$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft File: J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json) Hash identifier: bLL3E6WO8z6mx8CDPd2A0EZyT5PRjMEAiyrOLeaJ2Ho= Subject key identifier: 6D:C0:D9:5F:71:2A:C1:B7:C1:C7:BB:54:D4:CC:B6:E3:2E:B4:BC:5E Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB Certificate issuer: /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft Manifest number: 06A5 Signing time: Sun 02 Nov 2025 22:15:51 +0000 Manifest this update: Sun 02 Nov 2025 22:15:50 +0000 Manifest next update: Sun 09 Nov 2025 22:15:50 +0000 Files and hashes: 1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: 5m4KuboNJTBFSPaYp/SjOAnBzeBhoPqkliilnfxt6E8=) 2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: U3xUizSTWdJYMjLLq4qIbC/HRkla7mf9lgp0wntQ29I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Validity Not Before: Nov 2 22:15:50 2025 GMT Not After : Nov 9 22:15:50 2025 GMT Subject: CN=6907d817-342f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:03:4e:57:7d:00:a8:05:e1:19:01:ee:83: 10:34:c1:32:24:00:f9:0c:9f:57:85:d8:36:59:23: f1:63:9a:73:b5:76:b0:af:95:a2:f9:11:3b:58:54: 31:2c:e6:1a:6a:90:db:fe:32:01:bf:45:a7:41:1e: 20:3f:73:38:58:62:5d:93:da:d5:7d:a3:f6:66:31: ff:12:b1:7d:57:83:b7:68:72:b3:a9:9f:73:61:05: cb:00:23:32:6a:df:1c:c1:9f:5f:9e:d2:be:f7:d5: f2:71:06:1f:de:6b:2c:af:68:c0:3d:3c:48:e5:61: 10:d3:e4:69:77:6b:ff:58:c6:60:f5:5a:75:cf:24: ec:62:cb:98:6c:be:20:ec:f6:bb:6b:1f:fb:b4:b5: af:ec:64:fa:9e:2e:a7:ff:6c:9d:70:99:bd:61:b0: b0:1a:63:d4:36:36:3a:fb:a4:d1:a7:a3:ee:ae:32: 6c:8b:fa:3c:1e:18:0b:17:68:8a:2c:4c:6b:d1:43: 32:02:66:6c:dd:3e:bc:bf:a4:80:d7:db:c4:e8:e2: 40:f5:17:b8:e0:75:eb:7a:d1:73:a5:b8:f4:be:90: 7d:43:d3:cb:0d:3e:c0:97:85:90:34:45:ff:cf:9e: 44:bc:ea:15:05:0f:7d:f5:d8:cb:e7:ce:e0:1c:c1: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C0:D9:5F:71:2A:C1:B7:C1:C7:BB:54:D4:CC:B6:E3:2E:B4:BC:5E X509v3 Authority Key Identifier: keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:21:63:0a:16:cc:08:07:98:7e:a1:1a:5f:57:92:20:65:1b: fa:24:fe:53:df:32:a6:55:27:42:3e:23:75:e1:f0:e0:bd:a1: 76:22:50:e7:8f:39:62:10:e8:bf:a7:89:7f:05:41:04:f1:9d: 03:9d:67:70:7e:8e:bd:4e:4d:d3:ed:cd:77:98:11:f9:19:d6: b8:bd:e4:d9:7e:9f:e7:a7:0f:fb:1a:70:88:45:0e:85:c3:9c: fe:c6:cf:c0:b8:1a:24:3d:40:d3:a0:6f:b2:1f:92:04:fe:08: 30:f7:bd:07:65:8d:b7:f8:f5:60:f2:71:53:e8:a6:34:d7:38: 6e:32:b8:84:0e:8d:c8:b7:7a:ab:d0:49:45:b9:a8:57:ba:47: 63:9e:27:7d:4f:92:21:ea:85:e9:e0:59:8a:89:5f:ff:02:5f: f1:46:01:45:e0:9a:dc:18:aa:00:18:a2:4f:9e:69:a4:99:fe: 35:0d:73:cc:a7:65:75:43:06:90:a4:2d:ab:53:bb:41:9a:55: e3:77:9e:80:42:fd:16:f8:91:e2:e3:cd:33:86:e8:32:97:a2: a0:b7:42:de:ca:1f:57:1e:24:2f:84:6c:cb:75:c9:29:1a:69: 1a:a7:4f:aa:ca:94:fc:ae:c5:2e:5f:f9:bc:22:43:69:1f:bb: ee:18:62:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjExMTAvBgNVBAUTKDI3OTI5NTlCMjVGQkY5RUJEQzkzMzlCQTlDN0QzNTU1 NzI2OTY5QUIwHhcNMjUxMTAyMjIxNTUwWhcNMjUxMTA5MjIxNTUwWjAYMRYwFAYD VQQDEw02OTA3ZDgxNy0zNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb8DTld9AKgF4RkB7oMQNMEyJAD5DJ9Xhdg2WSPxY5pztXawr5Wi+RE7WFQx LOYaapDb/jIBv0WnQR4gP3M4WGJdk9rVfaP2ZjH/ErF9V4O3aHKzqZ9zYQXLACMy at8cwZ9fntK+99XycQYf3mssr2jAPTxI5WEQ0+Rpd2v/WMZg9Vp1zyTsYsuYbL4g 7Pa7ax/7tLWv7GT6ni6n/2ydcJm9YbCwGmPUNjY6+6TRp6PurjJsi/o8HhgLF2iK LExr0UMyAmZs3T68v6SA19vE6OJA9Re44HXretFzpbj0vpB9Q9PLDT7Al4WQNEX/ z55EvOoVBQ999djL587gHMHC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3A2V9x KsG3wce7VNTMtuMutLxeMB8GA1UdIwQYMBaAFCeSlZsl+/nr3JM5upx9NVVyaWmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2MS85MEI2RjcyRTg2 QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1ldmNrem02bkgwMVZYSnBh YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o1S1ZteVg3LWV2Y2t6bTZuSDAxVlhKcGFhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2MS85MEI2RjcyRTg2QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1l dmNrem02bkgwMVZYSnBhYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzIWMKFswIB5h+oRpfV5IgZRv6JP5T3zKmVSdCPiN14fDgvaF2IlDn jzliEOi/p4l/BUEE8Z0DnWdwfo69Tk3T7c13mBH5Gda4veTZfp/npw/7GnCIRQ6F w5z+xs/AuBokPUDToG+yH5IE/ggw970HZY23+PVg8nFT6KY01zhuMriEDo3It3qr 0ElFuahXukdjnid9T5Ih6oXp4FmKiV//Al/xRgFF4JrcGKoAGKJPnmmkmf41DXPM p2V1QwaQpC2rU7tBmlXjd56AQv0W+JHi480zhugyl6Kgt0Leyh9XHiQvhGzLdckp Gmkap0+qypT8rsUuX/m8IkNpH7vuGGJu -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:08 2025 by rpki-client