$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: wf41ukBDODNBPdWklQMi8navszDmZ8UObcFnAFTz+2M= Subject key identifier: 8F:28:1C:2B:85:33:1D:95:80:E4:B3:5A:5D:A7:68:B6:4A:DE:9D:21 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 043A Signing time: Wed 05 Nov 2025 00:21:18 +0000 Manifest this update: Wed 05 Nov 2025 00:21:17 +0000 Manifest next update: Wed 12 Nov 2025 00:21:17 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: 9LlvcPYHUbmQ1OW98x1Tb4qcLe6YjQw6wPoKvsRzDmU=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Nov 5 00:21:17 2025 GMT Not After : Nov 12 00:21:17 2025 GMT Subject: CN=690a987d-3270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:31:40:5b:bc:57:11:f9:32:3c:40:ad:27: 5f:be:fd:54:2f:55:e8:d0:56:86:15:49:32:34:16: f3:8f:48:ae:c0:d3:e1:56:6d:ff:84:00:6b:30:15: f0:a2:0a:1f:cf:04:2c:71:c2:6b:59:f9:12:eb:b0: 37:d6:82:09:55:80:a9:ef:66:21:75:fd:0d:57:19: 08:35:2d:b4:17:71:ea:a4:40:88:ef:ab:71:80:9c: d3:06:ea:0f:53:fa:23:a7:54:ee:83:4f:63:63:36: ae:1c:a4:c0:3d:63:fb:5f:c3:9a:1a:59:dd:eb:06: 0d:32:91:eb:f0:31:84:85:0c:e8:90:08:74:40:fc: e4:8f:e9:5c:ec:ef:03:3c:3d:5f:00:76:87:b7:52: c6:c3:86:8a:99:99:3f:0b:9c:4b:e0:5c:c4:c5:de: 13:9a:e1:4f:5a:21:a1:67:d1:70:cc:fb:d7:1c:e2: 3a:41:e2:36:4e:b9:31:54:e3:34:5a:68:e4:d6:21: 00:e9:9f:03:83:f4:44:2d:bb:fc:1f:29:0b:94:bb: 49:46:c4:1c:cc:74:42:ef:f7:c9:f7:ab:43:9b:f3: af:9b:58:a1:48:57:bf:53:5e:c5:71:54:0a:67:a0: c6:10:aa:b3:f0:e0:e6:0f:f9:d6:36:62:d1:25:96: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:1C:2B:85:33:1D:95:80:E4:B3:5A:5D:A7:68:B6:4A:DE:9D:21 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:61:21:2c:ed:90:0e:b8:12:47:6c:bd:8e:8c:9f:3e:12:59: f6:17:08:2d:f2:0c:e0:b0:59:2b:4f:b5:62:56:85:55:c2:18: 05:db:19:7a:d9:5e:1c:1d:9a:3e:80:33:d2:5a:ce:93:dc:93: a8:b6:2b:fa:6b:26:60:fe:00:87:5a:63:26:07:96:6a:0c:6b: ee:81:df:e0:df:6c:20:cf:35:76:3f:b7:ad:b6:4a:a3:75:be: 0b:01:fc:10:d2:ec:e7:a0:c8:c6:c8:3a:c0:68:ca:d4:19:17: b7:f7:c3:1d:8d:44:54:ed:a0:02:69:b9:3d:a5:44:49:f5:7a: c4:c0:19:62:93:1b:1d:a7:7a:f4:3f:1c:5c:fa:16:98:f4:05: c8:5b:14:8f:c3:92:f0:ae:05:a5:c1:d1:c1:cb:25:b9:03:c4: 64:dc:d1:dc:8d:f1:28:a3:f4:00:64:ac:91:45:85:1a:18:e3: b2:d4:1a:11:e5:90:6e:79:3e:7f:0f:25:18:71:58:78:ce:f0: 9b:0a:a9:ae:a3:b0:c4:2e:11:2a:3f:dd:11:0d:45:ea:72:37: 8d:fd:50:5e:93:ce:0e:9a:6f:05:15:44:4d:e7:b6:69:48:ce: e7:ee:09:3a:27:df:0f:d6:2a:29:8c:04:e8:60:f3:5f:1d:34: 6f:9e:67:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUxMTA1MDAyMTE3WhcNMjUxMTEyMDAyMTE3WjAYMRYwFAYD VQQDEw02OTBhOTg3ZC0zMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxExQFu8VxH5MjxArSdfvv1UL1Xo0FaGFUkyNBbzj0iuwNPhVm3/hABrMBXw ogofzwQsccJrWfkS67A31oIJVYCp72Yhdf0NVxkINS20F3HqpECI76txgJzTBuoP U/ojp1Tug09jYzauHKTAPWP7X8OaGlnd6wYNMpHr8DGEhQzokAh0QPzkj+lc7O8D PD1fAHaHt1LGw4aKmZk/C5xL4FzExd4TmuFPWiGhZ9FwzPvXHOI6QeI2TrkxVOM0 Wmjk1iEA6Z8Dg/RELbv8HykLlLtJRsQczHRC7/fJ96tDm/Ovm1ihSFe/U17FcVQK Z6DGEKqz8ODmD/nWNmLRJZZwWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8oHCuF Mx2VgOSzWl2naLZK3p0hMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASYSEs7ZAOuBJHbL2OjJ8+Eln2Fwgt8gzgsFkrT7ViVoVVwhgF2xl6 2V4cHZo+gDPSWs6T3JOotiv6ayZg/gCHWmMmB5ZqDGvugd/g32wgzzV2P7ettkqj db4LAfwQ0uznoMjGyDrAaMrUGRe398MdjURU7aACabk9pURJ9XrEwBlikxsdp3r0 Pxxc+haY9AXIWxSPw5LwrgWlwdHByyW5A8Rk3NHcjfEoo/QAZKyRRYUaGOOy1BoR 5ZBueT5/DyUYcVh4zvCbCqmuo7DELhEqP90RDUXqcjeN/VBek84Omm8FFURN57Zp SM7n7gk6J98P1iopjAToYPNfHTRvnmd6 -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:00 2025 by rpki-client