$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: obvPtGLPjf77GMGOotyn1j4fIgcGBZBVPmSfmcq59og= Subject key identifier: 37:D2:1A:9C:81:8B:69:B1:68:E1:0B:61:9A:99:5E:AA:69:D5:41:90 Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: DA Signing time: Mon 03 Nov 2025 05:40:15 +0000 Manifest this update: Mon 03 Nov 2025 05:40:14 +0000 Manifest next update: Mon 10 Nov 2025 05:40:14 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: wkBsk77A1grLneSDmK+zS0Et3ix7pBDHeJnZfEnyW90=) 2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: 4/6lX4NZ27z+xN3FhA2YCKR5609eVbF1fWeCrdQJGAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Nov 3 05:40:14 2025 GMT Not After : Nov 10 05:40:14 2025 GMT Subject: CN=6908403f-fab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:d8:21:7c:c5:35:14:2a:9a:15:1b:1c:bc: 7c:e2:12:0b:0a:a8:00:d2:a8:4f:47:ce:ad:96:91: 72:29:7c:15:3c:35:86:c8:e1:a9:24:ce:9a:c1:9d: f6:d5:c1:04:59:5c:c5:52:4b:b3:c1:99:26:87:e6: d6:b3:83:5e:cc:c1:7a:bc:a5:99:5c:98:4b:c1:8d: ba:1d:3e:d5:ae:57:78:1e:d8:bc:9a:39:b7:6e:60: 53:1b:e1:57:2b:6b:4b:d3:34:ab:19:e3:14:61:a6: 96:66:5f:64:08:7b:cf:52:38:26:26:c4:a4:b0:e5: 46:69:3e:04:56:84:ae:52:f6:57:f6:66:39:84:87: e2:4b:c1:ec:58:bc:c8:0e:28:f3:e6:93:fe:3b:3f: 10:59:92:3b:52:04:a2:33:c0:b2:b8:9f:8f:27:16: 54:c6:98:65:51:51:ed:d1:39:59:2e:5e:cc:0a:42: cc:43:cd:e0:40:47:4f:d8:85:cd:ea:ab:6c:53:2e: 9f:38:33:4b:7f:db:81:b7:7c:46:7e:5a:37:4f:2f: 83:4f:00:06:d2:b2:98:e8:e9:87:b3:b9:a7:0e:3b: 78:cf:d8:85:f4:8b:89:52:40:f8:c7:8f:1d:2e:fa: 90:57:fe:1e:8a:45:08:4c:82:1a:95:ca:c0:ea:6d: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D2:1A:9C:81:8B:69:B1:68:E1:0B:61:9A:99:5E:AA:69:D5:41:90 X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:58:b1:7c:ee:72:3f:26:28:aa:16:76:ea:b6:e1:68:17:56: 99:5a:af:d7:4b:d3:9c:4f:1e:38:a2:97:c8:f1:13:98:e9:2a: 6e:35:45:04:15:0a:a9:dc:ee:f5:2a:65:d2:f0:83:63:b8:d7: 91:e4:4f:54:6e:8f:bb:ff:13:c0:76:52:0c:a5:45:68:a7:b1: c8:02:d5:51:2e:c8:c1:13:2d:2b:9d:b2:1e:bc:13:f5:e8:07: 0a:f5:f0:1b:b6:33:fa:3f:56:1a:25:e4:59:4d:73:68:09:ee: 12:08:c1:1f:3c:b7:d1:b5:fd:82:97:8b:ce:9c:2d:e4:ca:89: 06:23:87:73:7c:b2:19:11:f4:06:e3:d3:00:cc:4f:9a:99:fc: 62:0e:11:8f:bd:d2:17:f8:38:cd:a8:64:57:76:81:65:db:1b: 67:cb:57:98:f7:31:e8:3c:44:a6:90:8d:34:f3:cf:f6:e7:f9: 78:3f:eb:5a:9f:f3:6f:7b:a3:ea:19:ab:be:47:13:a2:9c:94: 70:20:50:8d:45:1b:e2:c8:bb:d2:e3:3f:2f:be:83:0a:ce:d1: 8d:00:84:1b:bb:bc:60:28:67:11:56:2f:c4:00:d7:e1:da:29: 66:5a:54:78:93:33:da:f5:16:d6:de:a6:0c:a7:00:14:7f:63: 22:ab:a1:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjUxMTAzMDU0MDE0WhcNMjUxMTEwMDU0MDE0WjAYMRYwFAYD VQQDEw02OTA4NDAzZi1mYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs73YIXzFNRQqmhUbHLx84hILCqgA0qhPR86tlpFyKXwVPDWGyOGpJM6awZ32 1cEEWVzFUkuzwZkmh+bWs4NezMF6vKWZXJhLwY26HT7Vrld4Hti8mjm3bmBTG+FX K2tL0zSrGeMUYaaWZl9kCHvPUjgmJsSksOVGaT4EVoSuUvZX9mY5hIfiS8HsWLzI Dijz5pP+Oz8QWZI7UgSiM8CyuJ+PJxZUxphlUVHt0TlZLl7MCkLMQ83gQEdP2IXN 6qtsUy6fODNLf9uBt3xGflo3Ty+DTwAG0rKY6OmHs7mnDjt4z9iF9IuJUkD4x48d LvqQV/4eikUITIIalcrA6m17UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfSGpyB i2mxaOELYZqZXqpp1UGQMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzWLF87nI/JiiqFnbqtuFoF1aZWq/XS9OcTx44opfI8ROY6SpuNUUE FQqp3O71KmXS8INjuNeR5E9Ubo+7/xPAdlIMpUVop7HIAtVRLsjBEy0rnbIevBP1 6AcK9fAbtjP6P1YaJeRZTXNoCe4SCMEfPLfRtf2Cl4vOnC3kyokGI4dzfLIZEfQG 49MAzE+amfxiDhGPvdIX+DjNqGRXdoFl2xtny1eY9zHoPESmkI0088/25/l4P+ta n/Nve6PqGau+RxOinJRwIFCNRRviyLvS4z8vvoMKztGNAIQbu7xgKGcRVi/EANfh 2ilmWlR4kzPa9RbW3qYMpwAUf2Miq6Gr -----END CERTIFICATE-----Generated at Wed Nov 5 00:47:10 2025 by rpki-client