$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: /iX+WA4YEzZhrCf/5o4IEPpeE9iRd6Sz4X010Z7PQEE= Subject key identifier: F0:A0:03:6B:5E:C6:CD:12:1E:84:96:86:C7:39:FA:9F:11:C3:05:C3 Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0B54 Signing time: Tue 04 Nov 2025 19:16:25 +0000 Manifest this update: Tue 04 Nov 2025 19:16:24 +0000 Manifest next update: Tue 11 Nov 2025 19:16:24 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: Oxiff9NwTXA81g8LBlrjWGETi3XMHlhChR+Fj6TGmek=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: IB+34xalro/jHkO5e293QU71HFEZbQKkc7BC3RGNr7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: Nov 4 19:16:24 2025 GMT Not After : Nov 11 19:16:24 2025 GMT Subject: CN=690a5109-3dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:59:18:dd:b8:2b:79:14:fc:49:9c:ea:27: f6:7b:e2:11:ea:5d:da:4d:38:49:f7:74:99:77:0c: 9e:be:83:ac:7a:50:38:6b:c1:99:97:40:ca:2c:76: 02:62:fc:66:23:1b:7a:2e:1c:22:86:2b:c6:a5:2e: 0f:fb:5b:f2:02:07:83:4d:cc:2b:40:08:49:7d:6d: c9:76:de:df:a1:99:79:f8:99:f2:5e:7e:cb:03:aa: de:8c:aa:96:34:9e:de:bd:3b:31:b0:25:7c:93:e1: 3b:62:58:93:e2:3e:72:be:8f:70:42:49:68:20:07: 51:fa:c8:bf:0a:fd:bf:52:75:7b:c4:44:e7:b0:ac: 8c:f8:a0:c2:6a:8d:f7:28:96:3b:65:3e:29:a1:53: ba:7d:16:e6:79:5d:44:a8:d8:f4:7e:b5:04:31:23: a8:58:b2:9c:27:0e:52:a0:32:a5:62:c5:ec:c9:e7: 1b:60:f1:a4:7b:a1:88:07:d9:aa:8b:2b:6a:99:55: d3:a1:11:aa:d1:54:30:7c:ba:67:38:29:3c:9b:f6: 5b:8f:87:38:c1:35:98:aa:5b:02:0d:9d:e2:e1:59: c5:68:b0:6a:9b:18:5a:57:ab:1a:f4:0a:fd:02:40: a4:07:97:37:83:db:cd:fd:38:96:3a:bb:b1:8f:8a: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A0:03:6B:5E:C6:CD:12:1E:84:96:86:C7:39:FA:9F:11:C3:05:C3 X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a1:7d:f6:4a:9c:28:38:aa:c9:b2:68:85:5e:72:87:ce:0b: 7c:0d:4f:2c:ca:6a:43:77:88:95:66:82:cb:cd:4d:41:6f:18: 29:16:1b:eb:3f:c7:9a:68:c5:3c:a4:00:a8:2d:bd:af:03:a4: b7:8e:69:91:85:bc:61:70:ea:e7:61:f1:c5:41:e9:c8:7f:1c: dc:69:be:92:e3:96:0e:b3:e8:42:aa:58:fb:99:17:15:f6:f6: ee:e8:8b:06:b2:cc:b5:8a:f2:82:9f:66:bb:be:6c:2c:d2:48: 07:f0:9c:c8:2b:63:d8:86:f9:8b:52:7e:d3:e4:a6:91:aa:0c: 43:3e:5c:7f:9e:84:d6:99:e0:02:b7:73:6b:c9:23:95:f7:61: b7:a1:b1:a7:ae:65:40:b6:dc:46:62:25:34:e1:66:06:13:be: f9:f1:c5:ce:39:47:f1:06:33:1a:52:5d:78:35:20:53:ec:3d: 95:40:44:d3:d3:b6:e6:c2:6c:43:9d:3a:05:cd:9e:3e:6a:9f: 3c:48:9d:43:1f:04:61:82:7e:34:4c:7e:3b:27:7b:35:66:7a: af:bc:9b:1d:f1:b7:78:7a:9f:d4:e0:58:23:e8:e3:5c:6c:bb: ca:f2:6c:fe:85:eb:92:01:39:53:6e:fa:4d:c2:60:31:9f:5d: 65:a9:a9:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjUxMTA0MTkxNjI0WhcNMjUxMTExMTkxNjI0WjAYMRYwFAYD VQQDEw02OTBhNTEwOS0zZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCJZGN24K3kU/Emc6if2e+IR6l3aTThJ93SZdwyevoOselA4a8GZl0DKLHYC YvxmIxt6LhwihivGpS4P+1vyAgeDTcwrQAhJfW3Jdt7foZl5+JnyXn7LA6rejKqW NJ7evTsxsCV8k+E7YliT4j5yvo9wQkloIAdR+si/Cv2/UnV7xETnsKyM+KDCao33 KJY7ZT4poVO6fRbmeV1EqNj0frUEMSOoWLKcJw5SoDKlYsXsyecbYPGke6GIB9mq iytqmVXToRGq0VQwfLpnOCk8m/Zbj4c4wTWYqlsCDZ3i4VnFaLBqmxhaV6sa9Ar9 AkCkB5c3g9vN/TiWOruxj4o91QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCgA2te xs0SHoSWhsc5+p8RwwXDMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsoX32SpwoOKrJsmiFXnKHzgt8DU8sympDd4iVZoLLzU1BbxgpFhvr P8eaaMU8pACoLb2vA6S3jmmRhbxhcOrnYfHFQenIfxzcab6S45YOs+hCqlj7mRcV 9vbu6IsGssy1ivKCn2a7vmws0kgH8JzIK2PYhvmLUn7T5KaRqgxDPlx/noTWmeAC t3NrySOV92G3obGnrmVAttxGYiU04WYGE7758cXOOUfxBjMaUl14NSBT7D2VQETT 07bmwmxDnToFzZ4+ap88SJ1DHwRhgn40TH47J3s1ZnqvvJsd8bd4ep/U4Fgj6ONc bLvK8mz+heuSATlTbvpNwmAxn11lqalB -----END CERTIFICATE-----Generated at Wed Nov 5 13:30:19 2025 by rpki-client