$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: kaYUXN0R4PmpralnlKbvlYaZfCjjTRbalPK/hs4unP0= Subject key identifier: 1B:FC:96:06:5E:6B:F9:48:39:CA:0C:2C:D0:72:8E:4B:E0:75:19:B5 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0C71 Signing time: Sat 18 Oct 2025 19:17:00 +0000 Manifest this update: Sat 18 Oct 2025 19:17:00 +0000 Manifest next update: Sat 25 Oct 2025 19:17:00 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: ykF9dLWfXtGkLOQmNwyF6evVRPi7Efobgbuuwk/+LQQ=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Oct 18 19:17:00 2025 GMT Not After : Oct 25 19:17:00 2025 GMT Subject: CN=68f3e7ac-05e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:c2:1d:da:a4:7d:7c:65:a5:7b:68:2f:d2: 4b:e8:66:56:f7:41:35:85:cc:99:7c:77:a0:90:d9: 5e:5b:2b:63:66:0a:42:83:b5:c3:40:06:1a:cd:c0: 48:74:44:17:05:73:87:d9:75:c5:9d:8c:92:81:f9: 70:14:cb:a2:4a:f1:de:8c:16:66:ee:65:1f:80:90: 50:7a:13:ba:51:33:bf:f2:2a:9a:44:fe:36:92:7f: eb:d8:78:96:5e:fa:48:77:4c:d2:e9:b5:c8:ec:29: 28:13:bb:d8:33:c8:d5:f6:e7:0a:9c:47:b5:51:d9: b5:03:27:3a:4c:64:07:c1:d4:bf:8b:ff:e0:59:76: 55:91:0f:e9:7a:f0:6c:83:b3:55:a2:91:72:38:1a: 28:a1:7f:cb:cf:f4:3c:50:5b:51:94:74:58:6b:cf: 9f:be:46:8d:48:7d:17:fb:92:85:77:75:76:a3:00: 13:7e:68:66:5d:14:33:ae:d5:78:61:b5:bc:61:d0: 53:f8:bb:8c:4c:32:d1:b8:e9:1d:c4:50:08:ea:bb: 09:73:68:df:27:ee:06:8d:38:2e:4b:d0:a3:7e:48: eb:e5:b3:50:5f:0b:7b:89:55:0d:d4:16:8b:bf:3e: 22:b6:c8:61:b3:0a:87:67:72:ef:71:6b:85:83:71: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FC:96:06:5E:6B:F9:48:39:CA:0C:2C:D0:72:8E:4B:E0:75:19:B5 X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:46:21:6f:36:28:ee:ea:f0:97:64:b9:4b:41:f3:c2:f8:0d: 85:ad:bb:19:bc:12:ac:ad:55:22:c4:cd:31:5a:0f:4c:7e:2e: ba:fd:8d:13:22:ff:29:06:05:5e:32:ad:a0:30:6f:8e:cb:86: 3f:82:a1:c9:7a:7e:30:30:db:3e:40:92:8a:aa:16:95:30:dc: 0d:e2:0c:92:5f:07:6d:79:d7:de:70:8a:95:39:59:33:49:0b: 2d:30:8c:80:af:11:b9:07:d2:3b:cb:d3:d4:4e:c2:88:59:c1: b4:67:3b:5f:cc:04:f5:cc:72:95:37:88:22:a1:4d:2f:49:ea: f9:22:f0:47:82:7c:ab:7f:d7:da:8e:09:36:c3:3f:a3:d2:7c: a6:1f:5b:97:c6:ea:97:6c:dd:4f:ed:bf:0f:4f:2d:43:12:dc: 36:11:fa:cf:4c:a2:a0:3d:6b:72:14:70:da:59:d8:8d:8e:92: be:af:c9:a6:dc:05:44:03:20:00:99:94:26:c8:c7:d6:85:37: 39:63:82:3a:cb:8c:d1:ca:cb:fc:92:55:60:72:f4:f1:b7:e5: a8:a4:3d:d1:f8:4b:12:f6:d2:74:55:56:b0:70:32:e2:c3:54: 7c:79:b2:19:7d:6a:1a:e8:6a:f2:4f:df:0b:22:33:3e:df:b1: 3a:0c:da:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUxMDE4MTkxNzAwWhcNMjUxMDI1MTkxNzAwWjAYMRYwFAYD VQQDEw02OGYzZTdhYy0wNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd/CHdqkfXxlpXtoL9JL6GZW90E1hcyZfHegkNleWytjZgpCg7XDQAYazcBI dEQXBXOH2XXFnYySgflwFMuiSvHejBZm7mUfgJBQehO6UTO/8iqaRP42kn/r2HiW XvpId0zS6bXI7CkoE7vYM8jV9ucKnEe1Udm1Ayc6TGQHwdS/i//gWXZVkQ/pevBs g7NVopFyOBoooX/Lz/Q8UFtRlHRYa8+fvkaNSH0X+5KFd3V2owATfmhmXRQzrtV4 YbW8YdBT+LuMTDLRuOkdxFAI6rsJc2jfJ+4GjTguS9Cjfkjr5bNQXwt7iVUN1BaL vz4itshhswqHZ3LvcWuFg3GPcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv8lgZe a/lIOcoMLNByjkvgdRm1MB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBORiFvNiju6vCXZLlLQfPC+A2FrbsZvBKsrVUixM0xWg9Mfi66/Y0T Iv8pBgVeMq2gMG+Oy4Y/gqHJen4wMNs+QJKKqhaVMNwN4gySXwdtedfecIqVOVkz SQstMIyArxG5B9I7y9PUTsKIWcG0ZztfzAT1zHKVN4gioU0vSer5IvBHgnyrf9fa jgk2wz+j0nymH1uXxuqXbN1P7b8PTy1DEtw2EfrPTKKgPWtyFHDaWdiNjpK+r8mm 3AVEAyAAmZQmyMfWhTc5Y4I6y4zRysv8klVgcvTxt+WopD3R+EsS9tJ0VVawcDLi w1R8ebIZfWoa6GryT98LIjM+37E6DNoD -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:24 2025 by rpki-client