$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: jCVfoZ3krlI5mznGk4KldLEjQq56nvTCFq9m4uGpT+k= Subject key identifier: E1:FF:80:69:8C:52:DB:74:CD:8C:C8:E8:2F:9E:EE:BC:0D:67:3C:96 Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 02CE Signing time: Mon 03 Nov 2025 01:19:05 +0000 Manifest this update: Mon 03 Nov 2025 01:19:04 +0000 Manifest next update: Mon 10 Nov 2025 01:19:04 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: NNks1pli+HvKhhQHQ7tRRwNHbmeFdAEdpMj30OCv1A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Nov 3 01:19:04 2025 GMT Not After : Nov 10 01:19:04 2025 GMT Subject: CN=69080308-a3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:15:a0:6c:83:e5:5d:62:2a:39:36:b6:86: 2c:5e:fc:72:24:93:d8:d8:c2:1f:55:0d:1c:f1:e3: dc:3c:b4:4c:89:5b:b3:e8:c6:ce:65:db:f7:a2:df: 91:14:d1:21:df:d5:af:13:2a:d3:a0:95:5a:ee:ce: 86:69:d5:bf:90:c3:ee:85:eb:19:86:67:4a:d4:61: e4:2f:1f:69:23:26:f9:cc:8d:22:65:7d:59:24:99: d3:f9:5e:f0:f3:75:ff:25:5a:72:9c:d3:a0:c7:f0: 85:6a:69:03:94:37:3f:6d:e7:09:50:9b:1f:8c:9d: 83:b9:c7:7d:da:59:2b:6b:0d:b6:58:2f:24:04:21: b1:2e:3a:cf:10:2f:0f:18:fd:24:46:d5:1a:25:0a: 49:96:d4:2c:f5:d0:98:fe:32:a1:39:2b:98:20:05: c8:b9:b7:97:73:62:32:17:6f:d1:58:dd:d3:fd:af: 3f:fd:4c:15:ef:6a:e9:84:b5:53:08:a0:a1:6b:bd: 2f:86:bc:f2:95:50:e1:7f:65:9b:9d:09:21:96:e3: 1d:98:21:e1:a2:94:2f:80:9a:42:6b:7e:e0:53:e1: e6:07:81:83:08:de:0c:63:8b:c8:32:10:e3:4d:a1: ac:20:45:3d:74:19:6a:5e:5d:63:98:79:69:9c:fe: f0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FF:80:69:8C:52:DB:74:CD:8C:C8:E8:2F:9E:EE:BC:0D:67:3C:96 X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:33:13:59:1b:4d:07:66:6f:9f:1b:99:c5:1d:58:f9:04:90: 6b:30:8b:89:57:9c:c1:cb:21:f1:11:2d:d9:64:0d:55:64:67: 94:6c:37:76:d6:cd:d0:0a:72:03:87:a0:b8:3f:61:18:03:7d: 5f:02:2e:23:6e:a8:f5:68:bb:ff:97:27:5d:de:24:32:68:9e: 48:1d:a9:70:de:27:15:ee:6f:de:56:fb:56:3e:94:24:a1:37: f6:05:9e:bd:78:ae:ed:03:9f:33:e5:9f:f2:ba:8f:8e:c0:e9: ba:31:e5:d0:da:59:af:c3:27:75:7c:ad:42:1f:46:d4:cb:74: e0:56:9f:6f:64:f5:22:07:a9:89:76:00:49:fc:73:1f:20:55: a5:49:9e:d3:84:c0:ae:bb:15:60:23:45:35:f5:33:39:f6:0f: f2:e6:5f:ab:65:05:a8:16:9b:df:f7:d4:da:52:7e:63:1f:7b: 40:b9:04:3e:79:8c:4c:f5:ff:55:96:ae:fa:d3:57:85:2f:e9: 74:35:b0:56:81:bf:37:26:cf:2d:d1:04:1b:44:81:d4:3a:60: b6:eb:03:de:06:51:b0:17:cf:82:54:b7:83:44:b0:f1:38:2e: 6b:8f:4b:1b:1e:21:d6:45:a5:75:54:6d:e4:46:d3:8b:80:6b: ac:11:90:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUxMTAzMDExOTA0WhcNMjUxMTEwMDExOTA0WjAYMRYwFAYD VQQDEw02OTA4MDMwOC1hM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmsVoGyD5V1iKjk2toYsXvxyJJPY2MIfVQ0c8ePcPLRMiVuz6MbOZdv3ot+R FNEh39WvEyrToJVa7s6GadW/kMPuhesZhmdK1GHkLx9pIyb5zI0iZX1ZJJnT+V7w 83X/JVpynNOgx/CFamkDlDc/becJUJsfjJ2Ducd92lkraw22WC8kBCGxLjrPEC8P GP0kRtUaJQpJltQs9dCY/jKhOSuYIAXIubeXc2IyF2/RWN3T/a8//UwV72rphLVT CKCha70vhrzylVDhf2WbnQkhluMdmCHhopQvgJpCa37gU+HmB4GDCN4MY4vIMhDj TaGsIEU9dBlqXl1jmHlpnP7wXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH/gGmM Utt0zYzI6C+e7rwNZzyWMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2MxNZG00HZm+fG5nFHVj5BJBrMIuJV5zByyHxES3ZZA1VZGeUbDd2 1s3QCnIDh6C4P2EYA31fAi4jbqj1aLv/lydd3iQyaJ5IHalw3icV7m/eVvtWPpQk oTf2BZ69eK7tA58z5Z/yuo+OwOm6MeXQ2lmvwyd1fK1CH0bUy3TgVp9vZPUiB6mJ dgBJ/HMfIFWlSZ7ThMCuuxVgI0U19TM59g/y5l+rZQWoFpvf99TaUn5jH3tAuQQ+ eYxM9f9Vlq7601eFL+l0NbBWgb83Js8t0QQbRIHUOmC26wPeBlGwF8+CVLeDRLDx OC5rj0sbHiHWRaV1VG3kRtOLgGusEZCy -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:56 2025 by rpki-client