$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: N5dQ1aFdHE8rZAYfZhPcUqLinvIQp+Z5TV7LK4DnxeA= Subject key identifier: 65:A6:CD:AA:31:BB:58:53:46:3D:FB:53:C7:F9:36:D3:06:78:BC:9D Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 01BF Signing time: Wed 05 Nov 2025 03:06:27 +0000 Manifest this update: Wed 05 Nov 2025 03:06:26 +0000 Manifest next update: Wed 12 Nov 2025 03:06:26 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: Q1jsbaGoCKgSUnZYQ8s+JM5mVweunNAP3v3wDtj39gA=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: TJboroWTjSH5MHMWjJ273LEWmOXtmootlWn74QKDiMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Nov 5 03:06:26 2025 GMT Not After : Nov 12 03:06:26 2025 GMT Subject: CN=690abf32-a0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:9d:38:4e:fd:57:6b:c6:76:a7:67:2c:ef: 46:5f:a3:7d:42:f0:a7:42:be:7c:3f:a8:33:4a:71: 19:ed:0b:28:a6:5d:be:99:a2:1e:67:5e:95:f0:07: 5c:21:10:f6:92:19:5e:eb:fe:61:d2:da:59:55:c0: 31:02:d0:83:51:6d:bb:a5:58:43:6d:fd:5d:08:e9: fa:0e:04:88:77:6e:f5:fa:0a:30:34:d8:a3:1f:24: 93:77:b0:aa:7f:5f:00:1d:be:e3:93:cd:f1:f9:6e: f8:89:d9:37:b8:1b:bf:58:19:94:da:e7:72:5e:7f: c0:cc:be:e7:12:f4:36:c7:93:94:dc:26:12:d4:57: ba:ca:04:d9:a1:fe:4f:08:1f:6a:66:a7:9c:9b:f2: 15:b5:c5:c1:98:43:1b:8f:b6:e9:e2:fa:e5:40:0a: e5:48:f1:e3:18:81:a0:e1:dc:a2:78:29:e9:43:26: 93:ba:dc:a2:d2:de:54:22:bd:dd:bd:16:b6:7c:05: 2f:d4:e1:15:5d:95:cd:0b:f7:02:80:c1:a6:65:aa: 92:ab:96:d2:bc:2a:a0:25:2c:1e:d6:31:ad:9a:d5: ca:6f:6a:7f:64:64:15:6a:12:94:7f:4e:c1:f1:41: 3b:11:29:c0:a7:9c:9b:2f:c6:5a:db:ef:cb:b8:73: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A6:CD:AA:31:BB:58:53:46:3D:FB:53:C7:F9:36:D3:06:78:BC:9D X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c4:80:5c:db:5e:b8:8f:35:27:d8:b4:a8:45:6c:71:a3:73: 56:84:3e:4b:38:2c:60:d3:e6:7c:a7:dc:11:78:ee:9f:e5:bd: 04:ed:fe:32:f2:eb:d3:13:b3:8f:9f:39:d6:dc:c8:94:8e:b7: 68:36:16:1d:75:d2:a4:37:76:6a:a4:6e:8d:98:4d:d5:f9:cc: 86:d8:d1:2a:de:71:d3:f4:84:a7:87:d4:b0:4c:98:ed:f8:94: a5:79:f7:77:de:dd:41:22:f0:1e:b2:2d:4a:b1:b7:c0:e7:a9: 0e:56:64:9f:06:a5:02:5b:d0:64:3d:4e:bb:e3:a2:81:08:6e: 55:03:b7:8e:5d:aa:0b:73:31:2d:b5:2f:13:ec:5a:5e:fd:30: f1:4c:6f:d6:65:5a:4f:5e:01:99:57:f0:c1:b2:00:9b:2c:dc: 91:c9:9b:31:c1:6f:c3:a7:63:c1:34:dc:60:59:0f:0d:29:53: 8f:82:be:2f:26:d2:59:4a:3c:23:f3:3e:2b:92:a2:2c:b7:cc: f1:eb:b9:ea:c7:e1:e8:96:1a:06:ec:f7:d9:f7:f9:60:46:47: 9e:a6:2c:8e:e3:4a:ce:4f:3e:84:ef:a1:62:d4:6a:2d:21:bc: fa:34:3d:ae:64:1f:3a:35:44:ca:8e:a4:4e:6e:75:82:87:c0: a6:91:c1:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjUxMTA1MDMwNjI2WhcNMjUxMTEyMDMwNjI2WjAYMRYwFAYD VQQDEw02OTBhYmYzMi1hMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAWdOE79V2vGdqdnLO9GX6N9QvCnQr58P6gzSnEZ7Qsopl2+maIeZ16V8Adc IRD2khle6/5h0tpZVcAxAtCDUW27pVhDbf1dCOn6DgSId271+gowNNijHySTd7Cq f18AHb7jk83x+W74idk3uBu/WBmU2udyXn/AzL7nEvQ2x5OU3CYS1Fe6ygTZof5P CB9qZqecm/IVtcXBmEMbj7bp4vrlQArlSPHjGIGg4dyieCnpQyaTutyi0t5UIr3d vRa2fAUv1OEVXZXNC/cCgMGmZaqSq5bSvCqgJSwe1jGtmtXKb2p/ZGQVahKUf07B 8UE7ESnAp5ybL8Za2+/LuHNOwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWmzaox u1hTRj37U8f5NtMGeLydMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUxIBc2164jzUn2LSoRWxxo3NWhD5LOCxg0+Z8p9wReO6f5b0E7f4y 8uvTE7OPnznW3MiUjrdoNhYdddKkN3ZqpG6NmE3V+cyG2NEq3nHT9ISnh9SwTJjt +JSlefd33t1BIvAesi1KsbfA56kOVmSfBqUCW9BkPU6746KBCG5VA7eOXaoLczEt tS8T7Fpe/TDxTG/WZVpPXgGZV/DBsgCbLNyRyZsxwW/Dp2PBNNxgWQ8NKVOPgr4v JtJZSjwj8z4rkqIst8zx67nqx+HolhoG7PfZ9/lgRkeepiyO40rOTz6E76Fi1Got Ibz6ND2uZB86NUTKjqRObnWCh8CmkcFr -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:20 2025 by rpki-client