$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: biktDzDecJR7/cRtr/JGv0lnMagKoq25214k8m3IpuU= Subject key identifier: 79:1C:B9:2A:0A:AC:41:A1:BF:93:8F:CD:8B:DA:78:98:3A:74:3B:E6 Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0AF1 Signing time: Sat 18 Oct 2025 20:19:59 +0000 Manifest this update: Sat 18 Oct 2025 20:19:58 +0000 Manifest next update: Sat 25 Oct 2025 20:19:58 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: QqIN4QgT3LbUGjkylpfpMyGhCxgw057u3ZuXmsHkJ5o=) 2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=) 3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=) 4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2824 (0xb08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Oct 18 20:19:58 2025 GMT Not After : Oct 25 20:19:58 2025 GMT Subject: CN=68f3f66e-6b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:f8:5b:55:3e:0d:0c:7b:ea:38:aa:17:53: 86:2b:ac:bf:ca:86:26:28:e8:33:da:1c:cc:48:ae: ec:1a:ab:aa:06:65:7e:f5:02:de:1c:96:3f:fb:00: 25:d6:03:4f:13:fd:48:f8:58:c2:31:c0:f9:99:c1: cf:c1:46:04:de:0c:e9:35:16:ef:dd:e9:fe:ad:61: 94:6d:02:57:30:b3:64:d9:59:11:f0:99:06:b3:9a: cf:b2:ae:49:8c:1c:d4:f8:5e:9c:0e:69:2c:d6:6e: 4a:d9:1d:61:29:8d:08:fe:e5:63:e2:ed:bf:c0:f7: d3:8d:8d:3a:b2:bb:e7:d6:e4:d7:db:d6:4a:78:e1: dc:fe:42:46:2d:33:fe:59:69:d5:fa:ac:da:e4:22: 60:f4:01:14:ab:e0:30:10:9d:66:02:ad:e1:f7:4e: e0:31:aa:79:62:28:1a:08:09:b9:13:bf:5a:37:88: 1c:a7:a7:50:0b:35:b7:b1:4f:dc:c6:07:8d:36:d6: ca:87:75:a6:ef:40:e3:12:ca:3d:15:4a:6f:5d:e3: 0f:32:37:6f:54:3d:9f:26:e5:81:e6:fa:fa:c2:a9: a8:a5:36:1f:ab:23:6d:aa:54:b5:9b:e3:1b:78:3d: c6:f6:7b:dd:5d:da:6e:82:03:41:e7:91:5c:d1:51: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:B9:2A:0A:AC:41:A1:BF:93:8F:CD:8B:DA:78:98:3A:74:3B:E6 X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:90:12:ae:61:d6:47:68:30:5e:71:12:79:d0:5c:1e:32:07: 34:2b:7b:43:71:2d:6f:00:32:65:16:e2:66:2b:9c:5d:40:42: 70:37:90:b5:e5:47:f3:f8:b6:70:49:4f:f6:0a:ae:ce:a4:50: 0a:f7:69:4f:8b:52:cf:bc:22:d0:aa:11:65:f0:d5:5a:e0:91: 3d:ac:dc:ee:e5:af:16:4c:cc:b4:20:d1:38:74:9a:c5:01:ec: f6:e2:03:f0:2c:69:93:52:e5:ae:3a:0c:92:6f:00:ff:33:26: 29:72:e8:e8:b7:4a:bd:1d:e8:c3:09:07:46:01:4f:13:e5:87: 33:71:2d:99:33:fa:50:81:13:36:7d:16:8b:28:c5:21:9a:8f: 89:0f:18:c8:12:bd:b2:2b:98:4a:c8:c1:1c:64:53:13:d5:75: 72:73:15:b3:4a:84:90:ee:b3:41:37:0c:3d:1d:15:30:39:50: 58:4e:e1:c6:91:d5:a9:3b:9b:7a:a0:9b:c8:62:8c:21:05:0b: 01:e5:8d:27:9f:56:9a:33:c6:5b:2c:cd:8d:f3:c3:0e:9c:5e: bd:5c:30:64:eb:2d:2f:d8:51:3a:05:0b:de:0e:62:29:1e:ea: 00:5e:04:13:9c:0b:fd:20:33:d3:f3:59:05:f8:2c:50:1c:e1: 46:12:ea:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjUxMDE4MjAxOTU4WhcNMjUxMDI1MjAxOTU4WjAYMRYwFAYD VQQDEw02OGYzZjY2ZS02YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr034W1U+DQx76jiqF1OGK6y/yoYmKOgz2hzMSK7sGquqBmV+9QLeHJY/+wAl 1gNPE/1I+FjCMcD5mcHPwUYE3gzpNRbv3en+rWGUbQJXMLNk2VkR8JkGs5rPsq5J jBzU+F6cDmks1m5K2R1hKY0I/uVj4u2/wPfTjY06srvn1uTX29ZKeOHc/kJGLTP+ WWnV+qza5CJg9AEUq+AwEJ1mAq3h907gMap5YigaCAm5E79aN4gcp6dQCzW3sU/c xgeNNtbKh3Wm70DjEso9FUpvXeMPMjdvVD2fJuWB5vr6wqmopTYfqyNtqlS1m+Mb eD3G9nvdXdpuggNB55Fc0VGS2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkcuSoK rEGhv5OPzYvaeJg6dDvmMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnkBKuYdZHaDBecRJ50FweMgc0K3tDcS1vADJlFuJmK5xdQEJwN5C1 5Ufz+LZwSU/2Cq7OpFAK92lPi1LPvCLQqhFl8NVa4JE9rNzu5a8WTMy0INE4dJrF Aez24gPwLGmTUuWuOgySbwD/MyYpcujot0q9HejDCQdGAU8T5YczcS2ZM/pQgRM2 fRaLKMUhmo+JDxjIEr2yK5hKyMEcZFMT1XVycxWzSoSQ7rNBNww9HRUwOVBYTuHG kdWpO5t6oJvIYowhBQsB5Y0nn1aaM8ZbLM2N88MOnF69XDBk6y0v2FE6BQveDmIp HuoAXgQTnAv9IDPT81kF+CxQHOFGEupL -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:57 2025 by rpki-client