$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft File: J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft (raw, json) Hash identifier: feXLDIM8a6wuBbmvWwZISG12v3XaRjcDmRg0S8tV9Uk= Subject key identifier: 26:25:BE:48:DD:33:DD:50:CB:CA:1E:D5:4A:00:CA:9D:43:B7:85:7C Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95 Certificate issuer: /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft Manifest number: 022D Signing time: Wed 05 Nov 2025 02:03:24 +0000 Manifest this update: Wed 05 Nov 2025 02:03:23 +0000 Manifest next update: Wed 12 Nov 2025 02:03:23 +0000 Files and hashes: 1: J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl (hash: 1EAlkM3J1aBP2TXhZwqD2PV8cSa6x8VB97XfwctcrcI=) 2: 35C34054633911ED97F86846C4F9AE02.roa (hash: j9opGfbttUeCxSnD6dInpPsqFcL3+tDfpef/BimCS4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F55C, serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195 Validity Not Before: Nov 5 02:03:23 2025 GMT Not After : Nov 12 02:03:23 2025 GMT Subject: CN=690ab06c-0c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:68:12:19:b5:bc:5d:2b:40:f6:0c:96:d6: 76:5f:06:88:91:bc:ce:80:40:27:c6:78:1f:a0:c3: 5c:25:49:cb:10:f9:c7:6b:a6:db:70:8a:94:0c:16: 5a:b8:ac:e3:30:6e:54:60:8b:92:92:77:98:fc:59: 30:02:41:6b:87:af:06:fb:5e:9e:a6:7c:80:b8:dc: 70:8c:74:62:92:20:cd:68:f7:8d:a8:3e:f2:49:e7: e1:0b:d7:ba:bb:9b:9e:14:e6:68:16:5c:16:83:10: f3:d1:89:44:9b:62:f2:c1:3f:9a:83:37:9a:fd:22: 4e:69:b8:3c:ac:0b:27:9d:c6:d0:82:6a:00:ae:a4: fa:87:34:5e:69:cf:16:dd:8c:ba:3c:47:6d:42:4b: 5b:48:17:a8:93:ca:32:50:b7:f5:5a:ac:ff:d9:40: da:4a:d2:18:54:47:6e:17:71:42:f8:91:56:84:73: d5:3b:2d:ac:bd:9b:6d:92:39:49:3d:33:74:74:b2: 7a:1b:b8:c1:f3:56:23:50:e7:8a:79:2b:f7:2c:34: fc:6a:cc:61:c6:af:17:67:f6:7c:d0:00:1c:70:90: ee:9e:ba:6c:3b:34:25:68:b4:d8:c4:b0:e2:24:7f: 00:ee:af:fc:b3:f5:36:df:9d:6e:10:2b:7f:5a:54: 8b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:BE:48:DD:33:DD:50:CB:CA:1E:D5:4A:00:CA:9D:43:B7:85:7C X509v3 Authority Key Identifier: keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:77:22:45:ab:35:e9:1c:d5:24:40:dd:25:aa:bf:4b:8a:9e: 22:2a:05:7a:a6:4d:db:54:35:14:9c:c7:52:a2:3a:d7:13:9a: d8:c4:ee:ac:dd:20:60:81:54:32:49:10:c0:ed:6b:c9:87:9a: c0:b4:fe:73:a8:3f:45:73:c3:2e:a1:b5:74:70:0b:61:e8:ee: 72:71:a1:aa:1a:20:f1:1b:24:cb:7e:fe:0e:89:c3:a3:d7:6e: ad:5a:01:be:3b:69:4e:14:76:2a:90:bd:a9:0c:a7:fe:78:06: ca:1c:1e:89:ac:df:7c:4f:4b:04:f0:53:f8:de:67:a0:7c:fa: cb:f0:00:3c:9f:dd:0b:1f:34:30:dd:a4:6a:c9:c0:11:34:3b: da:74:ff:fe:d4:41:cf:d7:4f:23:59:d8:e6:bb:d4:c3:9e:e1: 37:b3:60:5c:57:1f:25:48:04:bc:4a:57:82:e1:f8:6f:88:63: 6a:bd:c5:a2:70:49:91:55:6b:69:ea:1e:f9:50:16:c4:7c:ad: 72:ae:88:e5:59:5a:f5:a0:53:1d:e9:a6:ae:a4:b6:a3:53:fc: c7:3d:60:62:a7:18:24:8f:e9:60:5c:16:91:ba:dd:8b:cf:bf: ab:b8:a9:16:4d:fd:ed:ff:bc:0b:de:8b:c3:c9:19:48:75:e8: e2:de:9b:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1NUMxMTAvBgNVBAUTKDI3REEwMDU0Q0ZCQUIzRTNEQjA2M0ZDMjNEMzM1QjM3 Qjg5RTQxOTUwHhcNMjUxMTA1MDIwMzIzWhcNMjUxMTEyMDIwMzIzWjAYMRYwFAYD VQQDEw02OTBhYjA2Yy0wYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIpoEhm1vF0rQPYMltZ2XwaIkbzOgEAnxngfoMNcJUnLEPnHa6bbcIqUDBZa uKzjMG5UYIuSkneY/FkwAkFrh68G+16epnyAuNxwjHRikiDNaPeNqD7ySefhC9e6 u5ueFOZoFlwWgxDz0YlEm2LywT+agzea/SJOabg8rAsnncbQgmoArqT6hzReac8W 3Yy6PEdtQktbSBeok8oyULf1Wqz/2UDaStIYVEduF3FC+JFWhHPVOy2svZttkjlJ PTN0dLJ6G7jB81YjUOeKeSv3LDT8asxhxq8XZ/Z80AAccJDunrpsOzQlaLTYxLDi JH8A7q/8s/U2351uECt/WlSLZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYlvkjd M91Qy8oe1UoAyp1Dt4V8MB8GA1UdIwQYMBaAFCfaAFTPurPj2wY/wj0zWze4nkGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU1Qy8zNDk4MDBCRTYz MzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMtUGJCal9DUFROYk43aWVR WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5b0FWTS02cy1QYkJqX0NQVE5iTjdpZVFaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU1Qy8zNDk4MDBCRTYzMzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMt UGJCal9DUFROYk43aWVRWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEdyJFqzXpHNUkQN0lqr9Lip4iKgV6pk3bVDUUnMdSojrXE5rYxO6s 3SBggVQySRDA7WvJh5rAtP5zqD9Fc8MuobV0cAth6O5ycaGqGiDxGyTLfv4OicOj 126tWgG+O2lOFHYqkL2pDKf+eAbKHB6JrN98T0sE8FP43megfPrL8AA8n90LHzQw 3aRqycARNDvadP/+1EHP108jWdjmu9TDnuE3s2BcVx8lSAS8SleC4fhviGNqvcWi cEmRVWtp6h75UBbEfK1yrojlWVr1oFMd6aaupLajU/zHPWBipxgkj+lgXBaRut2L z7+ruKkWTf3t/7wL3ovDyRlIdeji3puc -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:10 2025 by rpki-client