$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: NmOL/iUmRgPubbbz3xIA4eOskQ9uKAMq101P4MTst7g= Subject key identifier: 28:87:A2:22:99:D3:08:53:6A:C3:05:A4:64:4A:75:C4:D4:A2:C7:79 Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 053D Signing time: Sun 19 Oct 2025 01:13:57 +0000 Manifest this update: Sun 19 Oct 2025 01:13:56 +0000 Manifest next update: Sun 26 Oct 2025 01:13:56 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: wbIs6o8qZlhCDrTh1l3PkeTM1kTbtZtvD+ai/AcfJW8=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Oct 19 01:13:56 2025 GMT Not After : Oct 26 01:13:56 2025 GMT Subject: CN=68f43b54-866a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:1b:25:a7:ff:ce:a4:e3:0d:03:d5:66:94: 5e:93:46:5e:de:9a:ff:7f:2d:a1:2f:95:6a:b3:db: c1:b4:4f:bb:1f:00:d6:a5:76:cd:e8:5f:23:99:d0: 24:b6:44:ca:9c:a9:b2:d7:63:0f:0d:26:a7:f1:7b: 31:cb:26:a5:02:ef:6b:a7:9f:29:d0:d9:38:f8:d9: 61:28:63:f6:8c:ed:9b:c0:3b:1f:83:1f:a2:36:a2: 03:50:61:71:2a:bf:af:7c:23:27:59:bd:e1:47:f3: 28:9a:3d:02:e0:38:e5:88:8f:73:69:3d:b2:0a:03: 24:b5:77:dd:f0:01:9e:10:56:2a:d5:2c:1b:9f:22: 69:a7:2e:cc:32:a6:ab:35:13:26:44:04:1b:fa:fd: 02:0f:bd:ff:5e:18:52:21:e5:d4:16:34:04:71:d8: ad:93:b6:2f:8f:88:99:3d:6e:db:b7:b7:bf:23:2b: a3:a5:f8:dd:f0:1b:84:fd:74:1e:b4:86:ed:1a:90: 1c:26:c2:3a:54:e2:d8:92:8e:35:0e:5d:f0:de:9f: 60:4a:0d:86:5a:23:bf:23:5d:66:e8:1f:21:19:52: b7:15:48:c4:44:0b:04:43:d2:ba:35:02:b0:ff:bb: b2:ad:9e:32:f3:56:d9:e0:40:4c:16:75:2c:5e:4e: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:A2:22:99:D3:08:53:6A:C3:05:A4:64:4A:75:C4:D4:A2:C7:79 X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:aa:b1:3b:e0:5d:89:07:e1:79:f2:57:a0:44:d3:9d:07:5b: 04:19:d1:49:94:26:bf:5a:e6:6c:ea:3d:f4:dd:9d:8f:c5:00: c9:1a:3d:06:e0:cc:dd:bd:8f:52:c1:46:2b:55:6f:a9:75:be: 71:3c:d0:f7:da:69:ea:81:b6:e4:b5:5b:1b:ca:78:a2:e2:bb: 63:64:95:f8:09:0b:29:1c:6c:59:f5:8a:90:5e:15:d1:ce:6a: 8e:07:3d:ef:3e:5e:ef:5e:07:e2:3b:96:3b:31:77:0f:6e:2a: d1:1e:d9:68:9f:61:a1:bf:3f:cd:68:5c:7b:b7:49:94:c4:fc: 54:46:ed:f3:e8:72:b6:8d:0e:35:82:38:2f:58:69:76:32:ef: 11:5d:fd:62:ed:54:43:7f:b8:80:db:e9:69:9b:d6:c9:49:62: c6:ce:db:8f:a4:80:6d:29:a4:14:bd:3f:a7:86:41:5b:5e:31: a0:e6:48:10:ce:71:cb:57:8c:f4:80:88:ee:53:9e:a7:22:92: 55:1d:8b:d7:ad:33:1d:9a:fe:a6:bb:d1:d1:1e:c7:3c:df:cc: 06:2d:95:5c:71:c3:21:5b:29:5e:06:69:9c:6d:ef:b1:37:b9: 41:47:c3:f4:f2:69:07:fd:1f:17:2e:c4:2f:53:d4:5f:8e:cc: 70:78:ca:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUxMDE5MDExMzU2WhcNMjUxMDI2MDExMzU2WjAYMRYwFAYD VQQDEw02OGY0M2I1NC04NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXobJaf/zqTjDQPVZpRek0Ze3pr/fy2hL5Vqs9vBtE+7HwDWpXbN6F8jmdAk tkTKnKmy12MPDSan8XsxyyalAu9rp58p0Nk4+NlhKGP2jO2bwDsfgx+iNqIDUGFx Kr+vfCMnWb3hR/Momj0C4DjliI9zaT2yCgMktXfd8AGeEFYq1SwbnyJppy7MMqar NRMmRAQb+v0CD73/XhhSIeXUFjQEcditk7Yvj4iZPW7bt7e/Iyujpfjd8BuE/XQe tIbtGpAcJsI6VOLYko41Dl3w3p9gSg2GWiO/I11m6B8hGVK3FUjERAsEQ9K6NQKw /7uyrZ4y81bZ4EBMFnUsXk568wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiHoiKZ 0whTasMFpGRKdcTUosd5MB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLqrE74F2JB+F58legRNOdB1sEGdFJlCa/WuZs6j303Z2PxQDJGj0G 4MzdvY9SwUYrVW+pdb5xPND32mnqgbbktVsbynii4rtjZJX4CQspHGxZ9YqQXhXR zmqOBz3vPl7vXgfiO5Y7MXcPbirRHtlon2Ghvz/NaFx7t0mUxPxURu3z6HK2jQ41 gjgvWGl2Mu8RXf1i7VRDf7iA2+lpm9bJSWLGztuPpIBtKaQUvT+nhkFbXjGg5kgQ znHLV4z0gIjuU56nIpJVHYvXrTMdmv6mu9HRHsc838wGLZVcccMhWyleBmmcbe+x N7lBR8P08mkH/R8XLsQvU9RfjsxweMqC -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:24 2025 by rpki-client