$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft File: j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json) Hash identifier: v44Z58ZI8Qr2K+YjLhG/7YNES/SJIiGDBP7yAPx+Y8c= Subject key identifier: 95:C5:E0:1D:9D:C4:1A:40:38:30:41:8E:44:32:3D:2D:FB:B5:10:2F Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9 Certificate issuer: /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft Manifest number: 02E9 Signing time: Mon 03 Nov 2025 01:13:50 +0000 Manifest this update: Mon 03 Nov 2025 01:13:49 +0000 Manifest next update: Mon 10 Nov 2025 01:13:49 +0000 Files and hashes: 1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: jMPzpZ6iwt1klJic9OYPaGT9cWYBg37q3Z3iSJnE/ko=) 2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: UP0rzzGm1RNNAwSNVW6RQ9A/3hrn3jElJIPxPVvX0ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9 Validity Not Before: Nov 3 01:13:49 2025 GMT Not After : Nov 10 01:13:49 2025 GMT Subject: CN=690801cd-405c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:6d:8a:ce:93:01:a5:d8:c2:e2:ee:d6:fa: 67:23:05:64:1d:c7:bb:94:1f:8e:1a:ef:3b:26:18: 01:9b:e8:2e:f8:30:09:61:e6:fc:b3:04:9a:f9:9c: c5:5b:63:b7:3e:b1:43:68:de:52:3d:4e:78:39:bf: e2:0d:93:f3:09:f2:7a:f6:55:08:25:39:ad:90:42: e9:7e:5a:c0:1b:44:8e:9b:7a:63:95:95:5f:e4:0d: 65:d0:c3:1b:c9:c1:3d:f1:bc:99:13:fc:ab:97:80: c4:6d:45:f8:90:28:85:c8:6f:a4:26:a7:89:b7:ef: b8:93:ce:22:9d:b8:f6:8a:5a:50:24:b4:64:ad:5c: 88:a5:a3:b3:5a:bf:e5:fd:f7:b5:5f:ac:2c:f8:19: 1e:52:ff:7c:89:f4:6c:e2:7c:16:08:43:06:db:5e: d5:a8:5d:23:14:fc:89:68:ad:70:ec:cb:a4:80:53: d9:e3:2f:2a:6c:99:bf:3a:ca:2f:e2:36:7d:32:09: c1:52:f6:5f:2c:70:16:05:d9:6c:a5:15:f8:96:a3: f1:eb:72:78:79:1b:83:fc:39:96:a6:6d:f4:9d:eb: dc:1a:9c:b3:ef:1c:ab:8a:c4:ec:b5:58:87:bb:b3: ad:36:b2:fd:65:fa:ac:18:6a:be:fd:6a:2d:07:b8: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:E0:1D:9D:C4:1A:40:38:30:41:8E:44:32:3D:2D:FB:B5:10:2F X509v3 Authority Key Identifier: keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:68:b7:16:08:70:73:a8:be:d7:fd:b5:cb:29:ca:eb:28:1d: ff:a7:04:1f:05:68:1b:b3:75:1a:dd:bb:5a:0d:d3:b8:74:c5: 22:0e:c8:7f:db:f2:98:4e:b2:7e:4f:7b:9d:b2:31:bc:de:e3: 54:91:02:71:a9:4f:18:bf:4d:89:47:6f:1b:ed:60:a5:62:4d: bb:3d:82:b9:fb:a2:df:da:0a:49:aa:8f:5e:39:b6:1a:5e:d9: 24:23:5b:a0:be:75:1b:66:41:fd:0d:df:a4:2b:c3:82:b7:4d: a1:11:b8:05:02:44:c2:76:d5:fa:d0:09:b7:e4:bd:da:0e:61: 27:c4:16:03:00:1e:a6:31:8e:54:38:21:08:08:30:0c:4f:97: 49:ce:7b:1e:31:6c:c3:f4:f9:7a:4f:df:39:62:3e:db:f1:f4: 31:29:33:c3:01:27:1b:6f:8c:35:d6:b7:90:0c:73:6c:93:de: 62:8c:bb:76:f2:30:50:73:c3:fe:b1:e2:59:c3:92:02:f1:dc: 2f:71:67:8b:35:32:b4:5f:11:72:ea:3d:fc:39:e1:79:9d:50: 7c:5b:7b:31:40:95:77:ea:34:5a:50:ac:4a:9d:86:39:5f:79: 62:9d:85:13:98:cf:12:39:c8:36:c6:d6:1b:64:fb:7f:f9:92: 87:9a:ee:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ0QTQxMTAvBgNVBAUTKDhGQzY2MUExOTMzMkFFODY0QkM4NzkwMDc0NERBMzM3 RjlBNzAwQTkwHhcNMjUxMTAzMDExMzQ5WhcNMjUxMTEwMDExMzQ5WjAYMRYwFAYD VQQDEw02OTA4MDFjZC00MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyZtis6TAaXYwuLu1vpnIwVkHce7lB+OGu87JhgBm+gu+DAJYeb8swSa+ZzF W2O3PrFDaN5SPU54Ob/iDZPzCfJ69lUIJTmtkELpflrAG0SOm3pjlZVf5A1l0MMb ycE98byZE/yrl4DEbUX4kCiFyG+kJqeJt++4k84inbj2ilpQJLRkrVyIpaOzWr/l /fe1X6ws+BkeUv98ifRs4nwWCEMG217VqF0jFPyJaK1w7MukgFPZ4y8qbJm/Osov 4jZ9MgnBUvZfLHAWBdlspRX4lqPx63J4eRuD/DmWpm30nevcGpyz7xyrisTstViH u7OtNrL9ZfqsGGq+/WotB7iLYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXF4B2d xBpAODBBjkQyPS37tRAvMB8GA1UdIwQYMBaAFI/GYaGTMq6GS8h5AHRNozf5pwCp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDRBNC8yRDIzQTRDQzAy MDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJvWkx5SGtBZEUyak5fbW5B S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o4WmhvWk15cm9aTHlIa0FkRTJqTl9tbkFLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDRBNC8yRDIzQTRDQzAyMDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJv Wkx5SGtBZEUyak5fbW5BS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBaLcWCHBzqL7X/bXLKcrrKB3/pwQfBWgbs3Ua3btaDdO4dMUiDsh/ 2/KYTrJ+T3udsjG83uNUkQJxqU8Yv02JR28b7WClYk27PYK5+6Lf2gpJqo9eObYa XtkkI1ugvnUbZkH9Dd+kK8OCt02hEbgFAkTCdtX60Am35L3aDmEnxBYDAB6mMY5U OCEICDAMT5dJznseMWzD9Pl6T985Yj7b8fQxKTPDAScbb4w11reQDHNsk95ijLt2 8jBQc8P+seJZw5IC8dwvcWeLNTK0XxFy6j38OeF5nVB8W3sxQJV36jRaUKxKnYY5 X3linYUTmM8SOcg2xtYbZPt/+ZKHmu6x -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:10 2025 by rpki-client