$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: JokhWz9dKEzAahBRsnjQA9Epxt8ncqGAHzeI6qiWCqc= Subject key identifier: 98:3E:C5:7F:6E:62:B3:BE:A8:1E:CC:18:EB:CD:93:49:C0:1F:CD:30 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 04DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 04DB Signing time: Sun 19 Oct 2025 01:34:58 +0000 Manifest this update: Sun 19 Oct 2025 01:34:57 +0000 Manifest next update: Sun 26 Oct 2025 01:34:57 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: DugNwVLO6ww+lWITpqmEIDy8BEG91bw9QBPL4qmJVFY=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1247 (0x4df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: Oct 19 01:34:57 2025 GMT Not After : Oct 26 01:34:57 2025 GMT Subject: CN=68f44041-abf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:98:05:af:0f:eb:d4:35:86:68:ec:10:25: c0:81:45:5d:66:4a:a7:68:6d:0a:04:e1:74:52:c2: 29:01:32:c4:36:1d:8a:eb:df:dd:37:a0:62:3e:86: 47:cb:0e:04:f1:fb:31:11:d7:b3:26:bd:d8:6c:b4: 34:03:3c:d8:63:aa:12:3a:6f:58:cf:f8:eb:a5:e4: e7:af:3e:f4:87:fd:bb:b0:86:b7:4c:83:e6:40:a0: d6:1f:b7:a8:30:5a:a1:a9:1d:82:67:8e:f1:37:4f: 3f:e4:5f:53:fa:f9:c2:a2:e0:de:8b:23:c6:96:21: 77:b1:85:99:94:39:22:f6:c8:d7:0f:dd:07:b0:f4: d1:76:72:97:82:1d:61:94:7f:83:65:53:56:74:f9: 9e:79:69:76:1d:bd:03:f8:75:dc:de:ff:48:8d:e6: 04:37:b9:08:f3:53:43:eb:dd:59:db:22:df:0f:db: 3a:fe:9d:c7:fd:32:e3:1e:21:be:9d:bf:77:a7:81: 21:1e:80:65:19:4a:c6:cf:94:75:c3:dd:10:e0:2a: a6:6d:f9:ed:df:ff:94:17:49:fa:ae:5c:e0:0d:3f: fc:e5:04:43:1a:08:ba:eb:dc:be:51:4b:44:a1:fb: a1:63:6d:cd:3c:e5:b4:5e:21:59:e0:13:04:5e:71: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:C5:7F:6E:62:B3:BE:A8:1E:CC:18:EB:CD:93:49:C0:1F:CD:30 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8e:c7:f0:e6:64:bf:12:2c:46:22:69:59:9a:69:d6:ff:ad: f6:07:a8:e0:f6:50:de:58:19:ed:98:4b:8f:e2:dc:da:e8:ee: a1:14:69:26:7e:b9:fc:92:20:45:a3:0f:a5:ae:38:46:70:7c: ed:93:48:80:df:73:49:57:94:6e:04:fb:d6:1d:7b:77:5b:59: d9:a7:b1:f5:b9:af:e0:26:98:fc:c9:b9:e9:72:63:20:96:f7: 28:1b:c6:c0:c4:7e:88:2e:a2:fd:cc:ff:17:46:83:91:78:69: 9e:30:51:d4:8a:ce:bc:8f:4e:e8:e9:13:87:b9:d9:ff:2a:ab: f4:17:c4:23:8c:5c:8c:02:58:80:a2:3d:52:b5:3d:9a:69:ca: e1:e5:3a:d1:4a:67:a9:6c:26:8a:12:47:e3:d4:8a:ee:71:29: 92:4d:17:93:69:3a:ef:70:78:f2:8d:d9:43:14:b9:4f:79:74: 34:44:58:e0:f5:74:29:04:3f:0b:c9:5b:06:19:4e:3f:d5:99: d1:d7:04:18:c0:fb:63:43:6a:99:7c:de:0d:43:74:88:cc:03: 38:94:0e:a5:eb:fa:2e:5b:94:cf:8d:29:76:99:9f:9b:1d:31: 3f:8f:34:83:10:cb:ac:bf:3b:45:37:d0:e2:a6:43:21:ef:f6: 0f:e1:ed:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjUxMDE5MDEzNDU3WhcNMjUxMDI2MDEzNDU3WjAYMRYwFAYD VQQDEw02OGY0NDA0MS1hYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJmYBa8P69Q1hmjsECXAgUVdZkqnaG0KBOF0UsIpATLENh2K69/dN6BiPoZH yw4E8fsxEdezJr3YbLQ0AzzYY6oSOm9Yz/jrpeTnrz70h/27sIa3TIPmQKDWH7eo MFqhqR2CZ47xN08/5F9T+vnCouDeiyPGliF3sYWZlDki9sjXD90HsPTRdnKXgh1h lH+DZVNWdPmeeWl2Hb0D+HXc3v9IjeYEN7kI81ND691Z2yLfD9s6/p3H/TLjHiG+ nb93p4EhHoBlGUrGz5R1w90Q4Cqmbfnt3/+UF0n6rlzgDT/85QRDGgi669y+UUtE ofuhY23NPOW0XiFZ4BMEXnED+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg+xX9u YrO+qB7MGOvNk0nAH80wMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBojsfw5mS/EixGImlZmmnW/632B6jg9lDeWBntmEuP4tza6O6hFGkm frn8kiBFow+lrjhGcHztk0iA33NJV5RuBPvWHXt3W1nZp7H1ua/gJpj8ybnpcmMg lvcoG8bAxH6ILqL9zP8XRoOReGmeMFHUis68j07o6ROHudn/Kqv0F8QjjFyMAliA oj1StT2aacrh5TrRSmepbCaKEkfj1IrucSmSTReTaTrvcHjyjdlDFLlPeXQ0RFjg 9XQpBD8LyVsGGU4/1ZnR1wQYwPtjQ2qZfN4NQ3SIzAM4lA6l6/ouW5TPjSl2mZ+b HTE/jzSDEMusvztFN9DipkMh7/YP4e3W -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:12 2025 by rpki-client