$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json) Hash identifier: ni/6HJ7t4tFTi62T11Z4iXBrH2eRW8H/WKUGkaIl0Ic= Subject key identifier: F7:C4:81:5D:59:59:F3:89:F6:78:7B:C3:78:EB:13:30:F9:21:37:57 Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft Manifest number: 09D0 Signing time: Sat 18 Oct 2025 20:59:35 +0000 Manifest this update: Sat 18 Oct 2025 20:59:34 +0000 Manifest next update: Sat 25 Oct 2025 20:59:34 +0000 Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: D333XJ+szE1EO40861RBguackntdnxkivFLMs/ngtfE=) 2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: OjAcbEOp0amxQNPqpOvSSPyQnwHnVe9MoEWy3pew2ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Validity Not Before: Oct 18 20:59:34 2025 GMT Not After : Oct 25 20:59:34 2025 GMT Subject: CN=68f3ffb7-4bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:78:2d:93:d1:96:57:ca:f0:3b:6a:2a:e7:1e: 40:fd:44:e6:6d:bd:22:d9:d4:8b:e3:23:52:af:94: f3:6f:7e:03:5c:65:e7:71:8e:27:1e:36:ca:22:4b: d5:93:8a:d0:be:64:8e:e1:b1:98:ff:40:83:91:ae: 0e:ec:76:7c:e7:10:1b:5a:43:2f:f2:80:e0:7e:34: d5:da:50:43:53:49:dd:1b:59:f9:85:5a:f5:6a:b5: c6:fa:f7:f1:6c:8b:58:f5:3e:de:16:83:03:bb:25: e7:22:9e:3d:b6:bf:72:f2:8f:37:ac:b6:b3:b9:fe: c3:e2:3d:f2:16:59:96:76:bd:c9:a1:0c:d2:ea:f9: 81:44:67:b0:36:36:2d:ed:8a:10:59:5a:8b:d3:f0: b0:6b:f4:17:a0:cb:ed:90:25:d3:93:06:2b:68:74: 22:8d:96:07:a3:76:81:1b:3f:1b:87:86:9f:38:d6: 9b:a2:52:62:9f:21:22:d3:d6:5d:f1:b3:31:1a:fb: 5b:fa:5c:bf:0d:42:95:ff:c1:6a:d9:41:79:a3:b5: 41:2f:fe:e6:cb:32:9c:c5:67:02:da:bf:4d:77:4b: a4:e6:03:e0:21:0b:0a:21:6b:8d:3f:17:36:0b:ac: e5:be:6b:08:ff:65:e1:21:8a:f9:b9:c5:c2:19:f3: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C4:81:5D:59:59:F3:89:F6:78:7B:C3:78:EB:13:30:F9:21:37:57 X509v3 Authority Key Identifier: keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ed:76:46:e5:34:bf:b3:63:0f:02:90:ae:e2:13:30:a3:c2: 88:56:03:47:ab:09:f7:6b:42:f7:b6:2c:bf:6f:9a:53:ac:2a: 32:63:b9:8a:51:d0:9b:20:8b:96:97:d4:d5:24:3c:6d:23:e6: 92:37:54:8b:46:80:4e:a3:0e:43:e8:2f:95:0b:6b:28:9f:6d: 9c:0e:cb:eb:9e:4d:7b:8c:4e:86:c7:c0:f5:b7:f1:82:a5:79: 16:27:a8:bd:64:31:14:aa:11:83:51:58:ee:4b:29:fb:fc:3b: 56:63:7c:b5:81:38:77:b5:ad:89:42:99:8f:70:4c:cc:4f:09: e0:8d:30:1b:f6:e6:87:43:21:bb:c9:56:ff:06:4c:aa:fc:7a: 90:09:d4:a8:16:c3:30:a0:ff:04:39:dd:e7:cc:dd:39:a6:1e: 4b:86:0b:13:e0:c2:14:21:91:a2:e3:e0:a7:7f:8e:75:af:fa: bc:12:ee:20:9f:64:e6:66:0b:9f:64:8e:45:be:16:37:d7:ec: 98:83:e6:15:c5:2e:75:13:42:e9:68:79:6a:f4:00:2b:24:21: 7b:bf:d0:38:43:6a:b3:e0:db:0d:04:25:03:52:13:0c:11:46: 3f:cd:3f:e4:81:34:84:2c:c3:e2:ab:03:eb:70:fd:dd:9d:ab: 35:99:fc:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw Q0M2RjI5MEIwHhcNMjUxMDE4MjA1OTM0WhcNMjUxMDI1MjA1OTM0WjAYMRYwFAYD VQQDEw02OGYzZmZiNy00YmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33gtk9GWV8rwO2oq5x5A/UTmbb0i2dSL4yNSr5Tzb34DXGXncY4nHjbKIkvV k4rQvmSO4bGY/0CDka4O7HZ85xAbWkMv8oDgfjTV2lBDU0ndG1n5hVr1arXG+vfx bItY9T7eFoMDuyXnIp49tr9y8o83rLazuf7D4j3yFlmWdr3JoQzS6vmBRGewNjYt 7YoQWVqL0/Cwa/QXoMvtkCXTkwYraHQijZYHo3aBGz8bh4afONabolJinyEi09Zd 8bMxGvtb+ly/DUKV/8Fq2UF5o7VBL/7myzKcxWcC2r9Nd0uk5gPgIQsKIWuNPxc2 C6zlvmsI/2XhIYr5ucXCGfMp9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfEgV1Z WfOJ9nh7w3jrEzD5ITdXMB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2 NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC07XZG5TS/s2MPApCu4hMwo8KIVgNHqwn3a0L3tiy/b5pTrCoyY7mK UdCbIIuWl9TVJDxtI+aSN1SLRoBOow5D6C+VC2son22cDsvrnk17jE6Gx8D1t/GC pXkWJ6i9ZDEUqhGDUVjuSyn7/DtWY3y1gTh3ta2JQpmPcEzMTwngjTAb9uaHQyG7 yVb/Bkyq/HqQCdSoFsMwoP8EOd3nzN05ph5LhgsT4MIUIZGi4+Cnf451r/q8Eu4g n2TmZgufZI5FvhY31+yYg+YVxS51E0LpaHlq9AArJCF7v9A4Q2qz4NsNBCUDUhMM EUY/zT/kgTSELMPiqwPrcP3dnas1mfxy -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:29 2025 by rpki-client