$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: J/IdWz1S9+Sa+no+ANKjiFl0nUVA3rTTMjDxArV+lC8= Subject key identifier: 61:B4:3E:50:AD:8E:4F:FD:B2:43:01:C9:76:0C:85:5C:F8:9E:AC:5C Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: D1 Signing time: Sun 19 Oct 2025 08:51:10 +0000 Manifest this update: Sun 19 Oct 2025 08:51:09 +0000 Manifest next update: Sun 26 Oct 2025 08:51:09 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: s2Tu0sJ9vK9GbN9Hyqc1dPnTkfWIx6XbzsulTbw3vbM=) 2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: sqy/WdKkX/I9+eeWKmyiO40gweC8VofbqWaj5A5W8ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Oct 19 08:51:09 2025 GMT Not After : Oct 26 08:51:09 2025 GMT Subject: CN=68f4a67d-9ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:19:e3:2f:10:e3:bb:6a:4c:5f:32:81:1b: 8e:a9:d8:90:3c:d4:78:75:00:a5:ec:28:f3:68:4e: 07:3a:f0:32:37:8b:b7:7c:b7:6f:1b:7f:ad:90:d3: 4c:1f:1b:a4:e9:34:11:d5:f7:a0:48:a9:11:bd:2c: 98:66:42:f6:f7:0c:46:10:48:38:ed:fa:3b:81:c8: 2f:43:83:4e:80:7c:80:44:6a:93:b0:b5:c0:ad:be: d2:98:26:7c:26:1e:48:ac:2e:31:8b:ee:d3:04:f4: 70:41:39:4f:bc:c0:6d:82:2d:7e:95:c1:ba:32:2e: 53:9e:2a:43:04:a3:07:c1:a0:70:c0:0c:d3:9b:a4: 00:0e:61:07:a9:d3:74:0d:1c:08:8f:f5:b1:96:f7: c5:2a:9b:c6:0e:95:45:09:c8:54:96:6b:51:60:5d: 61:90:20:50:3b:d6:7e:cd:65:b2:7e:6a:14:67:b1: df:8a:17:f9:ef:c9:16:10:f5:f4:af:b5:a8:14:c9: c1:d9:85:06:3b:3d:b3:e6:46:17:3c:4d:ae:97:15: 29:5d:b3:2e:21:94:88:f1:00:b1:f4:01:45:3b:b4: 9a:ca:25:f3:ad:27:02:16:44:f8:30:3c:bd:dc:02: 0e:dc:51:b9:de:8d:c9:7c:b2:8a:72:51:0e:53:b1: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B4:3E:50:AD:8E:4F:FD:B2:43:01:C9:76:0C:85:5C:F8:9E:AC:5C X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:59:ea:8d:e1:de:a0:1a:10:a2:46:be:73:d2:2a:51:c5:f3: a3:54:57:8e:93:fa:1a:2b:c3:90:6f:c7:10:ab:5e:2a:5e:d6: 2c:6c:32:2e:0c:06:9f:9b:7d:64:c6:9e:f3:2b:63:93:7d:5d: b9:04:be:50:eb:8d:0c:a2:51:f2:08:1f:c8:e1:25:91:11:5a: 81:a0:19:d1:66:0e:26:e3:77:6b:64:62:4d:32:fa:30:be:b1: d2:63:37:ea:d1:b6:41:cb:77:97:29:a2:bf:44:73:e7:84:21: 44:4e:bd:47:16:96:21:be:9c:09:e7:17:82:34:13:62:96:36: 03:0a:08:25:62:b2:6e:c4:8e:57:1b:ab:82:90:0f:d1:bb:0e: 84:d2:38:15:88:e9:77:b6:5d:1c:e8:b5:1d:ab:c0:90:5f:04: 5a:d2:a7:d4:17:ed:15:e0:fe:f6:71:88:bd:89:3d:13:ee:7a: 25:b4:2c:56:3e:bc:bc:9c:e8:2b:07:ba:0e:d6:f6:77:26:da: e6:f6:93:18:cf:31:5a:fd:de:5a:28:16:17:fa:ed:19:8c:22: 58:54:00:17:1c:ef:b2:aa:1a:01:61:1b:91:0b:41:57:f4:07: d6:c8:39:9f:a0:5b:da:a6:81:a6:41:31:c6:55:19:14:94:ba: 08:78:9a:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjUxMDE5MDg1MTA5WhcNMjUxMDI2MDg1MTA5WjAYMRYwFAYD VQQDEw02OGY0YTY3ZC05ZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KQZ4y8Q47tqTF8ygRuOqdiQPNR4dQCl7CjzaE4HOvAyN4u3fLdvG3+tkNNM Hxuk6TQR1fegSKkRvSyYZkL29wxGEEg47fo7gcgvQ4NOgHyARGqTsLXArb7SmCZ8 Jh5IrC4xi+7TBPRwQTlPvMBtgi1+lcG6Mi5TnipDBKMHwaBwwAzTm6QADmEHqdN0 DRwIj/WxlvfFKpvGDpVFCchUlmtRYF1hkCBQO9Z+zWWyfmoUZ7Hfihf578kWEPX0 r7WoFMnB2YUGOz2z5kYXPE2ulxUpXbMuIZSI8QCx9AFFO7SayiXzrScCFkT4MDy9 3AIO3FG53o3JfLKKclEOU7F/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG0PlCt jk/9skMByXYMhVz4nqxcMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjWeqN4d6gGhCiRr5z0ipRxfOjVFeOk/oaK8OQb8cQq14qXtYsbDIu DAafm31kxp7zK2OTfV25BL5Q640MolHyCB/I4SWREVqBoBnRZg4m43drZGJNMvow vrHSYzfq0bZBy3eXKaK/RHPnhCFETr1HFpYhvpwJ5xeCNBNiljYDCgglYrJuxI5X G6uCkA/Ruw6E0jgViOl3tl0c6LUdq8CQXwRa0qfUF+0V4P72cYi9iT0T7noltCxW Pry8nOgrB7oO1vZ3Jtrm9pMYzzFa/d5aKBYX+u0ZjCJYVAAXHO+yqhoBYRuRC0FX 9AfWyDmfoFvapoGmQTHGVRkUlLoIeJqL -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:34 2025 by rpki-client