$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json) Hash identifier: w1QA07aBq67929SQy8X28Y+/jOgeJyvu2JSeOkYLq/U= Subject key identifier: BC:42:FF:15:15:B5:65:17:89:62:83:65:00:31:5E:3B:F8:0C:45:06 Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft Manifest number: 0132 Signing time: Wed 05 Nov 2025 04:43:44 +0000 Manifest this update: Wed 05 Nov 2025 04:43:43 +0000 Manifest next update: Wed 12 Nov 2025 04:43:43 +0000 Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: 5Cds4JNmROr13V6GOccu6D3MRuISO83TfEplouFJ2mc=) 2: 6F09FF784B3111F0AED6945EC4F9AE02.roa (hash: I1sNkwrJ9A9oI4DVJU2qBgFfehpgUx5dO53gjYthp7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Validity Not Before: Nov 5 04:43:43 2025 GMT Not After : Nov 12 04:43:43 2025 GMT Subject: CN=690ad5ff-3874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:35:ca:34:d1:52:f8:08:14:8c:46:44:93: cd:34:ab:78:f3:dd:2f:58:48:54:21:bd:98:92:9c: d6:f7:55:4c:3c:f1:6f:70:dc:01:61:71:bb:96:87: 43:1c:c3:14:cb:67:71:2b:2d:21:a9:96:2f:59:7a: 3c:81:bf:97:00:9c:05:ea:1d:95:a6:43:ed:38:86: 0a:10:5c:05:95:59:b8:ea:65:1c:5b:84:c6:c7:e4: ad:3a:1e:93:d3:32:95:e6:63:b2:f4:bc:d6:ec:03: f6:e3:94:8e:cf:cf:79:86:32:ca:ef:1f:4b:c5:fc: fa:30:cb:44:b0:4c:67:06:60:86:e7:ea:58:3f:4c: 09:a8:53:03:9f:5a:e8:ab:33:7c:b5:52:5c:7f:46: c0:52:a8:47:2f:ad:fc:de:f6:0c:ec:22:84:71:d5: 8a:81:31:f2:54:ff:05:10:d2:05:45:15:52:56:3b: 94:9d:be:01:bb:ba:59:b1:36:e0:d7:6f:39:e7:dd: b1:35:19:21:7c:92:18:6b:bf:07:dd:04:c2:5b:c6: b4:fe:3d:51:60:01:46:38:0b:aa:d9:ae:0b:b0:ad: 53:12:20:88:2b:5a:79:3b:d7:5a:90:3f:f5:61:86: 67:ae:e1:35:1a:5d:71:bb:2a:02:3c:48:ab:87:06: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:42:FF:15:15:B5:65:17:89:62:83:65:00:31:5E:3B:F8:0C:45:06 X509v3 Authority Key Identifier: keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:85:6f:6d:63:21:9e:a6:cf:e5:27:a9:0b:62:e9:0b:6f:ca: 45:4e:16:f9:65:4c:b8:0b:db:da:ee:a4:bc:26:91:ea:2d:0d: 1b:5a:cf:ec:ac:fb:23:26:86:d7:be:95:c6:3d:18:82:ae:e9: f6:d9:c2:38:99:b5:1d:61:e4:90:56:e2:df:3b:a4:80:cd:9d: da:e1:19:3e:bc:52:76:f8:f5:51:c1:b1:cf:2b:f2:1d:a8:a8: 3d:e3:f3:16:48:e2:ec:44:9c:b5:c5:c7:d3:57:a9:61:54:03: 7f:db:f5:ec:35:ed:24:f5:b6:b5:2b:bf:fe:68:9a:ae:42:95: 3a:b0:45:26:fe:c5:a9:5f:83:09:aa:50:a4:a5:62:de:67:24: 94:be:6b:03:a4:00:67:6b:04:7f:ab:05:07:92:74:cf:a0:cc: f7:de:3d:f9:40:0a:a6:b3:63:53:41:df:83:99:b3:ce:94:7a: 1e:86:bd:8c:f6:1d:62:e4:d6:2b:0f:04:e8:72:ba:5a:ab:8c: d0:60:9b:f6:a9:5a:21:ed:62:20:5f:3e:ff:a0:ad:e5:bb:c1: 36:86:38:ac:3a:d5:91:96:6c:66:8b:21:ec:bf:bd:36:f6:ba: 15:4a:ce:cf:8e:bc:13:21:d8:4f:00:93:7f:bc:0e:c2:d9:cc: 07:1a:3e:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz NzVFODEzREIwHhcNMjUxMTA1MDQ0MzQzWhcNMjUxMTEyMDQ0MzQzWjAYMRYwFAYD VQQDEw02OTBhZDVmZi0zODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuec1yjTRUvgIFIxGRJPNNKt4890vWEhUIb2YkpzW91VMPPFvcNwBYXG7lodD HMMUy2dxKy0hqZYvWXo8gb+XAJwF6h2VpkPtOIYKEFwFlVm46mUcW4TGx+StOh6T 0zKV5mOy9LzW7AP245SOz895hjLK7x9Lxfz6MMtEsExnBmCG5+pYP0wJqFMDn1ro qzN8tVJcf0bAUqhHL6383vYM7CKEcdWKgTHyVP8FENIFRRVSVjuUnb4Bu7pZsTbg 1285592xNRkhfJIYa78H3QTCW8a0/j1RYAFGOAuq2a4LsK1TEiCIK1p5O9dakD/1 YYZnruE1Gl1xuyoCPEirhwa1TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxC/xUV tWUXiWKDZQAxXjv4DEUGMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI2RC8yMTUyMjE4MkU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5 dHhMX0IzM2dTUWczWG9FOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByhW9tYyGeps/lJ6kLYukLb8pFThb5ZUy4C9va7qS8JpHqLQ0bWs/s rPsjJobXvpXGPRiCrun22cI4mbUdYeSQVuLfO6SAzZ3a4Rk+vFJ2+PVRwbHPK/Id qKg94/MWSOLsRJy1xcfTV6lhVAN/2/XsNe0k9ba1K7/+aJquQpU6sEUm/sWpX4MJ qlCkpWLeZySUvmsDpABnawR/qwUHknTPoMz33j35QAqms2NTQd+DmbPOlHoehr2M 9h1i5NYrDwTocrpaq4zQYJv2qVoh7WIgXz7/oK3lu8E2hjisOtWRlmxmiyHsv702 9roVSs7PjrwTIdhPAJN/vA7C2cwHGj7s -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:02 2025 by rpki-client