$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json) Hash identifier: TmtuThv7HRgHpIorIJPpe0xSmed2QVuw6oiAwT1rWu0= Subject key identifier: F5:6A:D4:6B:E0:AB:7A:D1:31:03:52:F7:19:C1:70:C7:11:4D:AD:9A Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1DCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft Manifest number: 1DC6 Signing time: Sat 18 Oct 2025 16:24:42 +0000 Manifest this update: Sat 18 Oct 2025 16:24:41 +0000 Manifest next update: Sat 25 Oct 2025 16:24:41 +0000 Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: sFQuqNhktdEGcJralMhDJBqn4zadfkLewzPYu/63ErE=) 2: A17F07705FA311EAB1BB612CC4F9AE02.roa (hash: syqFyO0I3Vmcn5bJeGcao6zGLsNLne0ee+UOpu0s0a0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7631 (0x1dcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: Oct 18 16:24:41 2025 GMT Not After : Oct 25 16:24:41 2025 GMT Subject: CN=68f3bf49-277f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:9f:ed:82:74:ef:79:bc:91:2f:9e:94:71: 24:d2:2c:56:ed:fa:ce:c2:e7:4c:92:30:76:b4:d6: 3c:70:34:73:e7:a0:38:3f:9c:b7:77:1c:c2:3a:e7: b7:ed:5f:e4:4e:be:d5:03:b8:8b:d2:6d:1b:f5:71: 59:2a:77:4f:06:a9:84:b8:a1:e4:30:59:85:43:8d: c8:dc:0d:89:8e:ad:13:02:a0:ac:0a:99:ab:51:7a: 8d:8b:ca:2d:13:af:26:0d:e2:19:56:73:9a:95:2d: 55:46:4e:a8:af:a9:c7:2e:0c:5d:35:5d:71:0c:eb: 66:2a:f0:c4:7b:e6:e1:1a:69:f6:56:cf:b6:d9:f0: b4:43:bf:00:a5:76:cc:ed:71:31:36:4d:ed:1d:95: 70:63:5e:7f:e4:eb:ca:05:6e:64:d5:fe:0f:0d:da: 4a:94:d4:e7:84:21:8a:28:c8:af:8e:ed:2c:bc:c8: 75:e2:75:26:bc:03:30:ba:76:80:dc:7e:5c:62:b5: 67:ba:53:e2:b9:63:7b:d4:7a:17:7e:9c:0a:2d:f1: c3:95:95:56:55:f0:19:4e:31:34:ac:3f:4f:27:fc: 0e:ce:ee:c5:b8:2d:ee:7a:54:2a:08:37:f7:99:6d: 52:0f:a8:22:75:6a:68:3c:91:49:07:56:79:87:ba: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6A:D4:6B:E0:AB:7A:D1:31:03:52:F7:19:C1:70:C7:11:4D:AD:9A X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:61:45:80:43:07:e0:70:69:ef:cc:fe:65:30:66:30:e5: 40:a7:2c:54:27:f6:d0:f0:cd:bf:ee:c0:97:e2:59:86:85:e8: b9:e6:74:ab:3f:79:6f:1c:36:32:b7:99:0e:1c:3c:f7:da:1e: 09:ea:e9:17:f3:1d:7c:52:1f:86:19:e2:c1:bf:6a:67:38:89: 9a:95:cd:5f:9c:03:21:bd:6b:a1:d4:4e:ec:0f:c7:88:4f:53: 1d:af:6e:d7:26:39:b9:55:eb:b0:1f:02:95:e7:55:5f:ce:80: 82:8a:fb:7a:95:b6:8c:1a:93:2b:be:81:80:58:2b:30:72:eb: 66:31:68:55:d3:2f:ea:a8:49:06:27:7a:31:ce:da:a6:b1:06: 34:cc:e4:c0:f0:f7:0b:8c:d3:b3:e4:49:f8:73:1c:f9:e4:42: d9:fd:55:87:be:80:29:6e:b4:1d:9c:7b:15:2e:ef:dd:af:2b: 76:67:e3:04:ed:bb:45:9c:47:a1:aa:3e:51:58:15:6c:fd:39: 2c:0d:48:55:5c:14:6d:f4:a1:e3:93:22:7a:77:b5:86:5b:ac: 93:ba:fd:af:3e:fa:be:f6:30:9f:2f:33:d8:46:37:e5:77:e1: 9b:86:f7:99:53:64:21:7b:48:c9:55:f2:cc:66:0f:30:b5:61: 4b:a6:87:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjUxMDE4MTYyNDQxWhcNMjUxMDI1MTYyNDQxWjAYMRYwFAYD VQQDEw02OGYzYmY0OS0yNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzOf7YJ073m8kS+elHEk0ixW7frOwudMkjB2tNY8cDRz56A4P5y3dxzCOue3 7V/kTr7VA7iL0m0b9XFZKndPBqmEuKHkMFmFQ43I3A2Jjq0TAqCsCpmrUXqNi8ot E68mDeIZVnOalS1VRk6or6nHLgxdNV1xDOtmKvDEe+bhGmn2Vs+22fC0Q78ApXbM 7XExNk3tHZVwY15/5OvKBW5k1f4PDdpKlNTnhCGKKMivju0svMh14nUmvAMwunaA 3H5cYrVnulPiuWN71HoXfpwKLfHDlZVWVfAZTjE0rD9PJ/wOzu7FuC3uelQqCDf3 mW1SD6gidWpoPJFJB1Z5h7q3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVq1Gvg q3rRMQNS9xnBcMcRTa2aMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV OTZMNVVmc1NoSDRILXFrSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBytGFFgEMH4HBp78z+ZTBmMOVApyxUJ/bQ8M2/7sCX4lmGhei55nSr P3lvHDYyt5kOHDz32h4J6ukX8x18Uh+GGeLBv2pnOImalc1fnAMhvWuh1E7sD8eI T1Mdr27XJjm5VeuwHwKV51VfzoCCivt6lbaMGpMrvoGAWCswcutmMWhV0y/qqEkG J3oxztqmsQY0zOTA8PcLjNOz5En4cxz55ELZ/VWHvoApbrQdnHsVLu/dryt2Z+ME 7btFnEehqj5RWBVs/TksDUhVXBRt9KHjkyJ6d7WGW6yTuv2vPvq+9jCfLzPYRjfl d+GbhveZU2Qhe0jJVfLMZg8wtWFLpoeS -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:33 2025 by rpki-client