$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: 9bRP4TAQaI3eo+EhL50Q4kAuiDM8oFhej+wkmuHssks= Subject key identifier: 58:44:A1:65:56:E2:C4:00:85:34:AE:A4:4B:C6:43:FC:E0:87:EB:80 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 0168 Signing time: Wed 05 Nov 2025 04:11:02 +0000 Manifest this update: Wed 05 Nov 2025 04:11:01 +0000 Manifest next update: Wed 12 Nov 2025 04:11:01 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: fJQFN4Vgmxe9MRlcOF13zVdqmyCjd2O495yJ+QifrNw=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: MD/nzbD2nOVlPocaRCfyouATKmI9+KQw4/brLtSFFd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Nov 5 04:11:01 2025 GMT Not After : Nov 12 04:11:01 2025 GMT Subject: CN=690ace56-44fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:b5:17:a2:2c:4d:4c:58:8f:a6:0f:dd:31: f3:bc:4f:9f:5d:83:dd:55:7b:e4:e7:af:f0:12:b2: 0c:40:43:b9:c3:39:48:03:8b:2b:63:b5:bb:69:34: bc:4d:4c:3e:8d:59:3c:77:49:c8:6b:6b:b5:4a:4d: 35:65:91:de:1d:6f:4e:ad:4c:06:1e:5a:81:90:ef: a0:81:8e:e3:fa:36:3f:8e:b1:e8:c8:5b:48:59:23: 3a:76:c7:ed:9d:c5:b0:3a:ee:b5:56:49:8a:df:14: fa:bd:ad:fe:bd:05:57:9f:3b:3e:70:02:3d:62:44: 31:0d:c3:c2:35:1b:65:19:db:0b:e3:83:c7:a0:d0: cc:af:e3:82:c3:46:0e:b9:50:54:e2:a9:ba:97:08: 54:b9:ac:f4:c4:ae:4d:a1:60:8f:17:3e:40:4c:0b: 90:db:63:58:15:5e:d0:d8:1f:f5:66:d8:d4:d8:73: 2f:eb:f7:2c:27:a2:2e:a4:ad:83:92:77:b1:65:4d: 14:4a:48:49:dd:1c:86:e6:29:78:eb:be:10:12:45: 2a:53:3f:df:69:c7:c1:14:81:db:1f:6c:e1:e3:39: 0f:c7:a7:d4:b1:4a:5b:6e:76:05:02:25:a6:27:ac: 74:81:4b:af:c4:38:7e:d1:e1:ce:b5:ed:09:11:15: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:44:A1:65:56:E2:C4:00:85:34:AE:A4:4B:C6:43:FC:E0:87:EB:80 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7d:8d:e8:b5:b0:dd:72:0f:a5:c6:f8:4e:65:9b:3a:3a:a5: 02:22:8a:6d:10:27:f8:95:8d:6f:a1:e1:14:8a:2b:fb:08:1c: 14:3a:3f:27:14:49:98:d6:6c:3a:84:10:0c:81:76:d7:2c:76: 4d:18:e7:81:42:7e:44:dc:45:49:db:f1:1d:65:8c:80:59:e6: db:5e:a3:7b:9c:e6:15:f8:01:2e:cb:8d:6c:81:78:b6:e2:c7: 4f:29:77:8d:f6:c5:19:6c:22:8b:d7:1c:04:60:a0:14:b0:3d: 89:78:e6:86:6b:06:a7:40:90:d2:96:0d:88:25:c7:b9:0f:ec: 29:ad:fc:b5:6c:5d:0f:c2:1d:ab:5d:6f:b0:25:94:f6:17:be: 57:0f:76:50:91:12:47:d4:af:f6:81:86:ff:eb:0e:6b:c7:d2: 38:83:7a:4c:6e:90:63:27:6b:25:4c:36:46:0f:8d:7a:88:6d: f2:49:f4:5c:d8:76:69:2b:de:31:bc:ec:23:0e:a5:41:ea:03: d5:1a:cc:e3:0e:1b:0b:be:f3:00:de:d1:9b:11:07:e6:9f:4b: 58:40:4b:5b:07:77:14:c8:19:98:3f:f8:d7:7c:ff:48:3f:44: bd:3c:b2:ad:5f:00:da:14:ca:ed:5a:b1:07:91:30:6e:fd:92: ee:0b:0a:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUxMTA1MDQxMTAxWhcNMjUxMTEyMDQxMTAxWjAYMRYwFAYD VQQDEw02OTBhY2U1Ni00NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJi1F6IsTUxYj6YP3THzvE+fXYPdVXvk56/wErIMQEO5wzlIA4srY7W7aTS8 TUw+jVk8d0nIa2u1Sk01ZZHeHW9OrUwGHlqBkO+ggY7j+jY/jrHoyFtIWSM6dsft ncWwOu61VkmK3xT6va3+vQVXnzs+cAI9YkQxDcPCNRtlGdsL44PHoNDMr+OCw0YO uVBU4qm6lwhUuaz0xK5NoWCPFz5ATAuQ22NYFV7Q2B/1ZtjU2HMv6/csJ6IupK2D knexZU0USkhJ3RyG5il4674QEkUqUz/facfBFIHbH2zh4zkPx6fUsUpbbnYFAiWm J6x0gUuvxDh+0eHOte0JERVHfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhEoWVW 4sQAhTSupEvGQ/zgh+uAMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALfY3otbDdcg+lxvhOZZs6OqUCIoptECf4lY1voeEUiiv7CBwUOj8n FEmY1mw6hBAMgXbXLHZNGOeBQn5E3EVJ2/EdZYyAWebbXqN7nOYV+AEuy41sgXi2 4sdPKXeN9sUZbCKL1xwEYKAUsD2JeOaGawanQJDSlg2IJce5D+wprfy1bF0Pwh2r XW+wJZT2F75XD3ZQkRJH1K/2gYb/6w5rx9I4g3pMbpBjJ2slTDZGD416iG3ySfRc 2HZpK94xvOwjDqVB6gPVGszjDhsLvvMA3tGbEQfmn0tYQEtbB3cUyBmYP/jXfP9I P0S9PLKtXwDaFMrtWrEHkTBu/ZLuCwot -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:43 2025 by rpki-client