$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json) Hash identifier: CGU37UgQiYjACyWSk0vs86jE9ph2hI21LJ7IsRvhJcE= Subject key identifier: CB:9E:1F:91:98:A1:4C:CD:92:B2:6D:F6:E0:25:38:4C:78:3D:3F:08 Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 124C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft Manifest number: 1243 Signing time: Tue 04 Nov 2025 17:12:57 +0000 Manifest this update: Tue 04 Nov 2025 17:12:56 +0000 Manifest next update: Tue 11 Nov 2025 17:12:56 +0000 Files and hashes: 1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: olMLOzdiaYdpMb4chE1jupq25hXit7BZKP1Dt1Bsld4=) 2: A295F860E71011E8899C3917C4F9AE02.roa (hash: u3ZjS5PQ+cLOr7B4bn5ZklBTiFJgjz1r0/eLvbqbKzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4684 (0x124c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Nov 4 17:12:56 2025 GMT Not After : Nov 11 17:12:56 2025 GMT Subject: CN=690a3419-84f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4f:f8:8e:d2:48:44:15:35:6b:99:52:23:42: 78:ab:7b:37:44:03:d6:1b:62:5a:42:49:d6:05:d3: 24:64:e9:39:f0:be:f3:82:ab:a7:aa:92:45:53:b4: 58:38:90:fd:de:b7:4f:18:84:7f:81:48:00:91:66: 7c:2f:4d:71:fc:75:b1:a1:c2:7a:f0:9e:f6:7c:10: 7b:f2:62:f7:78:24:a5:5e:b5:a7:97:c1:eb:6b:58: 81:36:ce:83:b3:3d:1c:8e:ca:99:2d:12:53:4d:b1: ff:42:34:76:cb:37:ca:0c:be:af:4a:16:ab:50:bf: fc:a3:fd:09:7a:74:e9:9b:63:1d:57:89:fe:5c:38: c0:ab:48:93:81:30:88:cf:19:6c:20:d4:b0:40:c6: 0a:4c:6b:b2:06:c8:68:c6:45:85:09:be:ed:54:29: 08:22:23:4b:39:2c:0b:05:bc:9f:f9:de:47:f8:3f: 3c:bc:98:d1:2f:9f:5f:b0:bd:34:ab:e2:a8:3e:79: c0:87:90:6f:5d:05:fa:9c:35:d1:ba:0b:7a:2d:bb: 71:2f:a8:a8:f2:53:b1:61:86:e4:21:e1:94:88:d0: 6c:8c:24:c2:31:23:97:8c:81:c7:f7:2d:af:ca:a0: 19:de:32:a5:7c:2d:87:11:1f:df:70:24:7e:8e:4e: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9E:1F:91:98:A1:4C:CD:92:B2:6D:F6:E0:25:38:4C:78:3D:3F:08 X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:9b:8c:15:f1:26:d3:56:cf:7a:22:3a:33:dd:12:17:db:cf: 06:7b:5d:66:5b:62:68:4f:20:25:26:c2:42:05:3f:12:e3:35: a1:ee:e8:b4:a1:09:85:51:7a:b0:b5:06:45:c0:c7:33:83:32: 58:b7:3d:d2:c6:e7:2a:e5:9a:ca:17:84:2b:c6:d0:90:da:df: b6:76:20:ce:13:9d:f8:bb:32:a5:ed:d9:78:92:8c:2c:e7:41: 62:dd:10:16:19:b2:2d:38:5d:71:4e:41:2f:c4:16:3c:af:d5: 02:02:3c:49:cf:cc:14:ef:05:c7:de:36:bc:f2:aa:92:19:23: 70:03:8e:eb:4c:4f:8d:e1:8a:52:ba:6d:92:36:6f:bc:18:b1: 1e:78:8c:04:10:7b:3e:c8:b3:37:4e:05:e7:d8:d1:ad:75:98: b8:9f:6b:d6:35:06:63:16:ad:ee:09:02:6d:31:e0:bc:30:6d: fb:60:15:01:ac:71:7f:0d:6a:e1:fe:e5:22:91:67:c6:fe:4d: 40:dd:a1:30:10:4d:1c:c9:04:2e:0a:dd:8c:4f:a2:fd:d8:a0: 41:d2:bc:c4:af:4e:10:02:dd:8f:4b:5d:d3:6b:1a:23:ff:c9: b2:79:62:45:79:f5:7e:e7:bb:03:78:ea:12:24:11:26:e6:80: 0c:9c:0d:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjUxMTA0MTcxMjU2WhcNMjUxMTExMTcxMjU2WjAYMRYwFAYD VQQDEw02OTBhMzQxOS04NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9E/4jtJIRBU1a5lSI0J4q3s3RAPWG2JaQknWBdMkZOk58L7zgqunqpJFU7RY OJD93rdPGIR/gUgAkWZ8L01x/HWxocJ68J72fBB78mL3eCSlXrWnl8Hra1iBNs6D sz0cjsqZLRJTTbH/QjR2yzfKDL6vSharUL/8o/0JenTpm2MdV4n+XDjAq0iTgTCI zxlsINSwQMYKTGuyBshoxkWFCb7tVCkIIiNLOSwLBbyf+d5H+D88vJjRL59fsL00 q+KoPnnAh5BvXQX6nDXRugt6LbtxL6io8lOxYYbkIeGUiNBsjCTCMSOXjIHH9y2v yqAZ3jKlfC2HER/fcCR+jk5AGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMueH5GY oUzNkrJt9uAlOEx4PT8IMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf Wi14ZlNsUTZJRHBUNDg1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWm4wV8SbTVs96Ijoz3RIX288Ge11mW2JoTyAlJsJCBT8S4zWh7ui0 oQmFUXqwtQZFwMczgzJYtz3Sxucq5ZrKF4QrxtCQ2t+2diDOE534uzKl7dl4kows 50Fi3RAWGbItOF1xTkEvxBY8r9UCAjxJz8wU7wXH3ja88qqSGSNwA47rTE+N4YpS um2SNm+8GLEeeIwEEHs+yLM3TgXn2NGtdZi4n2vWNQZjFq3uCQJtMeC8MG37YBUB rHF/DWrh/uUikWfG/k1A3aEwEE0cyQQuCt2MT6L92KBB0rzEr04QAt2PS13Taxoj /8myeWJFefV+57sDeOoSJBEm5oAMnA2V -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:12 2025 by rpki-client