$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: 8UdAUrINjZau+bbNJmiIL6UeEa8zyPbkZCv6L525sz4= Subject key identifier: 8A:9F:A1:EC:2D:70:79:21:03:F2:53:F6:E6:DC:0D:9B:C3:4E:D8:50 Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0B4B Signing time: Sat 18 Oct 2025 20:04:54 +0000 Manifest this update: Sat 18 Oct 2025 20:04:54 +0000 Manifest next update: Sat 25 Oct 2025 20:04:54 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: z9f4lC/b2jaaKHxzpMioZSpGsc9S8qvnEJLHj3CWgiQ=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: IB+34xalro/jHkO5e293QU71HFEZbQKkc7BC3RGNr7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: Oct 18 20:04:54 2025 GMT Not After : Oct 25 20:04:54 2025 GMT Subject: CN=68f3f2e6-83b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:b0:11:b8:a0:22:61:38:2f:bc:95:8a:4f: ce:85:06:d5:85:4a:84:38:69:58:87:46:1a:5a:da: 34:04:3b:8d:e3:4d:87:dd:45:d1:20:94:b7:67:e9: 1d:76:3a:c8:12:b2:43:6a:4b:80:60:75:b4:e9:4b: 23:25:9d:0b:2d:29:de:4c:a2:e6:ff:62:bd:89:6f: 63:08:a4:f5:89:b7:e1:1d:4f:8f:1d:cc:0c:50:06: 95:cf:74:24:22:7a:b9:14:0f:1e:17:e8:6d:d9:15: a0:d9:4e:da:44:0f:eb:02:7b:6e:60:3e:95:39:91: 82:10:ab:a2:58:98:fc:39:01:a9:ad:86:0c:ea:46: ec:a9:4d:85:21:5e:71:1c:bb:d0:e6:58:c9:67:b8: d3:45:16:61:b0:62:98:64:62:1c:03:92:05:fb:e7: 3e:1c:ff:c7:09:00:61:7b:12:3d:41:03:28:1d:7b: 01:01:33:2d:3d:e5:16:07:0d:2e:fe:fe:51:12:0f: 58:15:0b:82:e1:40:ec:aa:ff:d4:d0:bc:43:44:6d: 02:d4:f7:07:a8:c0:47:bf:45:8f:c7:b9:6a:4a:ed: 88:ef:13:9c:dd:c9:a4:dd:34:af:ab:99:6c:97:ae: 5b:4a:38:85:ab:54:bb:5f:06:09:1c:b6:81:60:2f: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:A1:EC:2D:70:79:21:03:F2:53:F6:E6:DC:0D:9B:C3:4E:D8:50 X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:68:ec:a1:d9:aa:bd:9e:1f:ac:5d:1d:c9:cb:54:11:0f:a5: 77:42:ec:36:ba:4a:18:7a:2b:71:39:af:c0:b7:41:50:96:87: c0:5a:44:13:13:9f:c2:ce:0d:97:7f:c8:47:43:57:02:f2:67: 14:6f:0c:70:d9:76:26:ca:5c:55:8d:0f:d3:de:d2:e5:54:af: ff:90:b8:d8:95:69:9f:ea:e7:9a:f8:59:f2:17:ae:43:83:3f: 0c:0d:f1:c4:ce:29:00:74:6a:c9:a3:bd:a0:0f:bd:0e:e9:0f: ac:6e:e8:fe:03:d5:a0:c2:b1:7c:db:12:49:35:31:ea:f5:94: cc:12:67:13:1c:17:2e:25:3b:d1:d3:30:6b:0c:2a:71:6c:7b: a9:7c:54:cc:4d:26:36:30:c0:04:c8:ce:d1:88:4e:7e:1e:7d: 69:4c:bc:4f:ac:cf:a0:4a:c7:83:90:19:9f:11:c2:81:07:54: 06:23:53:96:2d:59:5f:43:e3:11:8e:a8:ad:d3:5a:a4:4e:05: 6c:75:7d:5c:10:75:5c:aa:3e:4b:6a:16:c0:bf:13:bc:08:9c: f5:92:05:dd:31:c4:dc:7c:46:6e:02:e7:07:e2:65:a2:cd:58: f2:1a:6b:f7:d9:57:2b:85:4f:1e:5f:27:e0:bd:99:cd:6a:15: b4:b0:18:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjUxMDE4MjAwNDU0WhcNMjUxMDI1MjAwNDU0WjAYMRYwFAYD VQQDEw02OGYzZjJlNi04M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodywEbigImE4L7yVik/OhQbVhUqEOGlYh0YaWto0BDuN402H3UXRIJS3Z+kd djrIErJDakuAYHW06UsjJZ0LLSneTKLm/2K9iW9jCKT1ibfhHU+PHcwMUAaVz3Qk Inq5FA8eF+ht2RWg2U7aRA/rAntuYD6VOZGCEKuiWJj8OQGprYYM6kbsqU2FIV5x HLvQ5ljJZ7jTRRZhsGKYZGIcA5IF++c+HP/HCQBhexI9QQMoHXsBATMtPeUWBw0u /v5REg9YFQuC4UDsqv/U0LxDRG0C1PcHqMBHv0WPx7lqSu2I7xOc3cmk3TSvq5ls l65bSjiFq1S7XwYJHLaBYC/45wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqfoewt cHkhA/JT9ubcDZvDTthQMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/aOyh2aq9nh+sXR3Jy1QRD6V3Quw2ukoYeitxOa/At0FQlofAWkQT E5/Czg2Xf8hHQ1cC8mcUbwxw2XYmylxVjQ/T3tLlVK//kLjYlWmf6uea+FnyF65D gz8MDfHEzikAdGrJo72gD70O6Q+sbuj+A9WgwrF82xJJNTHq9ZTMEmcTHBcuJTvR 0zBrDCpxbHupfFTMTSY2MMAEyM7RiE5+Hn1pTLxPrM+gSseDkBmfEcKBB1QGI1OW LVlfQ+MRjqit01qkTgVsdX1cEHVcqj5LahbAvxO8CJz1kgXdMcTcfEZuAucH4mWi zVjyGmv32VcrhU8eXyfgvZnNahW0sBjX -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:41 2025 by rpki-client