$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: p1SyAxFh+CI5ZsT+fAIq5CjmUrbdThoxEC+JbFwbheE= Subject key identifier: 64:91:46:7B:74:4C:58:E6:8C:D8:6D:5E:83:26:40:44:F9:20:DC:52 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1AB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1AAB Signing time: Tue 04 Nov 2025 16:25:18 +0000 Manifest this update: Tue 04 Nov 2025 16:25:17 +0000 Manifest next update: Tue 11 Nov 2025 16:25:17 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: hvJWH1NcXv5dRi8ndvnwOKihPiPK0spNt2qa5a5RwDo=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6837 (0x1ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Nov 4 16:25:17 2025 GMT Not After : Nov 11 16:25:17 2025 GMT Subject: CN=690a28ee-55ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:e5:29:6f:70:9f:ea:75:b0:c1:45:32:e2: 1f:dc:13:63:49:de:c9:d6:63:3b:6f:95:d6:d0:6d: 6c:b8:26:0b:cc:45:94:6c:b7:62:8d:65:4b:64:25: 89:47:e4:df:ad:cd:20:2a:48:69:c7:64:d9:87:b1: b3:77:f9:53:58:d9:06:c7:a8:92:e6:d2:ac:6f:6c: e1:8e:c3:10:06:23:23:77:6b:62:76:89:d9:77:69: 01:cc:40:57:85:66:d8:c1:20:ba:e8:18:2f:33:40: d4:4c:5e:2b:f7:22:5a:99:5b:52:c2:db:1c:cf:c1: 7f:28:07:6c:07:2d:cb:8f:84:29:52:53:a1:02:1b: 27:c5:21:5c:35:73:96:dd:12:0c:b8:de:31:b5:d9: 18:b6:cf:e1:84:be:58:2e:11:a0:36:9c:76:8f:c9: 32:2d:84:5c:7a:66:54:e1:ab:08:3a:d9:54:cc:21: 08:25:b0:4f:a2:83:1d:fe:a1:ef:1e:77:fd:50:41: 10:7f:1d:19:95:21:0e:2f:a2:f7:20:e0:0f:72:39: 6b:be:40:42:e2:ab:47:9a:d7:05:79:30:8c:59:6c: ae:a0:b7:1f:4c:28:33:d4:02:38:d1:88:d8:f8:c2: 4a:61:70:b5:0d:a2:5b:b1:e4:22:91:c9:62:ae:21: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:91:46:7B:74:4C:58:E6:8C:D8:6D:5E:83:26:40:44:F9:20:DC:52 X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:90:ea:cb:6a:e6:48:83:ce:0c:b3:01:aa:1d:70:82:20:f7: 8f:92:cc:86:1b:0f:1b:02:f5:6d:1f:c6:44:54:30:5d:03:1d: 1b:af:89:35:ba:3e:64:83:b3:79:ca:24:2c:94:16:cd:59:85: d8:bb:bf:33:78:0b:0a:60:5f:6a:17:78:46:9b:04:94:d2:14: ff:38:b1:46:14:8c:74:69:d6:b7:d5:76:c8:6c:23:b1:11:3d: b6:d2:0e:62:cf:97:70:85:c1:d1:0c:6f:a9:55:d4:5f:e9:f6: 08:01:db:bb:90:8c:f2:6a:a6:cf:cb:53:a8:d4:ae:1b:54:cf: 56:f1:7e:51:46:3a:a7:06:bd:9f:76:06:0b:15:47:4b:5b:f7: e7:17:74:45:29:5d:67:da:73:49:4d:75:39:81:71:51:0c:90: 10:14:29:85:ee:2d:0e:e3:b5:2f:e1:32:b1:21:01:48:f3:f3: 87:83:67:ed:90:91:4b:ad:73:2c:dc:78:a9:0e:a6:68:1a:83: 40:ce:db:57:81:ff:fb:88:f0:19:7b:fa:91:91:68:ec:1f:82: d1:5f:79:4d:2a:13:80:1f:06:ed:db:40:f7:83:e6:e1:bd:69: bc:d7:e5:50:4e:f8:59:28:2c:b4:41:cc:c9:92:6c:4e:40:98: e3:fa:4a:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUxMTA0MTYyNTE3WhcNMjUxMTExMTYyNTE3WjAYMRYwFAYD VQQDEw02OTBhMjhlZS01NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUTlKW9wn+p1sMFFMuIf3BNjSd7J1mM7b5XW0G1suCYLzEWUbLdijWVLZCWJ R+Tfrc0gKkhpx2TZh7Gzd/lTWNkGx6iS5tKsb2zhjsMQBiMjd2tidonZd2kBzEBX hWbYwSC66BgvM0DUTF4r9yJamVtSwtscz8F/KAdsBy3Lj4QpUlOhAhsnxSFcNXOW 3RIMuN4xtdkYts/hhL5YLhGgNpx2j8kyLYRcemZU4asIOtlUzCEIJbBPooMd/qHv Hnf9UEEQfx0ZlSEOL6L3IOAPcjlrvkBC4qtHmtcFeTCMWWyuoLcfTCgz1AI40YjY +MJKYXC1DaJbseQikcliriGr7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSRRnt0 TFjmjNhtXoMmQET5INxSMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBikOrLauZIg84MswGqHXCCIPePksyGGw8bAvVtH8ZEVDBdAx0br4k1 uj5kg7N5yiQslBbNWYXYu78zeAsKYF9qF3hGmwSU0hT/OLFGFIx0ada31XbIbCOx ET220g5iz5dwhcHRDG+pVdRf6fYIAdu7kIzyaqbPy1Oo1K4bVM9W8X5RRjqnBr2f dgYLFUdLW/fnF3RFKV1n2nNJTXU5gXFRDJAQFCmF7i0O47Uv4TKxIQFI8/OHg2ft kJFLrXMs3HipDqZoGoNAzttXgf/7iPAZe/qRkWjsH4LRX3lNKhOAHwbt20D3g+bh vWm81+VQTvhZKCy0QczJkmxOQJjj+kq5 -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:33 2025 by rpki-client