$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: TJhrYNDhe9dL3FS98+51ujCDuNrCJeJtYHfVUNb0emg= Subject key identifier: 36:D0:3D:EF:4E:F7:3E:1A:69:C8:B7:34:4B:BA:85:0B:52:51:EE:65 Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: 0119 Signing time: Mon 03 Nov 2025 04:57:01 +0000 Manifest this update: Mon 03 Nov 2025 04:57:00 +0000 Manifest next update: Mon 10 Nov 2025 04:57:00 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: yQZe7LFSCD3lfQfLaUVcoOOtKvTC6IGAOAYnxJYaKnA=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: Nov 3 04:57:00 2025 GMT Not After : Nov 10 04:57:00 2025 GMT Subject: CN=6908361c-6ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:cb:37:7f:8e:b6:da:9a:8f:51:da:5b:cd: ac:7b:f7:1a:e9:eb:0e:11:9e:04:d8:db:94:54:1e: 89:93:9b:2d:93:5e:08:79:92:59:8b:09:e0:c1:46: ab:33:50:9b:8d:ca:17:2c:7a:e3:b1:8f:13:40:21: 4e:68:03:f9:63:65:c2:98:40:64:53:aa:fa:d7:b0: f8:58:64:46:18:23:4c:9d:ef:7c:0a:76:34:4c:c4: b3:b2:36:9c:20:74:3c:8b:81:c8:7b:aa:4d:97:7f: 35:24:66:67:df:17:9d:e4:6a:e1:37:a5:6f:8b:04: 63:c9:be:5d:55:4f:45:25:a7:c7:b9:e4:3b:d5:d6: 50:5e:de:64:ae:fb:16:f0:01:3d:6b:6e:73:1a:9a: cb:90:21:10:50:0f:03:11:30:56:f0:da:8d:57:1b: 6a:56:a6:9e:8a:52:82:20:24:d0:74:46:cc:e2:39: d0:e5:3b:f4:77:0c:ed:1c:ca:87:bf:33:0e:76:23: e3:37:59:3c:ca:55:76:7f:b5:18:89:44:ce:18:74: 9c:9c:42:cc:27:96:4c:46:44:9e:80:d3:17:e9:8f: dc:d5:f1:f0:cb:4e:1e:ee:95:8f:83:3d:59:97:88: 12:ef:06:03:8b:2d:34:58:ca:84:19:67:da:f2:c6: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D0:3D:EF:4E:F7:3E:1A:69:C8:B7:34:4B:BA:85:0B:52:51:EE:65 X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:84:52:33:56:85:6f:5e:d9:ef:3c:f2:b5:79:bd:a8:0c:a4: f8:45:d2:bd:77:34:0b:5d:c4:ca:ae:01:94:21:b1:0c:25:50: cb:d2:98:bf:79:22:b3:41:97:d5:7d:02:38:41:20:e8:50:19: 00:17:85:98:2a:eb:4c:eb:db:f7:5b:1c:91:ca:2b:96:4e:33: a8:23:95:e9:41:ce:5f:78:d2:8a:70:1d:07:16:da:b3:18:49: 71:92:b3:c1:68:c8:a7:0c:7a:17:4b:30:47:02:82:39:3a:d1: eb:9e:37:b1:9d:80:a0:e8:c4:ac:96:60:58:07:00:f8:65:38: 18:60:56:e5:13:cf:fb:ef:0b:76:b9:5b:b2:d4:d8:7f:f4:41: bb:1e:1a:4f:1a:55:b3:c2:0c:5a:16:a2:0c:77:35:bc:a6:3b: 6d:2c:61:8c:25:bc:da:63:3c:37:1e:ab:11:bf:a4:7d:d5:6e: 6b:07:c2:76:a8:2a:17:b8:35:c6:23:74:3f:62:cf:fc:bd:e4: 6b:1c:ba:61:12:b1:70:be:7a:f4:97:f8:c5:51:dd:89:7f:55: 53:05:ab:dd:64:b2:f7:90:1c:2e:d6:c6:c9:97:f6:13:82:8d: 59:fd:f3:be:07:30:01:90:95:8c:44:a6:4d:c9:42:68:07:3c: 54:43:6f:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUxMTAzMDQ1NzAwWhcNMjUxMTEwMDQ1NzAwWjAYMRYwFAYD VQQDEw02OTA4MzYxYy02ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWfLN3+Ottqaj1HaW82se/ca6esOEZ4E2NuUVB6Jk5stk14IeZJZiwngwUar M1CbjcoXLHrjsY8TQCFOaAP5Y2XCmEBkU6r617D4WGRGGCNMne98CnY0TMSzsjac IHQ8i4HIe6pNl381JGZn3xed5GrhN6VviwRjyb5dVU9FJafHueQ71dZQXt5krvsW 8AE9a25zGprLkCEQUA8DETBW8NqNVxtqVqaeilKCICTQdEbM4jnQ5Tv0dwztHMqH vzMOdiPjN1k8ylV2f7UYiUTOGHScnELMJ5ZMRkSegNMX6Y/c1fHwy04e7pWPgz1Z l4gS7wYDiy00WMqEGWfa8sZCqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbQPe9O 9z4aaci3NEu6hQtSUe5lMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAihFIzVoVvXtnvPPK1eb2oDKT4RdK9dzQLXcTKrgGUIbEMJVDL0pi/ eSKzQZfVfQI4QSDoUBkAF4WYKutM69v3WxyRyiuWTjOoI5XpQc5feNKKcB0HFtqz GElxkrPBaMinDHoXSzBHAoI5OtHrnjexnYCg6MSslmBYBwD4ZTgYYFblE8/77wt2 uVuy1Nh/9EG7HhpPGlWzwgxaFqIMdzW8pjttLGGMJbzaYzw3HqsRv6R91W5rB8J2 qCoXuDXGI3Q/Ys/8veRrHLphErFwvnr0l/jFUd2Jf1VTBavdZLL3kBwu1sbJl/YT go1Z/fO+BzABkJWMRKZNyUJoBzxUQ28q -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:49 2025 by rpki-client