$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: F/Z0TWMP30wCyeoKYUp/1eLzTT7lqsKEgW7XFqhesOk= Subject key identifier: D3:E1:42:E0:D9:6D:60:26:C6:EA:98:C3:0C:07:1F:74:79:EC:9A:B7 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: EB Signing time: Mon 03 Nov 2025 05:21:07 +0000 Manifest this update: Mon 03 Nov 2025 05:21:06 +0000 Manifest next update: Mon 10 Nov 2025 05:21:06 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: ZvOFXvIBsgC5eFGsju+13Ty74nLIHcseBCz7NHPltK4=) 2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Nov 3 05:21:06 2025 GMT Not After : Nov 10 05:21:06 2025 GMT Subject: CN=69083bc3-affb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:7e:6f:0f:6c:d3:07:0a:26:c5:e9:43:ef: 7a:66:ac:7f:df:c2:22:7d:95:6b:43:10:fd:f0:f5: 9b:fe:81:1a:a3:5e:40:13:c9:ab:04:d6:21:10:be: 25:e1:f5:a3:e0:ce:4f:84:a6:50:c8:9f:17:b1:4a: 8e:c8:fa:71:5f:56:91:6c:1d:b9:fa:92:0e:20:0a: 62:d3:29:a3:46:b7:5e:b4:da:b0:3b:64:50:cd:f6: 63:37:4c:80:db:0c:96:90:0b:21:95:9f:19:3a:70: a9:a8:f6:8e:fb:7b:b4:94:51:dc:39:48:0b:15:39: e2:87:1d:37:b8:4e:7d:aa:87:a8:a3:40:81:7b:70: 18:d7:a5:ed:7a:68:f0:97:03:be:c7:54:f4:a6:bb: da:7a:93:b2:52:a4:46:ca:92:1d:a4:52:44:f7:d9: cb:7e:98:34:51:27:ec:7a:f3:89:cf:cd:f3:02:9e: 99:f1:e0:32:15:99:f7:d1:b1:b5:5b:99:4b:11:3d: 6a:b3:ba:41:52:17:d9:01:bd:cc:ac:c3:9c:4f:0d: 5c:02:7e:6b:9e:e8:4e:37:6a:4e:4a:e2:70:ea:0a: c4:b4:26:b6:8e:7a:02:54:e6:4f:0c:0f:c3:6e:a2: 26:18:cc:69:68:fb:0b:5a:21:4f:27:ad:f0:e9:37: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:42:E0:D9:6D:60:26:C6:EA:98:C3:0C:07:1F:74:79:EC:9A:B7 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5b:bc:a3:da:d0:4a:78:a7:d2:88:37:02:17:43:59:48:70: 99:c7:3f:2b:39:dd:b2:4a:94:1d:38:1b:f0:d9:cf:a8:62:ee: b4:3d:f1:be:df:80:cb:d1:55:83:1b:5d:90:ac:c8:dc:dc:8d: 82:f9:d8:7a:00:0e:4d:5b:ad:f1:86:75:da:93:5f:69:2a:e0: 90:dc:bc:36:dd:6f:da:40:e0:7a:26:bf:07:89:74:77:0e:bb: 9d:c2:df:e7:bb:01:3f:9d:ce:67:86:32:7a:95:29:7d:5d:01: 0b:cb:f4:8b:86:ac:f3:56:e3:c2:d8:db:76:58:50:59:e0:36: f3:67:12:f4:81:ba:7d:8b:3b:eb:bb:ce:ae:43:b8:b6:e5:43: 42:4b:fe:60:62:19:3d:5e:52:27:d2:61:32:4d:0f:c3:e4:50: 49:d3:e0:4b:86:4f:9d:92:72:20:94:e2:c7:a4:18:c6:0e:35: 0f:75:75:db:fd:7f:e2:2a:69:a2:5d:b6:35:9a:91:b8:ed:20: 03:ef:75:a1:11:26:9d:98:52:a9:7a:8b:39:b5:62:86:67:0b: b1:85:34:9e:8e:20:41:2f:4e:c5:81:00:c5:79:cd:07:46:c6: 25:95:a5:22:5d:e2:73:68:0b:9a:78:75:15:09:86:d9:4c:ea: f4:2e:e8:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUxMTAzMDUyMTA2WhcNMjUxMTEwMDUyMTA2WjAYMRYwFAYD VQQDEw02OTA4M2JjMy1hZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6J+bw9s0wcKJsXpQ+96Zqx/38IifZVrQxD98PWb/oEao15AE8mrBNYhEL4l 4fWj4M5PhKZQyJ8XsUqOyPpxX1aRbB25+pIOIApi0ymjRrdetNqwO2RQzfZjN0yA 2wyWkAshlZ8ZOnCpqPaO+3u0lFHcOUgLFTnihx03uE59qoeoo0CBe3AY16Xtemjw lwO+x1T0prvaepOyUqRGypIdpFJE99nLfpg0USfsevOJz83zAp6Z8eAyFZn30bG1 W5lLET1qs7pBUhfZAb3MrMOcTw1cAn5rnuhON2pOSuJw6grEtCa2jnoCVOZPDA/D bqImGMxpaPsLWiFPJ63w6Te1VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPhQuDZ bWAmxuqYwwwHH3R57Jq3MB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/W7yj2tBKeKfSiDcCF0NZSHCZxz8rOd2ySpQdOBvw2c+oYu60PfG+ 34DL0VWDG12QrMjc3I2C+dh6AA5NW63xhnXak19pKuCQ3Lw23W/aQOB6Jr8HiXR3 Drudwt/nuwE/nc5nhjJ6lSl9XQELy/SLhqzzVuPC2Nt2WFBZ4DbzZxL0gbp9izvr u86uQ7i25UNCS/5gYhk9XlIn0mEyTQ/D5FBJ0+BLhk+dknIglOLHpBjGDjUPdXXb /X/iKmmiXbY1mpG47SAD73WhESadmFKpeos5tWKGZwuxhTSejiBBL07FgQDFec0H RsYllaUiXeJzaAuaeHUVCYbZTOr0Luhn -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:15 2025 by rpki-client