$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: QJnDCcoKtDUlCRt53BYnhmFyuN19gV9CZUjjPBUqy+E= Subject key identifier: C0:3C:9B:E1:02:A3:DB:13:2F:A0:37:23:98:87:7C:7B:F9:A3:8E:69 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 05E2 Signing time: Sun 19 Oct 2025 00:37:38 +0000 Manifest this update: Sun 19 Oct 2025 00:37:37 +0000 Manifest next update: Sun 26 Oct 2025 00:37:37 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: +18hqqmbLc+xcRKJPiieSJHkAfUHlb4qVCu3vjFza7Q=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Oct 19 00:37:37 2025 GMT Not After : Oct 26 00:37:37 2025 GMT Subject: CN=68f432d2-4479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:91:99:d7:4d:6b:8a:60:d7:0a:95:96:68: 33:b7:af:99:28:fe:75:1c:6c:89:14:e8:73:d6:bb: a0:45:52:14:83:6c:53:48:1d:c6:8f:2f:8b:dd:1a: cf:83:b6:3f:0c:6e:a6:ea:05:92:d1:89:20:fd:df: 8d:39:fd:dd:72:1e:54:7d:ad:4a:dd:79:de:19:80: c9:25:eb:e9:66:66:b2:75:4b:f0:b5:38:e4:c8:ad: d3:d7:25:77:cd:0a:78:fe:e6:23:55:da:79:d8:d3: e7:53:75:db:eb:50:06:a8:b7:86:cc:30:9b:ae:01: 1e:bc:5e:2c:72:d9:19:39:9c:3f:1b:55:ed:e1:b0: 1e:09:dd:ac:67:b0:9d:15:af:4c:23:55:a7:a7:cc: f9:4e:41:99:e5:d4:11:f4:86:0b:a5:4b:c9:ec:c5: 49:5f:46:ed:0e:9b:9f:f9:49:e4:05:af:87:66:09: 7b:e9:c0:ac:b4:49:4f:63:76:4c:26:1e:57:58:3b: 06:6c:c6:8e:a6:32:65:d9:14:02:0d:ba:4d:be:d6: 89:bd:e6:e3:e3:7c:bd:f8:b8:d7:a4:2b:62:b6:aa: 3f:4f:bd:79:52:dc:b6:a3:c7:5c:50:fe:71:cf:4d: 0f:b4:6b:bb:68:21:d3:5b:63:c4:9b:68:ad:1d:47: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3C:9B:E1:02:A3:DB:13:2F:A0:37:23:98:87:7C:7B:F9:A3:8E:69 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9e:d5:2a:eb:2c:e1:e5:17:13:d6:03:f9:d3:cd:d2:37:6d: 61:a3:e5:9c:a9:f7:f6:0f:a2:08:e6:55:f3:40:de:1c:98:70: 06:0f:db:d6:86:cf:e1:a3:d0:6b:03:7a:54:35:4e:93:77:ba: 1c:1b:b8:0e:32:84:50:e1:59:5c:5f:c6:67:8f:78:40:2b:5e: 6d:4c:5f:60:fe:a0:3d:47:21:f1:42:ee:8e:98:1a:ba:94:8d: c7:b9:97:b6:f2:ff:fb:b0:ef:95:b7:f4:fc:b4:26:f5:a2:b5: 1e:25:77:f7:f2:04:e5:71:cf:de:a8:a2:e7:aa:2d:f0:0e:80: 47:dd:8a:24:e5:f7:5c:f8:09:ed:d7:00:92:1f:f9:53:b8:53: 98:2c:87:66:27:bb:3d:95:dd:57:b8:49:1c:70:18:ce:c1:e4: 59:66:53:08:0b:c7:73:0f:24:e4:74:fe:66:c0:82:dc:f9:c7: ed:3c:0b:9a:17:1f:44:ea:74:fc:e4:5b:07:2e:79:42:60:df: 7f:66:f1:a4:0a:b9:ba:29:d6:76:4e:38:db:f5:bd:80:8a:e4: 32:06:40:60:0d:94:28:97:5b:5d:67:e7:6c:3c:76:f7:2e:27: f3:42:8f:e8:24:0b:c1:1e:da:04:2d:ea:da:a1:17:aa:19:90: 01:b6:4a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjUxMDE5MDAzNzM3WhcNMjUxMDI2MDAzNzM3WjAYMRYwFAYD VQQDEw02OGY0MzJkMi00NDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hKRmddNa4pg1wqVlmgzt6+ZKP51HGyJFOhz1rugRVIUg2xTSB3Gjy+L3RrP g7Y/DG6m6gWS0Ykg/d+NOf3dch5Ufa1K3XneGYDJJevpZmaydUvwtTjkyK3T1yV3 zQp4/uYjVdp52NPnU3Xb61AGqLeGzDCbrgEevF4sctkZOZw/G1Xt4bAeCd2sZ7Cd Fa9MI1Wnp8z5TkGZ5dQR9IYLpUvJ7MVJX0btDpuf+UnkBa+HZgl76cCstElPY3ZM Jh5XWDsGbMaOpjJl2RQCDbpNvtaJvebj43y9+LjXpCtitqo/T715Uty2o8dcUP5x z00PtGu7aCHTW2PEm2itHUcbBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA8m+EC o9sTL6A3I5iHfHv5o45pMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqntUq6yzh5RcT1gP5083SN21ho+Wcqff2D6II5lXzQN4cmHAGD9vW hs/ho9BrA3pUNU6Td7ocG7gOMoRQ4VlcX8Znj3hAK15tTF9g/qA9RyHxQu6OmBq6 lI3HuZe28v/7sO+Vt/T8tCb1orUeJXf38gTlcc/eqKLnqi3wDoBH3Yok5fdc+Ant 1wCSH/lTuFOYLIdmJ7s9ld1XuEkccBjOweRZZlMIC8dzDyTkdP5mwILc+cftPAua Fx9E6nT85FsHLnlCYN9/ZvGkCrm6KdZ2Tjjb9b2AiuQyBkBgDZQol1tdZ+dsPHb3 LifzQo/oJAvBHtoELeraoReqGZABtkrh -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:48 2025 by rpki-client