$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft File: jwhmaAoC5LoOvh6PIljuKBzUPv4.mft (raw, json) Hash identifier: Mu8QDBPchaIxwB40ib+E7wVmWduyqs2JH1BTIEEyHNU= Subject key identifier: 00:C1:AC:01:76:E3:D4:82:B4:81:D8:09:FD:5A:4D:96:92:39:CD:29 Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE Certificate issuer: /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft Manifest number: 36 Signing time: Sun 19 Oct 2025 11:02:42 +0000 Manifest this update: Sun 19 Oct 2025 11:02:42 +0000 Manifest next update: Sun 26 Oct 2025 11:02:42 +0000 Files and hashes: 1: jwhmaAoC5LoOvh6PIljuKBzUPv4.crl (hash: ifiORLCErutHKwnjuCA3M7d/HfgvnkBWgyYw8uqAFs0=) 2: 9D1CBEB65D8111F0A04DD550C4F9AE02.roa (hash: WD6JX9ZeI2PyoWb+KcklrsjlIHW009aV5ZILyIaO+Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE Validity Not Before: Oct 19 11:02:42 2025 GMT Not After : Oct 26 11:02:42 2025 GMT Subject: CN=68f4c552-fecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:16:e1:13:e4:8d:97:b0:3f:c4:73:ba:b7:79: 7a:f5:f5:a6:2b:30:88:55:80:85:7b:d7:05:63:8c: 79:b0:df:d9:85:2b:9f:db:40:61:23:f0:24:fe:60: 40:f2:23:8b:35:b1:59:10:af:63:5a:db:d9:9c:c4: 3d:7d:5f:aa:1f:7d:96:76:2e:45:92:be:04:b3:35: ce:f8:dc:6a:64:ba:45:c6:76:45:99:61:74:88:c1: 1d:95:0c:33:80:2f:e4:2d:7e:4a:ad:b2:e7:97:cb: 8e:eb:7b:cf:1a:7f:c5:fb:d9:39:a7:e9:59:45:dc: d8:ab:52:56:e4:16:17:b3:8b:41:39:41:aa:6b:9e: 42:25:93:e4:d4:ec:11:2b:99:27:eb:14:d5:d2:83: bb:f6:3e:bd:b6:fa:0a:9b:36:f5:c3:41:ad:e4:4d: 75:9b:5f:94:19:c5:eb:14:d6:8c:42:72:1e:9f:dd: 01:9d:69:ae:2d:d9:e2:92:da:86:9e:68:d2:b3:ec: b4:94:67:6c:81:68:de:fe:b5:d2:6b:35:ae:9c:1b: 5c:98:1d:70:b5:1a:d0:c3:7f:95:f0:63:c1:b8:2b: 06:1a:7b:53:73:34:d5:3d:c6:19:e5:27:08:02:62: 8d:0b:e2:12:37:f7:d8:db:1d:c1:99:c3:1e:31:4c: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:AC:01:76:E3:D4:82:B4:81:D8:09:FD:5A:4D:96:92:39:CD:29 X509v3 Authority Key Identifier: keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:33:df:a0:27:d0:0b:61:85:b3:2d:40:ba:df:e2:0f:23:12: e2:85:9f:4b:3e:dc:b7:5d:a1:70:f9:4a:fe:d8:86:8b:60:16: 19:90:bd:52:57:6b:aa:53:46:ed:03:8d:b0:7c:52:7e:64:e0: 36:83:61:7a:fd:da:24:2a:88:2b:8a:bd:d3:fa:4d:38:77:ec: d9:81:a1:24:03:95:9d:28:e7:13:cc:77:4b:6d:3a:1e:c0:cf: 8d:50:ba:a1:55:49:bb:f6:b9:ec:75:e4:47:97:92:10:6b:fb: 29:80:a1:55:d8:7b:43:c1:ab:0d:39:9e:f0:85:15:e9:ae:5e: 20:6e:e6:87:99:ac:63:21:71:d5:66:ee:7b:27:d7:4b:ff:99: e9:3d:15:45:09:a6:5c:70:79:3c:ef:a1:32:a1:ba:6d:f3:0d: aa:86:0d:b5:10:18:aa:40:fc:5c:67:05:57:22:63:3b:f1:96: 4f:29:fc:58:54:a9:45:a3:eb:f1:e4:04:65:fe:7a:a7:7f:87: 18:94:b0:70:9a:fe:3f:5b:c8:12:4b:8c:7f:1c:f4:26:22:0f: 8e:c9:38:64:41:44:10:37:ab:77:78:ef:d1:a0:74:b6:38:e3: d4:83:86:95:66:63:18:cb:dc:e4:1b:42:9c:d0:c5:d3:c4:e9: 11:36:58:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoOEYwODY2NjgwQTAyRTRCQTBFQkUxRThGMjI1OEVFMjgx Q0Q0M0VGRTAeFw0yNTEwMTkxMTAyNDJaFw0yNTEwMjYxMTAyNDJaMBgxFjAUBgNV BAMTDTY4ZjRjNTUyLWZlY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtFuET5I2XsD/Ec7q3eXr19aYrMIhVgIV71wVjjHmw39mFK5/bQGEj8CT+YEDy I4s1sVkQr2Na29mcxD19X6offZZ2LkWSvgSzNc743GpkukXGdkWZYXSIwR2VDDOA L+QtfkqtsueXy47re88af8X72Tmn6VlF3NirUlbkFhezi0E5QaprnkIlk+TU7BEr mSfrFNXSg7v2Pr22+gqbNvXDQa3kTXWbX5QZxesU1oxCch6f3QGdaa4t2eKS2oae aNKz7LSUZ2yBaN7+tdJrNa6cG1yYHXC1GtDDf5XwY8G4KwYae1NzNNU9xhnlJwgC Yo0L4hI399jbHcGZwx4xTKFDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAMGsAXbj 1IK0gdgJ/VpNlpI5zSkwHwYDVR0jBBgwFoAUjwhmaAoC5LoOvh6PIljuKBzUPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzIyMDY2OTdBNUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL2p3aG1hQW9DNUxvT3ZoNlBJbGp1S0J6VVB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvandobWFBb0M1TG9Pdmg2UElsanVLQnpVUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzIyMDY2OTdBNUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL2p3aG1hQW9DNUxv T3ZoNlBJbGp1S0J6VVB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEkz36An0AthhbMtQLrf4g8jEuKFn0s+3LddoXD5Sv7YhotgFhmQvVJX a6pTRu0DjbB8Un5k4DaDYXr92iQqiCuKvdP6TTh37NmBoSQDlZ0o5xPMd0ttOh7A z41QuqFVSbv2uex15EeXkhBr+ymAoVXYe0PBqw05nvCFFemuXiBu5oeZrGMhcdVm 7nsn10v/mek9FUUJplxweTzvoTKhum3zDaqGDbUQGKpA/FxnBVciYzvxlk8p/FhU qUWj6/HkBGX+eqd/hxiUsHCa/j9byBJLjH8c9CYiD47JOGRBRBA3q3d479GgdLY4 49SDhpVmYxjL3OQbQpzQxdPE6RE2WHI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:09 2025 by rpki-client