$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: OtTVLQfJvxKTe/3UVy4TbRpW8yqBcLMdDJI4ParoxvQ= Subject key identifier: CA:FC:9A:07:06:31:E9:14:42:AE:8A:17:7A:93:1B:35:56:24:CC:09 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: EB Signing time: Sun 19 Oct 2025 08:19:09 +0000 Manifest this update: Sun 19 Oct 2025 08:19:08 +0000 Manifest next update: Sun 26 Oct 2025 08:19:08 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: qC4xY6Bc59WpLZYvInUys5iodfm2YzsgrMGGAWGVzHM=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Oct 19 08:19:08 2025 GMT Not After : Oct 26 08:19:08 2025 GMT Subject: CN=68f49efd-ed47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:13:30:f2:35:dc:9d:1f:c8:23:fc:8c:1e:48: c2:88:6f:36:49:70:ca:2a:de:0a:3a:62:20:82:cf: 52:67:96:30:f9:83:b9:d3:92:43:91:85:fd:09:ea: 80:20:ea:86:01:c5:71:d2:8c:f1:32:1d:42:de:ff: 5d:7b:5f:89:44:86:8b:62:4a:aa:b2:2a:e3:ce:2e: a6:c4:0b:bc:3d:72:54:aa:24:39:9e:57:c5:15:71: 2d:1b:cf:d9:53:a8:53:1d:00:42:1d:77:df:2a:f7: ea:0c:dc:e9:f3:38:3d:a1:dc:0d:14:4f:37:c7:8c: 26:b7:a7:0d:25:ce:36:b6:08:07:f8:a3:7f:1d:0c: b0:28:82:a3:bf:77:ac:9e:d5:91:cc:13:4b:de:8b: ef:5b:14:7f:11:43:cb:86:bf:fc:9c:91:4b:07:91: a5:a8:10:91:f5:36:eb:b2:f8:cd:70:1d:f1:87:5b: 07:54:ee:67:99:87:f1:de:52:8e:bc:e8:b5:f6:40: b7:28:5c:40:ca:17:66:ca:68:34:7a:d9:5a:42:b5: 67:b0:8d:13:e0:97:f8:7f:c2:48:91:cf:42:8f:5e: 6d:a6:27:db:7d:cf:e3:82:99:27:42:db:bd:cf:a0: 4b:38:08:5c:71:47:df:af:b8:18:e6:45:84:1e:14: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FC:9A:07:06:31:E9:14:42:AE:8A:17:7A:93:1B:35:56:24:CC:09 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6c:0d:69:5a:d8:ed:b8:51:e3:2d:96:dc:af:e1:8f:02:92: 67:ca:3a:ce:34:73:15:62:c0:3b:0f:72:f5:3d:ae:e3:2b:2b: 8a:3e:1a:d8:14:f5:9a:20:d4:2f:dc:02:86:e8:ba:87:72:ac: b9:df:28:3b:36:91:e0:61:52:fd:b4:86:16:60:08:6f:a9:55: 65:9a:a2:ad:a1:a8:df:f8:e4:ae:25:d0:14:4b:df:aa:82:0c: 6f:58:62:e6:49:a8:ee:67:e0:ef:1a:ac:3b:4c:b5:4b:c7:0a: 62:c2:46:d5:95:b5:26:b7:e5:21:61:c8:87:c9:91:19:f4:44: 20:92:7e:2e:25:c0:a6:24:db:90:f4:2f:66:15:4b:04:a0:f3: 8a:c3:5d:01:ad:0c:dd:15:36:1f:71:34:ff:d9:2b:de:4c:db: 93:cb:69:05:a0:30:22:70:e5:c7:e0:3d:d3:b9:f2:ed:36:ae: 59:aa:88:2f:1a:a7:3c:1c:67:e0:ae:c6:4a:c1:a8:48:4f:7b: 60:f9:58:70:a9:aa:43:42:12:08:85:3c:0c:22:1e:d4:ee:f2: c1:d1:07:ce:c7:86:6d:fc:12:30:12:f0:7f:f6:49:e1:27:7a: cd:56:a9:d9:e0:20:97:db:2d:d8:8f:1c:d8:d4:43:2d:af:be: 4f:7b:50:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUxMDE5MDgxOTA4WhcNMjUxMDI2MDgxOTA4WjAYMRYwFAYD VQQDEw02OGY0OWVmZC1lZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BMw8jXcnR/II/yMHkjCiG82SXDKKt4KOmIggs9SZ5Yw+YO505JDkYX9CeqA IOqGAcVx0ozxMh1C3v9de1+JRIaLYkqqsirjzi6mxAu8PXJUqiQ5nlfFFXEtG8/Z U6hTHQBCHXffKvfqDNzp8zg9odwNFE83x4wmt6cNJc42tggH+KN/HQywKIKjv3es ntWRzBNL3ovvWxR/EUPLhr/8nJFLB5GlqBCR9TbrsvjNcB3xh1sHVO5nmYfx3lKO vOi19kC3KFxAyhdmymg0etlaQrVnsI0T4Jf4f8JIkc9Cj15tpifbfc/jgpknQtu9 z6BLOAhccUffr7gY5kWEHhQckwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr8mgcG MekUQq6KF3qTGzVWJMwJMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0bA1pWtjtuFHjLZbcr+GPApJnyjrONHMVYsA7D3L1Pa7jKyuKPhrY FPWaINQv3AKG6LqHcqy53yg7NpHgYVL9tIYWYAhvqVVlmqKtoajf+OSuJdAUS9+q ggxvWGLmSajuZ+DvGqw7TLVLxwpiwkbVlbUmt+UhYciHyZEZ9EQgkn4uJcCmJNuQ 9C9mFUsEoPOKw10BrQzdFTYfcTT/2SveTNuTy2kFoDAicOXH4D3TufLtNq5Zqogv Gqc8HGfgrsZKwahIT3tg+VhwqapDQhIIhTwMIh7U7vLB0QfOx4Zt/BIwEvB/9knh J3rNVqnZ4CCX2y3YjxzY1EMtr75Pe1Dm -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:46 2025 by rpki-client