$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json) Hash identifier: FT36DKRN/vUJiOLlLvA/D/W3m1lS71hKa3Nw/Oe+j1s= Subject key identifier: 10:A7:A5:0B:D3:D9:35:9E:81:91:D6:C1:6D:2D:96:FD:EE:E8:CD:20 Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft Manifest number: 0437 Signing time: Wed 05 Nov 2025 00:22:41 +0000 Manifest this update: Wed 05 Nov 2025 00:22:40 +0000 Manifest next update: Wed 12 Nov 2025 00:22:40 +0000 Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: gKHYxLXs7uzCFyAMO3kWC3FyR1qGdbgyxNtNShLWldQ=) 2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Validity Not Before: Nov 5 00:22:40 2025 GMT Not After : Nov 12 00:22:40 2025 GMT Subject: CN=690a98d1-1947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:87:1d:fb:13:ce:aa:ac:ee:20:fa:2b:eb: ef:99:95:e1:2e:ff:ed:20:a2:8e:05:2b:40:b5:dc: a0:e7:5c:33:d5:cc:79:b9:07:f3:2b:c3:30:80:f8: 94:63:63:43:e8:fa:c1:9b:bc:2a:42:09:5e:3a:82: 9c:65:81:22:d8:10:6a:89:f1:c3:7b:96:d8:c9:94: c1:24:79:f7:b2:dd:5d:9a:4d:57:26:ea:df:6d:ff: 88:93:26:01:f7:e0:90:1b:c4:1c:63:84:86:c5:2b: 70:5b:77:72:81:e1:e9:7b:70:6f:ad:49:7f:21:83: aa:4d:31:61:f2:c5:2c:76:45:c5:94:3e:e5:b8:b2: 2e:b4:9a:4b:43:40:69:15:9f:12:4e:b9:6c:64:56: 5a:d2:45:c4:17:70:5c:f5:0b:f7:0a:e7:23:8d:9a: f8:b1:39:f1:33:f5:55:5d:56:4a:65:3a:99:de:23: 3e:54:f7:3a:38:22:44:f3:b2:88:84:8b:66:1a:d5: a0:da:84:d0:ac:f2:cf:70:d2:e0:d9:ef:98:fd:17: 57:1b:82:b4:f2:b7:28:9d:96:53:af:e6:3f:d8:96: ea:2b:87:8f:1e:10:39:a6:5c:08:e7:a8:6b:37:4c: 28:b6:ac:d7:b7:50:d0:03:ca:97:35:33:5c:82:1f: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A7:A5:0B:D3:D9:35:9E:81:91:D6:C1:6D:2D:96:FD:EE:E8:CD:20 X509v3 Authority Key Identifier: keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b3:67:5a:d0:34:83:1c:ac:d1:49:86:f5:38:57:cf:b0:e5: af:f4:c4:37:86:e8:cc:46:ab:db:1c:9d:d5:0a:d0:84:26:b6: 7f:6e:7d:14:30:57:2a:d1:b9:37:4f:8e:fd:dc:3d:a7:3c:ea: 2e:b0:ed:6b:09:ba:a6:61:06:43:3e:6d:57:b3:56:b4:8f:17: ef:45:91:8a:12:72:b0:05:92:2c:ca:10:e2:f4:81:ef:22:ea: cc:72:35:c6:58:18:33:8e:76:5f:3d:d4:1f:aa:95:4e:50:84: 62:53:69:90:31:45:4c:02:3c:35:3d:ad:36:d6:d1:67:08:5f: a7:ce:28:7f:79:b3:e6:8c:06:0b:9e:c5:df:23:b0:cf:48:7e: f3:a6:f0:57:cf:de:24:2a:57:62:16:ef:ee:4e:06:9d:45:80: af:b1:8e:5b:30:b8:02:2e:64:1e:84:d8:5d:42:c3:c8:b5:7d: 4b:e2:3b:f1:92:63:72:45:3a:05:79:f2:75:c6:6a:76:be:2d: 98:5e:3f:55:88:27:77:e7:49:b2:97:83:b9:ea:ae:25:f2:85: 9c:8f:6f:78:a2:20:67:21:00:3c:ca:e1:95:f1:67:c7:b4:af: f0:a1:db:68:7d:75:c1:f6:65:62:42:97:e6:3c:c9:42:29:37: 71:11:9f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx QTQ4QUUxQTQwHhcNMjUxMTA1MDAyMjQwWhcNMjUxMTEyMDAyMjQwWjAYMRYwFAYD VQQDEw02OTBhOThkMS0xOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7KHHfsTzqqs7iD6K+vvmZXhLv/tIKKOBStAtdyg51wz1cx5uQfzK8MwgPiU Y2ND6PrBm7wqQgleOoKcZYEi2BBqifHDe5bYyZTBJHn3st1dmk1XJurfbf+IkyYB 9+CQG8QcY4SGxStwW3dygeHpe3BvrUl/IYOqTTFh8sUsdkXFlD7luLIutJpLQ0Bp FZ8STrlsZFZa0kXEF3Bc9Qv3CucjjZr4sTnxM/VVXVZKZTqZ3iM+VPc6OCJE87KI hItmGtWg2oTQrPLPcNLg2e+Y/RdXG4K08rconZZTr+Y/2JbqK4ePHhA5plwI56hr N0wotqzXt1DQA8qXNTNcgh+OSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCnpQvT 2TWegZHWwW0tlv3u6M0gMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa RTg4eHI4LXBvcElhU0s0YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXs2da0DSDHKzRSYb1OFfPsOWv9MQ3hujMRqvbHJ3VCtCEJrZ/bn0U MFcq0bk3T4793D2nPOousO1rCbqmYQZDPm1Xs1a0jxfvRZGKEnKwBZIsyhDi9IHv IurMcjXGWBgzjnZfPdQfqpVOUIRiU2mQMUVMAjw1Pa021tFnCF+nzih/ebPmjAYL nsXfI7DPSH7zpvBXz94kKldiFu/uTgadRYCvsY5bMLgCLmQehNhdQsPItX1L4jvx kmNyRToFefJ1xmp2vi2YXj9ViCd350myl4O56q4l8oWcj294oiBnIQA8yuGV8WfH tK/wodtofXXB9mViQpfmPMlCKTdxEZ9/ -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:37 2025 by rpki-client