$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: 3DAzwPXYbYP7n1sutKVTKV1MgJ+Fr4ZdHLQGQ1GGUaI= Subject key identifier: 3F:BB:22:46:E4:B7:2A:C2:ED:88:0A:C1:65:9E:F1:C8:5E:A1:77:B7 Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 8D Signing time: Fri 07 Nov 2025 01:55:18 +0000 Manifest this update: Fri 07 Nov 2025 01:55:17 +0000 Manifest next update: Fri 14 Nov 2025 01:55:17 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: X872hW5ccSu2fPPBmObpiDDqhI4gQqrti+obNDu54lk=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 01:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Nov 7 01:55:17 2025 GMT Not After : Nov 14 01:55:17 2025 GMT Subject: CN=690d5186-d737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:10:1b:5a:9b:64:73:7e:44:48:bc:7a:06: c1:2d:8b:4c:5d:af:45:d6:eb:cc:1e:9d:c0:71:59: 91:b1:10:dc:75:20:a8:b1:94:05:61:54:7b:07:23: 6d:1b:04:51:d1:87:46:a4:dc:52:56:19:5a:00:7c: 5e:c7:fd:af:ef:d5:5d:e2:9b:82:f8:dd:3a:64:49: c2:b9:a3:14:91:ac:cd:f6:78:6f:f1:7a:74:63:af: ab:80:e4:dd:ff:b7:9d:23:8b:d2:bb:1b:9d:2c:e0: 82:7c:be:57:48:76:eb:36:8c:50:1a:3f:24:be:9a: 75:d0:74:c9:77:f2:eb:fb:66:5c:5a:e1:8e:48:46: 6e:4d:13:d3:d7:fc:96:00:80:7b:5a:9d:eb:f5:17: ac:6c:0c:fe:ca:eb:e0:5a:0a:58:70:79:53:40:bd: e7:d2:11:49:d9:a5:1a:e4:57:09:94:13:7d:8a:74: d5:14:95:41:bc:2f:44:77:7a:21:3c:90:36:ce:48: ee:c8:8f:99:5f:16:f7:4e:14:bd:f1:78:d1:d9:1b: ae:ec:ec:3b:f6:ee:82:0c:24:28:1c:cd:01:80:a7: d1:93:26:95:ee:28:02:bc:5d:8f:da:b1:00:a8:e7: 4a:a8:e8:75:d5:0e:49:ed:87:50:16:9b:11:9e:24: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BB:22:46:E4:B7:2A:C2:ED:88:0A:C1:65:9E:F1:C8:5E:A1:77:B7 X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0c:db:5f:bd:64:26:a8:ae:ac:9e:ef:ac:2d:67:ea:c6:36: 43:6f:2d:56:e5:50:fe:e0:bb:95:f5:3e:10:bd:82:00:31:57: 10:36:41:08:4e:47:2d:c7:68:0c:03:57:cb:38:5f:e6:f0:b1: ec:d5:9f:d6:91:9d:18:44:d8:46:d4:dc:e3:b6:30:65:ca:0e: 4d:04:07:80:13:69:20:88:83:7d:c4:59:39:46:6c:d9:be:55: 19:ae:a0:7b:d6:e8:2f:d1:75:28:4e:e3:da:06:6b:2c:f6:e7: 34:1a:f8:5c:c2:b6:98:c3:89:11:88:81:7e:41:53:0d:29:f4: 6b:8d:67:a3:a4:c9:8e:28:ed:ce:53:10:bb:7c:d6:d8:4a:4e: 0e:7f:f8:b9:28:5d:81:7d:a4:f4:94:6f:59:6a:8a:21:ec:7e: 53:bd:6e:ca:8b:a0:0d:2d:2b:96:e3:f8:90:01:fb:f3:42:b8: cc:70:07:35:c6:41:21:8c:56:72:6b:17:14:08:f1:69:eb:f2: d9:9e:95:07:c1:ca:c1:47:f8:3a:29:f8:0f:1f:79:78:2d:a0: b4:7d:7b:0e:6e:59:8b:16:d6:32:a0:4d:14:f7:1d:d7:78:db: 33:2d:32:81:c3:9f:94:43:9c:b3:3b:14:95:02:18:ba:60:70: a7:77:1a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1MTIxMTAvBgNVBAUTKDhFNUVBRTRDMDNCQzNCMzQ1QkU3OEY4QzhFOUE0M0I3 Rjk4RTMzQTYwHhcNMjUxMTA3MDE1NTE3WhcNMjUxMTE0MDE1NTE3WjAYMRYwFAYD VQQDEw02OTBkNTE4Ni1kNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDEQG1qbZHN+REi8egbBLYtMXa9F1uvMHp3AcVmRsRDcdSCosZQFYVR7ByNt GwRR0YdGpNxSVhlaAHxex/2v79Vd4puC+N06ZEnCuaMUkazN9nhv8Xp0Y6+rgOTd /7edI4vSuxudLOCCfL5XSHbrNoxQGj8kvpp10HTJd/Lr+2ZcWuGOSEZuTRPT1/yW AIB7Wp3r9ResbAz+yuvgWgpYcHlTQL3n0hFJ2aUa5FcJlBN9inTVFJVBvC9Ed3oh PJA2zkjuyI+ZXxb3ThS98XjR2Ruu7Ow79u6CDCQoHM0BgKfRkyaV7igCvF2P2rEA qOdKqOh11Q5J7YdQFpsRniRL/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+7Ikbk tyrC7YgKwWWe8cheoXe3MB8GA1UdIwQYMBaAFI5erkwDvDs0W+ePjI6aQ7f5jjOm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzUxMi9BMThBQkYyOEUz QTMxMUVGQjhFQjhDNTFDNEY5QUUwMi9qbDZ1VEFPOE96UmI1NC1NanBwRHRfbU9N NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzUxMi9BMThBQkYyOEUzQTMxMUVGQjhFQjhDNTFDNEY5QUUwMi9qbDZ1VEFPOE96 UmI1NC1NanBwRHRfbU9NNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6DNtfvWQmqK6snu+sLWfqxjZDby1W5VD+4LuV9T4QvYIAMVcQNkEI Tkctx2gMA1fLOF/m8LHs1Z/WkZ0YRNhG1NzjtjBlyg5NBAeAE2kgiIN9xFk5RmzZ vlUZrqB71ugv0XUoTuPaBmss9uc0GvhcwraYw4kRiIF+QVMNKfRrjWejpMmOKO3O UxC7fNbYSk4Of/i5KF2BfaT0lG9Zaooh7H5TvW7Ki6ANLSuW4/iQAfvzQrjMcAc1 xkEhjFZyaxcUCPFp6/LZnpUHwcrBR/g6KfgPH3l4LaC0fXsOblmLFtYyoE0U9x3X eNszLTKBw5+UQ5yzOxSVAhi6YHCndxrv -----END CERTIFICATE-----Generated at Fri Nov 7 12:06:55 2025 by rpki-client