0: 61:d7:38:bb:87:b2:83:8e:ba:4e:3b:c7:a8:d5:10: 52:d7:33:bf:fd:44:ed:bb:43:45:3f:7f:45:c1:cd: d8:40:63:eb:0a:e1:eb:e6:56:a5:d0:1c:36:b4:55: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C9:5D:DA:FF:2B:6C:F9:4E:8C:7E:B4:56:D3:B7:11:B9:94:A0:92 X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cb:76:f9:ef:98:93:ec:02:13:df:ec:af:1b:1e:44:5c:98: de:42:88:fb:f4:0c:6c:7b:7f:31:a4:e8:3f:a0:5b:54:82:b6: f8:ee:88:29:77:ea:d3:c8:52:4b:6d:ae:4d:2c:3e:74:ad:b6: 88:cf:f5:90:94:6c:56:c9:6b:32:7f:10:d5:41:f3:6e:19:b0: 29:c0:59:92:e1:4a:e0:e4:ed:b5:45:36:92:5a:7c:56:14:45: ef:b3:e2:a4:ab:d7:8d:0a:9f:27:e3:1f:b6:08:bd:e3:6b:6e: 3c:eb:d9:fc:40:c4:0b:27:b4:98:53:f3:d7:fe:79:84:86:4e: 13:fe:f2:49:92:34:56:0b:cf:d2:89:cb:c6:b1:b7:ba:c0:78: 29:05:4d:43:1f:3a:31:1f:e0:18:6a:0d:34:9e:17:c8:3c:bd: a4:88:15:a7:1e:3d:1c:ae:6a:d4:c8:4d:20:10:0b:5a:48:e8: f4:4c:45:c7:b7:a1:3d:e9:98:c9:8a:66:0a:0e:82:27:6d:51: 34:77:71:4d:0b:5a:78:a6:38:8d:f0:19:ea:31:0c:68:00:fb: 2d:ae:45:70:b0:40:82:5b:d1:56:26:d4:b7:92:f8:b2:a4:54: 0b:54:19:28:e3:75:17:31:27:e0:a8:dd:13:43:67:49:a7:c1: 2d:9a:2c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUxMTA1MDQ0NTAxWhcNMjUxMTEyMDQ0NTAxWjAYMRYwFAYD VQQDEw02OTBhZDY0ZS1kYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPQuNEIwgOSIA5bXqjyKy9STQCDnIlh7OIGPj8NvxKAFccVy1SClvbcDIjjb RjkowNUN1WcN+5xFDhnqtiAv8+n/Velfjz9sI9JaKuF0duufd7K2mlQ43h0DR7SE QNXvdohbZZ3LSkYCh24t6xAeUXq9624FQBYO199zhV+1kxnPSOGsUSU/m7LFtkGs ZkpBnvJNp3iZ86ANlS2ZSrhWlpzu6s+F1l4jyti5A1Anz5S6UgzJo396BOLQa61s TlfV3kX0PqfQwlYrgdb5GiQcmsBh1zi7h7KDjrpOO8eo1RBS1zO//UTtu0NFP39F wc3YQGPrCuHr5lal0Bw2tFU+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHJXdr/ K2z5Tox+tFbTtxG5lKCSMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJy3b575iT7AIT3+yvGx5EXJjeQoj79Axse38xpOg/oFtUgrb47ogp d+rTyFJLba5NLD50rbaIz/WQlGxWyWsyfxDVQfNuGbApwFmS4Urg5O21RTaSWnxW FEXvs+Kkq9eNCp8n4x+2CL3ja24869n8QMQLJ7SYU/PX/nmEhk4T/vJJkjRWC8/S icvGsbe6wHgpBU1DHzoxH+AYag00nhfIPL2kiBWnHj0crmrUyE0gEAtaSOj0TEXH t6E96ZjJimYKDoInbVE0d3FNC1p4pjiN8BnqMQxoAPstrkVwsECCW9FWJtS3kviy pFQLVBko43UXMSfgqN0TQ2dJp8EtmixS -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:46 2025 by rpki-client