$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: dZ9DVwAveBrdBZfyrSOcK+OTwJxTdpnnpDVJYmGlP2s= Subject key identifier: AD:7E:89:96:3C:A8:26:E3:70:6D:15:D2:10:A9:34:B3:C9:5E:78:48 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 07E4 Signing time: Sat 18 Oct 2025 22:20:01 +0000 Manifest this update: Sat 18 Oct 2025 22:20:01 +0000 Manifest next update: Sat 25 Oct 2025 22:20:01 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: nWdsI/Awa+dn06SghjY2u5FQMmYL1DXIpFmxsXV+1pA=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Oct 18 22:20:01 2025 GMT Not After : Oct 25 22:20:01 2025 GMT Subject: CN=68f41291-1bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ee:f6:94:cb:f1:b2:c3:2e:83:6f:74:6c:b3: f4:5c:2e:ac:b1:c3:ba:87:1c:78:a6:33:27:6e:25: e1:09:63:af:fb:ea:4b:1b:f8:94:3e:0a:6a:c2:e0: 29:74:33:d8:96:62:d1:24:f8:b5:e6:7f:a9:06:0c: 61:3a:d6:08:98:69:82:67:59:05:2e:2a:e3:34:e4: ff:ae:ce:f2:cf:1c:ee:ea:aa:69:c1:62:e0:80:76: 82:16:45:a6:7c:a5:dc:80:2e:56:00:8f:58:e4:7b: 69:00:37:c7:2e:fe:b7:ba:51:59:9f:c4:3b:c1:21: 90:19:a3:5c:b0:ef:dd:30:b5:29:63:70:7b:ef:84: 91:4d:f0:c6:34:f6:d8:f3:5c:d8:c8:fc:ef:94:9c: 56:1b:32:aa:63:4e:41:3c:fa:f1:b9:7d:cc:cd:7f: 9d:7f:53:b6:3c:f5:0d:54:62:67:3d:70:d7:93:de: bb:bb:13:a7:ed:00:82:b5:1b:2c:bc:26:80:bb:c4: fe:8c:73:cc:35:47:27:67:b8:6e:a7:d9:ea:51:3c: e1:ca:33:9e:f3:d7:c1:e0:4f:21:d2:d5:f5:bc:c3: 44:4e:be:ec:9a:fe:d3:59:f5:76:02:8a:2c:5b:9c: 61:95:ad:e2:9a:c0:23:9b:03:18:de:99:82:e7:b0: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7E:89:96:3C:A8:26:E3:70:6D:15:D2:10:A9:34:B3:C9:5E:78:48 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5a:fa:b1:6b:50:f8:42:c9:6c:8a:56:74:d7:81:38:cb:52: 76:8d:f9:3e:d0:74:a3:65:9d:9b:44:bc:e5:34:59:14:12:ec: a5:2d:6a:6e:2e:cc:e1:44:d4:da:4a:c7:62:7d:e8:d1:00:05: a1:2a:44:45:c6:e6:78:f8:4f:48:0e:0e:62:9b:f9:70:c1:15: e6:34:4e:d6:14:43:8b:c4:55:18:30:fa:4c:ef:64:78:cf:03: 57:7e:a4:5d:a2:a9:a6:68:eb:91:ef:5c:15:bd:50:86:45:1c: 5a:e8:4f:46:62:8c:fa:6e:57:6b:83:5d:66:2d:c0:52:25:68: 03:ee:79:17:0a:f2:98:57:69:92:93:dd:9c:d9:88:3e:31:de: cb:5e:93:83:af:57:7f:69:f1:31:50:c4:43:f3:96:68:e3:e5: c1:eb:01:c9:4c:a0:74:62:e1:8b:03:20:ab:f3:9e:49:73:28: 16:7c:41:9b:b5:ef:e0:ca:ce:dc:6a:3e:1f:71:ab:60:9f:4d: 14:a2:d6:7b:56:e2:75:59:f4:5a:7c:e1:69:ba:af:db:e6:71: e5:83:c0:59:09:12:fd:7c:51:a0:0c:c7:fa:5a:d7:3f:95:e3: 96:22:03:c9:a0:13:db:a8:e0:fb:77:96:f9:89:37:12:fc:6d: b2:66:d9:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUxMDE4MjIyMDAxWhcNMjUxMDI1MjIyMDAxWjAYMRYwFAYD VQQDEw02OGY0MTI5MS0xYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8O72lMvxssMug290bLP0XC6sscO6hxx4pjMnbiXhCWOv++pLG/iUPgpqwuAp dDPYlmLRJPi15n+pBgxhOtYImGmCZ1kFLirjNOT/rs7yzxzu6qppwWLggHaCFkWm fKXcgC5WAI9Y5HtpADfHLv63ulFZn8Q7wSGQGaNcsO/dMLUpY3B774SRTfDGNPbY 81zYyPzvlJxWGzKqY05BPPrxuX3MzX+df1O2PPUNVGJnPXDXk967uxOn7QCCtRss vCaAu8T+jHPMNUcnZ7hup9nqUTzhyjOe89fB4E8h0tX1vMNETr7smv7TWfV2Aoos W5xhla3imsAjmwMY3pmC57B8CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1+iZY8 qCbjcG0V0hCpNLPJXnhIMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Wvqxa1D4QslsilZ014E4y1J2jfk+0HSjZZ2bRLzlNFkUEuylLWpu LszhRNTaSsdifejRAAWhKkRFxuZ4+E9IDg5im/lwwRXmNE7WFEOLxFUYMPpM72R4 zwNXfqRdoqmmaOuR71wVvVCGRRxa6E9GYoz6bldrg11mLcBSJWgD7nkXCvKYV2mS k92c2Yg+Md7LXpODr1d/afExUMRD85Zo4+XB6wHJTKB0YuGLAyCr855JcygWfEGb te/gys7caj4fcatgn00UotZ7VuJ1WfRafOFpuq/b5nHlg8BZCRL9fFGgDMf6Wtc/ leOWIgPJoBPbqOD7d5b5iTcS/G2yZtny -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:04 2025 by rpki-client