$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: jYaq0WsG1vTsvm2lMdSsNmZd7OzQTDTcPWcQN8so6qA= Subject key identifier: 00:1A:A9:98:19:F5:E7:3C:A1:76:2A:AD:D3:F4:27:58:95:BE:70:B7 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 01F7 Signing time: Sun 19 Oct 2025 04:54:52 +0000 Manifest this update: Sun 19 Oct 2025 04:54:51 +0000 Manifest next update: Sun 26 Oct 2025 04:54:51 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: uI54Zvpi2MQECYQl3JeUHojhUT9brEYvF2Wk9XVHwzI=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: jmqDKa5arq4fgvLtUOSSDm4TPSp4JnFMPE58CkrLpbg=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: DgdiiCMEKe93Jsgcn1AG1optizE0ES0MbtD24A2hP+4=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: RaeRinKNGLed6XLJqu8FU+BHOJQNHJHt8FZoOYMBImQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Oct 19 04:54:51 2025 GMT Not After : Oct 26 04:54:51 2025 GMT Subject: CN=68f46f1c-b005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:e4:70:07:00:9d:0c:b1:3f:da:29:9b:c0: 1f:9b:f3:67:5a:13:a4:00:c3:80:d9:53:d3:f6:f6: c3:65:ba:b3:f6:41:72:f7:d7:da:91:d3:b9:19:93: d8:3b:da:8b:7e:bb:fb:a2:97:b2:ce:ab:c1:80:65: ff:32:b7:0d:9f:7c:7c:a4:d2:80:98:e3:71:35:8b: a7:38:1f:29:14:0d:8e:2d:87:a1:24:e3:9b:07:1f: ec:e8:ea:7b:08:11:d9:f0:4b:6b:1f:1a:59:ed:bd: 17:d5:5c:8e:f5:cc:69:24:99:db:ae:a2:51:26:ff: 4b:f0:e2:6f:cf:e5:7a:52:0e:c4:85:1d:df:5c:59: 8b:38:e3:75:b7:4b:17:4c:61:cb:f4:1a:2a:39:77: f6:49:f5:25:5e:96:35:95:3f:8c:b6:7b:f1:bd:79: fe:97:c4:38:43:0b:8d:9d:b3:ea:35:e2:ef:05:c4: a0:9f:a3:fd:79:0c:e6:07:1e:70:03:7f:67:0c:97: 79:44:72:7e:bf:f3:1b:4f:70:df:9e:90:3e:b4:1d: 4d:88:24:0a:6d:f7:35:3d:99:45:aa:aa:a4:12:c0: 9f:bc:f2:4e:f6:4c:09:89:40:52:30:8e:c9:96:de: c5:92:9a:9f:5c:ff:ac:f5:f4:fa:e1:aa:4a:76:8a: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1A:A9:98:19:F5:E7:3C:A1:76:2A:AD:D3:F4:27:58:95:BE:70:B7 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:25:28:55:c2:31:89:d4:49:c0:f2:a0:b5:d4:04:5c:31:51: 99:01:93:89:29:00:67:d8:b2:3b:6c:54:25:a7:4d:3b:6b:31: 65:47:0f:74:60:88:14:51:cd:83:68:b9:e3:71:fb:a5:e4:97: b9:fd:8e:ba:87:6e:e2:b8:85:53:7c:41:6d:3f:c2:76:da:76: 45:77:bf:a0:02:c3:97:84:68:fb:c7:fe:20:c1:8a:02:27:97: ad:69:ab:9f:b6:45:54:93:8c:b7:09:6b:ee:28:8c:e0:ab:9e: 22:61:08:bd:15:f3:0b:01:cf:70:9f:b9:9d:8c:f3:8c:14:f9: 0c:19:11:bf:ff:68:7f:35:00:02:ec:78:81:2e:99:c3:ba:24: 17:99:52:e7:48:9e:f9:73:51:81:8f:e2:93:78:b9:46:3a:7a: d0:e0:ba:9f:06:2e:53:fd:d7:8d:2e:7c:bc:ac:ec:4a:60:8f: 49:cc:33:65:0d:dd:14:f9:80:88:40:c5:42:75:95:63:6a:76: d8:48:2a:97:64:6d:ee:f0:3c:a9:68:91:e8:1e:ab:0b:b6:83: 3a:56:14:97:35:e8:71:8f:6c:e6:30:af:93:43:26:31:40:df: 1e:8f:78:49:ee:93:f2:98:69:4b:d9:ef:60:b1:8f:4b:59:c9: e5:85:b2:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUxMDE5MDQ1NDUxWhcNMjUxMDI2MDQ1NDUxWjAYMRYwFAYD VQQDEw02OGY0NmYxYy1iMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyibkcAcAnQyxP9opm8Afm/NnWhOkAMOA2VPT9vbDZbqz9kFy99fakdO5GZPY O9qLfrv7opeyzqvBgGX/MrcNn3x8pNKAmONxNYunOB8pFA2OLYehJOObBx/s6Op7 CBHZ8EtrHxpZ7b0X1VyO9cxpJJnbrqJRJv9L8OJvz+V6Ug7EhR3fXFmLOON1t0sX TGHL9BoqOXf2SfUlXpY1lT+MtnvxvXn+l8Q4QwuNnbPqNeLvBcSgn6P9eQzmBx5w A39nDJd5RHJ+v/MbT3DfnpA+tB1NiCQKbfc1PZlFqqqkEsCfvPJO9kwJiUBSMI7J lt7FkpqfXP+s9fT64apKdoqpawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAaqZgZ 9ec8oXYqrdP0J1iVvnC3MB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbJShVwjGJ1EnA8qC11ARcMVGZAZOJKQBn2LI7bFQlp007azFlRw90 YIgUUc2DaLnjcful5Je5/Y66h27iuIVTfEFtP8J22nZFd7+gAsOXhGj7x/4gwYoC J5etaauftkVUk4y3CWvuKIzgq54iYQi9FfMLAc9wn7mdjPOMFPkMGRG//2h/NQAC 7HiBLpnDuiQXmVLnSJ75c1GBj+KTeLlGOnrQ4LqfBi5T/deNLny8rOxKYI9JzDNl Dd0U+YCIQMVCdZVjanbYSCqXZG3u8DypaJHoHqsLtoM6VhSXNehxj2zmMK+TQyYx QN8ej3hJ7pPymGlL2e9gsY9LWcnlhbJP -----END CERTIFICATE-----Generated at Mon Oct 20 11:41:12 2025 by rpki-client