$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: CLvzpG3/ouX72e+mQHWPWJuz7XxZj5FHZh0uyduTmd4= Subject key identifier: C7:4E:F7:82:18:6B:12:A8:84:AB:62:33:79:B1:D1:CB:AD:D5:07:07 Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1C45 Signing time: Sat 18 Oct 2025 16:30:49 +0000 Manifest this update: Sat 18 Oct 2025 16:30:48 +0000 Manifest next update: Sat 25 Oct 2025 16:30:48 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: mH5MQey0as4GfalB2BsrO5RxNZWjwv6QK2GxgQ159ck=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: jNQlV+fi0gh3TqmAhHo6u4WfK9ctt6IakWF/8kDkdDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7262 (0x1c5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Oct 18 16:30:48 2025 GMT Not After : Oct 25 16:30:48 2025 GMT Subject: CN=68f3c0b9-b37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:fe:fe:ff:84:13:49:04:11:11:a2:cf:1b: d7:cc:38:8a:c8:d0:3e:bc:93:d6:fc:2e:0b:89:c6: a7:99:d5:4d:f9:28:d1:17:1e:47:20:43:bb:5e:30: 64:18:a7:bc:c6:ab:6b:7a:a1:de:0f:e4:b0:42:9c: c4:38:32:04:ae:58:a7:db:c5:e6:92:ca:0c:04:49: 72:a1:ab:c1:51:0a:30:af:91:8e:58:58:9b:8c:87: e4:6f:0e:97:2d:e0:9f:87:af:5e:64:7c:67:1a:1e: 10:29:34:0f:ba:e4:e3:96:56:2d:83:74:64:70:ce: cb:c0:06:d1:10:58:db:d4:93:8b:5e:0c:c5:d5:f1: 70:7b:9a:1b:a8:61:24:f9:03:0c:dd:f9:b8:71:54: a8:71:fd:8b:07:ae:9c:48:70:7a:84:7b:cb:90:73: 67:11:bf:ec:42:d2:8d:38:f1:a0:08:9d:c9:5e:17: 76:a0:e1:a0:10:b4:97:ec:c4:79:8a:d5:cb:11:32: 25:b6:7d:8e:53:63:31:b4:cd:e1:40:08:d4:39:fe: 46:0e:c4:aa:94:bc:70:3e:2b:45:ab:b8:cd:61:75: 31:50:7b:77:d3:bb:f3:58:27:4a:36:c6:94:92:02: 02:33:d5:5c:2a:8b:cd:53:d7:fc:14:13:b0:1b:1e: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:F7:82:18:6B:12:A8:84:AB:62:33:79:B1:D1:CB:AD:D5:07:07 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e5:fb:fa:38:7d:c9:7b:d5:6c:45:29:ba:79:79:7c:ea:e9: c9:6f:24:34:f3:27:a9:76:cd:85:cb:87:92:c2:b7:46:38:c8: ec:ea:19:ef:09:98:cc:11:f7:a0:33:f6:fd:34:e3:8a:93:41: ab:c0:b1:0f:32:80:b2:99:f8:c7:98:41:87:67:ec:6e:7d:f9: 46:32:08:4c:cc:22:99:f4:c9:41:4c:99:16:04:bc:59:74:e2: db:cb:b9:ac:97:16:e7:39:7f:f4:7c:f6:9c:1c:03:a3:7b:b7: 57:2f:6f:58:1c:b7:32:ac:22:37:f1:f0:42:07:27:a6:39:53: 2c:6f:40:41:a0:85:43:76:25:1c:ff:f8:63:c5:7a:af:47:6d: 6a:30:82:e4:2f:01:75:6e:f3:d0:75:47:0c:e4:c9:61:6d:3e: d1:06:76:b8:18:7b:2d:4e:8d:39:3c:81:f0:15:0d:07:74:7f: 01:70:fc:37:6f:f9:59:6f:2f:9b:1e:36:6f:ea:b7:22:a8:3d: a1:e8:97:88:50:0f:f4:46:e5:c7:4c:4a:fc:a6:f5:fa:2f:dc: 69:02:1c:59:1a:da:58:a4:73:52:f3:34:d0:e8:ce:2f:7c:11: 6c:d7:75:25:4b:ec:de:ae:67:3d:91:0b:8b:d1:64:63:cc:69: ba:90:4c:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUxMDE4MTYzMDQ4WhcNMjUxMDI1MTYzMDQ4WjAYMRYwFAYD VQQDEw02OGYzYzBiOS1iMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oL+/v+EE0kEERGizxvXzDiKyNA+vJPW/C4LicanmdVN+SjRFx5HIEO7XjBk GKe8xqtreqHeD+SwQpzEODIErlin28XmksoMBElyoavBUQowr5GOWFibjIfkbw6X LeCfh69eZHxnGh4QKTQPuuTjllYtg3RkcM7LwAbREFjb1JOLXgzF1fFwe5obqGEk +QMM3fm4cVSocf2LB66cSHB6hHvLkHNnEb/sQtKNOPGgCJ3JXhd2oOGgELSX7MR5 itXLETIltn2OU2MxtM3hQAjUOf5GDsSqlLxwPitFq7jNYXUxUHt307vzWCdKNsaU kgICM9VcKovNU9f8FBOwGx6hHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdO94IY axKohKtiM3mx0cut1QcHMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq5fv6OH3Je9VsRSm6eXl86unJbyQ08yepds2Fy4eSwrdGOMjs6hnv CZjMEfegM/b9NOOKk0GrwLEPMoCymfjHmEGHZ+xufflGMghMzCKZ9MlBTJkWBLxZ dOLby7mslxbnOX/0fPacHAOje7dXL29YHLcyrCI38fBCByemOVMsb0BBoIVDdiUc //hjxXqvR21qMILkLwF1bvPQdUcM5MlhbT7RBna4GHstTo05PIHwFQ0HdH8BcPw3 b/lZby+bHjZv6rciqD2h6JeIUA/0RuXHTEr8pvX6L9xpAhxZGtpYpHNS8zTQ6M4v fBFs13UlS+zermc9kQuL0WRjzGm6kEyY -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:44 2025 by rpki-client