$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json) Hash identifier: /8hHPGNby9Myw0yFWIAwWVxQkqGE77wUtewUIhMS27s= Subject key identifier: 23:90:50:DB:20:05:0B:C1:A6:77:0F:7C:2D:87:03:25:F9:B2:A8:DA Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft Manifest number: 0589 Signing time: Sun 19 Oct 2025 00:54:07 +0000 Manifest this update: Sun 19 Oct 2025 00:54:06 +0000 Manifest next update: Sun 26 Oct 2025 00:54:06 +0000 Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: guLx33tjsqZoXTYhpJFn8n7LQ9vJAIQ5aWXBPUsARqM=) 2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Validity Not Before: Oct 19 00:54:06 2025 GMT Not After : Oct 26 00:54:06 2025 GMT Subject: CN=68f436af-f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:49:d7:72:fc:5d:0e:3d:89:46:ec:57:b2: 43:58:34:cf:f5:d8:af:97:ef:7c:de:fe:db:3a:de: 9b:55:e1:2e:14:fe:d6:ba:b0:91:14:74:02:fc:99: fe:dc:b3:ec:2f:7a:01:43:4a:35:d2:08:4b:48:48: f9:d7:21:54:f7:71:39:73:ac:69:13:1c:3f:71:84: 07:24:09:a8:3b:bc:62:69:a4:ba:01:a3:46:84:77: 4b:dc:fe:84:f2:4a:3d:c8:8b:36:c9:63:6b:08:5a: 16:cc:cd:c5:3b:42:26:d1:d1:da:8e:da:26:c0:35: dd:fb:93:f1:2d:f0:1e:99:0d:6a:ea:54:f8:78:b8: 6d:e5:8f:1d:bd:92:13:f5:bb:a2:e6:fa:f0:ff:92: f1:65:03:f5:d8:91:d4:89:55:02:c5:b4:d1:18:ec: 6e:e3:a1:da:2d:46:ac:7e:d9:ec:d7:02:4a:69:66: 1f:3a:a8:3b:f3:f6:b0:11:4a:3f:55:ea:52:5f:ee: 3e:3d:68:c9:6b:25:8d:5e:a7:1b:90:d5:df:c6:43: 5f:a4:f5:43:dd:e7:04:73:44:33:02:8b:a8:5c:35: fc:20:4e:ab:87:a1:71:1a:9d:f6:3d:7b:b2:9f:3c: f3:6d:5e:87:48:f7:6f:84:ed:01:b1:bd:d6:77:85: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:90:50:DB:20:05:0B:C1:A6:77:0F:7C:2D:87:03:25:F9:B2:A8:DA X509v3 Authority Key Identifier: keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:cd:bf:37:59:25:7c:a1:27:be:d8:d7:ad:12:d7:e0:b9:c0: 92:d3:06:18:90:0b:d2:e5:49:1c:02:21:24:74:07:47:82:09: fd:f7:13:8f:b1:ec:a4:3f:6e:a9:70:c6:bd:07:85:14:d6:dd: 87:fb:cb:2d:87:79:55:e6:a5:76:80:5e:f6:f5:f5:3c:08:33: 06:59:0b:f1:fa:8c:fa:99:92:78:2e:58:76:88:bc:2f:fb:05: 56:d0:55:05:3a:f1:16:43:3c:b7:c3:57:9d:c4:81:99:c4:0d: a0:68:de:33:70:f5:1c:b0:2f:80:0b:0a:dc:fb:7e:a6:fc:dc: ab:b8:15:d3:bb:51:59:b4:9a:2d:21:54:fb:37:b4:2e:83:5e: 8d:d9:5c:bd:c4:e3:09:38:9f:d3:0f:23:41:50:05:b1:09:73: ac:6b:91:25:1d:4c:39:0f:ca:a8:fe:79:45:f6:1a:58:3c:90: b9:0d:86:29:93:e5:05:80:46:32:b1:8f:f2:da:19:ae:e8:77: 52:3e:49:04:51:a3:f1:d0:d4:01:e8:31:d7:99:c3:c9:3e:ac: dc:f7:8f:67:1b:ba:ff:ff:34:5a:01:b6:d7:8b:72:98:53:9d: 05:dd:3f:54:97:de:9b:48:58:d2:da:38:e3:12:21:00:c8:43: 2a:23:a9:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC MDY4MzQ0NjAwHhcNMjUxMDE5MDA1NDA2WhcNMjUxMDI2MDA1NDA2WjAYMRYwFAYD VQQDEw02OGY0MzZhZi1mOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqpJ13L8XQ49iUbsV7JDWDTP9divl+983v7bOt6bVeEuFP7WurCRFHQC/Jn+ 3LPsL3oBQ0o10ghLSEj51yFU93E5c6xpExw/cYQHJAmoO7xiaaS6AaNGhHdL3P6E 8ko9yIs2yWNrCFoWzM3FO0Im0dHajtomwDXd+5PxLfAemQ1q6lT4eLht5Y8dvZIT 9bui5vrw/5LxZQP12JHUiVUCxbTRGOxu46HaLUasftns1wJKaWYfOqg78/awEUo/ VepSX+4+PWjJayWNXqcbkNXfxkNfpPVD3ecEc0QzAouoXDX8IE6rh6FxGp32PXuy nzzzbV6HSPdvhO0Bsb3Wd4VzeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOQUNsg BQvBpncPfC2HAyX5sqjaMB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5 Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4zb83WSV8oSe+2NetEtfgucCS0wYYkAvS5UkcAiEkdAdHggn99xOP seykP26pcMa9B4UU1t2H+8sth3lV5qV2gF729fU8CDMGWQvx+oz6mZJ4Llh2iLwv +wVW0FUFOvEWQzy3w1edxIGZxA2gaN4zcPUcsC+ACwrc+36m/NyruBXTu1FZtJot IVT7N7Qug16N2Vy9xOMJOJ/TDyNBUAWxCXOsa5ElHUw5D8qo/nlF9hpYPJC5DYYp k+UFgEYysY/y2hmu6HdSPkkEUaPx0NQB6DHXmcPJPqzc949nG7r//zRaAbbXi3KY U50F3T9Ul96bSFjS2jjjEiEAyEMqI6mY -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:28 2025 by rpki-client