$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json) Hash identifier: 6LQcGBnMRc/BcjsTza7PcMY9hhA7jl+xqdMl/TTZO+c= Subject key identifier: 07:05:6D:A4:B0:85:A0:98:95:DC:87:AE:AC:71:C6:D2:9C:C6:39:1A Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1C26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft Manifest number: 1C1B Signing time: Tue 04 Nov 2025 16:18:32 +0000 Manifest this update: Tue 04 Nov 2025 16:18:32 +0000 Manifest next update: Tue 11 Nov 2025 16:18:32 +0000 Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: GBFiyEEcLfFTRCsT+++8ZB9nZDLhbFiSHCY7oz4aNcE=) 2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: kBZXfU8hYHbxkpL5pMVsBeQd1k5TVtind4j2n+kliDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7206 (0x1c26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: Nov 4 16:18:32 2025 GMT Not After : Nov 11 16:18:32 2025 GMT Subject: CN=690a2758-8482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:7f:7b:87:4b:24:ed:92:f8:a2:34:33:0f: 07:40:be:47:98:e2:fe:4c:01:85:1b:fb:bd:85:b6: 64:94:9d:d0:e0:68:34:b7:cc:fe:47:c0:f6:84:af: 47:e5:5e:5f:be:60:b7:d5:98:e2:11:4e:11:3e:11: 9c:c9:88:33:1b:21:0b:ef:f2:09:27:b9:f9:9d:80: ea:1a:4e:74:c5:29:a6:7b:f7:f9:4b:18:83:5d:e3: d6:f4:1d:87:c4:99:e9:3e:00:77:ec:4f:a5:89:58: ef:03:52:fd:20:84:76:6f:a4:3f:10:4f:50:39:fc: 8f:f7:5d:12:c8:2d:9d:87:21:36:80:8f:05:c5:93: 72:21:a6:62:d4:d0:a0:cf:90:dd:66:87:30:b6:dc: eb:f6:db:4f:83:fe:80:b4:8b:3c:eb:84:54:58:bb: 02:1d:73:d9:4a:7a:25:c9:35:3c:db:e4:42:9b:e3: 9a:bb:2a:d8:55:6c:bf:f5:43:9e:84:da:dd:a5:60: b6:d0:81:98:58:f2:81:bb:9c:d1:bb:3c:b2:e8:84: ec:d8:b8:72:9a:65:4e:d1:80:3b:27:10:dc:46:4c: 5d:01:3f:33:5f:df:68:24:ab:fc:57:59:8f:ad:53: 6f:c8:7d:3f:46:42:f2:ef:f5:24:d0:cd:25:b3:9c: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:05:6D:A4:B0:85:A0:98:95:DC:87:AE:AC:71:C6:D2:9C:C6:39:1A X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b0:b4:a2:2b:48:95:00:08:5d:53:00:f1:12:00:2b:79:dc: d8:72:2d:07:fe:96:36:23:f5:8d:d6:45:0d:42:ce:cb:72:81: 8d:94:c1:fd:dd:da:5f:1d:ec:00:a6:b1:f3:fa:dc:f5:ac:19: ae:8a:32:20:08:f4:47:e3:f6:08:b8:ff:c1:f0:d3:6d:a6:2c: 56:c6:17:88:05:c8:d7:ec:5c:d4:76:df:86:76:2b:01:14:cf: 69:fe:ce:4b:cb:48:13:ac:23:0b:a5:09:36:2f:d3:a1:72:1b: be:79:df:84:a6:9d:f5:52:f9:4c:92:ec:58:e9:fd:30:44:f1: 84:89:ff:c7:37:ae:d2:ae:cb:46:9d:ec:de:1f:7b:e4:c2:61: d6:1e:e4:fc:f8:1a:90:b3:f5:fe:ff:ac:19:3d:94:17:a0:41: 6c:a4:e1:c6:59:39:92:f0:5d:bf:5b:60:ae:52:41:2c:11:03: 8c:bf:5a:1b:29:03:fa:c1:0e:ff:ef:52:57:53:37:ab:a1:a1: 57:2e:43:0e:df:90:79:f2:16:2b:6b:95:13:e5:38:55:ff:ae: 89:7a:6e:d5:21:13:5b:62:fa:1d:65:a5:c8:21:f0:f8:fc:f2: 5c:40:21:f3:ac:9a:39:d2:60:8e:0f:8a:a0:04:70:c1:95:b5: a9:de:57:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjUxMTA0MTYxODMyWhcNMjUxMTExMTYxODMyWjAYMRYwFAYD VQQDEw02OTBhMjc1OC04NDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Hl/e4dLJO2S+KI0Mw8HQL5HmOL+TAGFG/u9hbZklJ3Q4Gg0t8z+R8D2hK9H 5V5fvmC31ZjiEU4RPhGcyYgzGyEL7/IJJ7n5nYDqGk50xSmme/f5SxiDXePW9B2H xJnpPgB37E+liVjvA1L9IIR2b6Q/EE9QOfyP910SyC2dhyE2gI8FxZNyIaZi1NCg z5DdZocwttzr9ttPg/6AtIs864RUWLsCHXPZSnolyTU82+RCm+OauyrYVWy/9UOe hNrdpWC20IGYWPKBu5zRuzyy6ITs2LhymmVO0YA7JxDcRkxdAT8zX99oJKv8V1mP rVNvyH0/RkLy7/Uk0M0ls5yHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcFbaSw haCYldyHrqxxxtKcxjkaMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9sLSiK0iVAAhdUwDxEgAredzYci0H/pY2I/WN1kUNQs7LcoGNlMH9 3dpfHewAprHz+tz1rBmuijIgCPRH4/YIuP/B8NNtpixWxheIBcjX7FzUdt+GdisB FM9p/s5Ly0gTrCMLpQk2L9Ohchu+ed+Epp31UvlMkuxY6f0wRPGEif/HN67SrstG nezeH3vkwmHWHuT8+BqQs/X+/6wZPZQXoEFspOHGWTmS8F2/W2CuUkEsEQOMv1ob KQP6wQ7/71JXUzeroaFXLkMO35B58hYra5UT5ThV/66Jem7VIRNbYvodZaXIIfD4 /PJcQCHzrJo50mCOD4qgBHDBlbWp3lcY -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:09 2025 by rpki-client