$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: gBwTMUmnhmgsTIk718KyItU6guNmzDt8xcuJfjNdPxI= Subject key identifier: 9D:32:D7:BA:A5:8C:B0:D6:B4:E3:0D:94:1B:0A:36:7D:8F:96:83:E5 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: E4 Signing time: Sun 19 Oct 2025 08:27:38 +0000 Manifest this update: Sun 19 Oct 2025 08:27:37 +0000 Manifest next update: Sun 26 Oct 2025 08:27:37 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: cPum4wLJ2+lHrBo2J+ibgE1+heoexft32et243gxNpA=) 2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Oct 19 08:27:37 2025 GMT Not After : Oct 26 08:27:37 2025 GMT Subject: CN=68f4a0f9-32ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:ea:eb:f6:40:ca:5f:8f:4a:3c:d9:12:80: d5:25:1f:93:35:28:21:c8:90:83:6f:8c:9e:fc:ee: 77:f6:fa:e2:7b:21:14:ec:68:67:6b:db:b3:27:5b: 43:d0:45:49:67:74:cc:b4:46:2a:51:e5:23:52:3d: 29:f4:55:5f:79:d2:b5:56:3c:d3:47:18:e8:c3:13: 0e:6e:31:3c:59:7b:63:1f:23:14:7d:89:20:78:d7: 5b:48:01:9c:6a:10:88:38:16:46:5b:f7:89:79:c5: 0a:b1:27:21:22:ce:b5:de:22:cf:82:49:a1:41:d1: 71:87:54:36:3d:7a:05:75:21:e5:44:eb:35:1f:ed: 57:53:26:ff:60:85:61:db:85:a3:39:5f:7f:db:f0: 11:ef:d2:46:6e:85:87:f7:fd:8f:50:14:d6:56:37: a4:2a:f6:71:93:5e:1a:7c:3a:d6:f5:a2:69:6e:d1: 0c:fd:db:b5:39:33:d0:fb:12:c2:eb:6e:2d:2d:1c: b6:d6:be:1c:44:97:0f:e8:6d:6c:8c:83:fd:f2:37: 0f:48:08:3e:5e:af:db:02:38:91:37:f1:85:ee:b0: 60:4b:cf:c2:50:90:69:58:5c:1a:bd:98:4c:38:60: a4:e8:a0:4d:2b:86:48:c6:38:16:69:82:b4:6e:15: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:32:D7:BA:A5:8C:B0:D6:B4:E3:0D:94:1B:0A:36:7D:8F:96:83:E5 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:10:59:db:33:b0:c3:8f:37:57:42:70:8a:8a:69:0e:8c:a8: a3:46:6d:c1:0b:b1:fd:9a:fb:5a:86:86:bd:14:e5:19:21:b0: 44:e5:c3:9f:fe:69:69:22:d0:5f:b7:99:c2:ea:5b:7c:6b:7d: b3:22:c1:9f:72:c8:b0:4b:0f:c1:8e:54:40:d7:ed:ef:1e:4a: 92:cf:06:80:77:4a:8c:77:7e:5d:70:78:4c:06:e0:ed:de:ef: 46:de:4a:98:80:11:b0:67:9d:c2:6b:18:f8:7c:34:54:8a:d5: eb:43:3b:c6:87:f4:54:93:2f:4f:cc:cc:5e:07:36:45:ae:07: d3:70:a9:85:a2:ce:9c:97:e2:03:e2:0f:5b:a4:3d:27:21:18: 6d:37:0b:05:b9:c6:f7:fa:a2:05:bd:9e:9a:79:70:c7:26:8b: 56:c2:1b:94:fe:11:fd:0c:25:63:89:28:78:cb:25:c1:e9:22: d2:33:6f:4f:0a:f9:a1:90:10:7a:84:18:a5:cc:0e:38:23:7d: 51:ef:79:b6:dd:ff:da:4c:ed:f1:6d:b2:ed:de:e1:3e:38:7b: 8d:d6:fe:1b:6e:a2:4e:44:b4:41:7d:67:22:53:46:ff:29:1a: de:8d:5c:ab:36:09:24:ae:2a:93:d2:89:1f:12:e1:e3:d8:3e: 3e:3c:26:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUxMDE5MDgyNzM3WhcNMjUxMDI2MDgyNzM3WjAYMRYwFAYD VQQDEw02OGY0YTBmOS0zMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujzq6/ZAyl+PSjzZEoDVJR+TNSghyJCDb4ye/O539vrieyEU7Ghna9uzJ1tD 0EVJZ3TMtEYqUeUjUj0p9FVfedK1VjzTRxjowxMObjE8WXtjHyMUfYkgeNdbSAGc ahCIOBZGW/eJecUKsSchIs613iLPgkmhQdFxh1Q2PXoFdSHlROs1H+1XUyb/YIVh 24WjOV9/2/AR79JGboWH9/2PUBTWVjekKvZxk14afDrW9aJpbtEM/du1OTPQ+xLC 624tLRy21r4cRJcP6G1sjIP98jcPSAg+Xq/bAjiRN/GF7rBgS8/CUJBpWFwavZhM OGCk6KBNK4ZIxjgWaYK0bhXU7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0y17ql jLDWtOMNlBsKNn2PloPlMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTEFnbM7DDjzdXQnCKimkOjKijRm3BC7H9mvtahoa9FOUZIbBE5cOf /mlpItBft5nC6lt8a32zIsGfcsiwSw/BjlRA1+3vHkqSzwaAd0qMd35dcHhMBuDt 3u9G3kqYgBGwZ53Caxj4fDRUitXrQzvGh/RUky9PzMxeBzZFrgfTcKmFos6cl+ID 4g9bpD0nIRhtNwsFucb3+qIFvZ6aeXDHJotWwhuU/hH9DCVjiSh4yyXB6SLSM29P CvmhkBB6hBilzA44I31R73m23f/aTO3xbbLt3uE+OHuN1v4bbqJORLRBfWciU0b/ KRrejVyrNgkkriqT0okfEuHj2D4+PCbC -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:53 2025 by rpki-client