$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: U7dn6htjhs8HTLFRbmxJmKJnx46z4reyxFliGON4MiQ= Subject key identifier: F2:E5:E4:71:8A:9F:52:30:C1:CA:A8:9B:48:C6:02:55:1E:BA:0B:14 Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: 0112 Signing time: Sun 19 Oct 2025 07:57:02 +0000 Manifest this update: Sun 19 Oct 2025 07:57:01 +0000 Manifest next update: Sun 26 Oct 2025 07:57:01 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: ucscS2YBQNsrdljgWK+SdNPYEnfn30FuT303lAOklWA=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: Oct 19 07:57:01 2025 GMT Not After : Oct 26 07:57:01 2025 GMT Subject: CN=68f499cd-a827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b7:9a:16:39:fb:09:0f:39:9a:b9:15:ec:62: 54:65:91:a6:f4:b2:67:ca:2a:f6:44:7d:d7:13:35: e9:7b:5a:7b:c9:62:eb:e6:62:46:ce:0e:6e:e2:ba: 35:cb:a5:f9:bf:5a:1e:42:34:d7:ef:7a:fe:52:90: 0e:5f:47:c8:3d:6a:fd:dc:81:58:25:31:19:a6:c5: a2:11:87:4a:44:f3:6c:b1:3e:57:3b:c9:62:b5:1a: 13:57:72:77:83:8d:6f:95:d2:fe:82:51:00:9c:ca: c1:d2:7b:52:3c:8a:f3:6b:92:5d:7f:c1:10:96:98: e8:0f:61:75:00:75:b2:3d:d3:a8:38:4c:72:b1:f4: c6:8b:f3:61:83:52:53:ac:39:49:0a:2f:03:bb:70: b1:18:1a:bd:dc:1d:a5:12:b2:ea:59:27:a4:cd:4b: 5b:c6:eb:0b:c7:3b:5b:f8:02:0f:b9:d8:d5:c4:e9: c3:7c:4e:38:e3:ef:19:cd:2a:df:e4:be:81:05:d5: 79:49:ff:28:7a:0d:f9:90:67:88:da:e5:d4:d5:20: 52:ff:74:ec:c0:fe:70:df:8f:77:74:83:91:a3:22: 01:cd:e8:92:23:73:c8:61:be:3f:8d:cd:ed:8a:4b: 31:4d:63:ac:28:bc:91:6c:bc:fd:4b:70:2e:94:4d: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E5:E4:71:8A:9F:52:30:C1:CA:A8:9B:48:C6:02:55:1E:BA:0B:14 X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bf:36:26:5e:36:12:34:8e:7c:19:6a:16:f1:b0:13:b4:f3: 94:af:04:ef:39:2b:6f:5b:e9:f8:96:31:ca:0e:5f:80:7b:fb: ab:33:b4:9c:28:88:a8:16:55:0f:bd:05:59:c6:de:69:57:59: 75:40:c5:9f:87:3a:83:1e:60:f0:9a:71:32:6f:ea:8f:e4:1f: 64:60:d5:d2:26:64:34:8a:7f:b5:11:2f:6e:7e:b2:09:36:98: c9:36:61:0d:79:fc:6c:f1:20:97:b8:17:ce:68:12:ea:9d:7f: f8:dc:c7:d6:7d:86:84:b3:45:80:88:94:a7:6c:88:6b:a3:ee: 21:91:85:f4:fe:07:75:f8:30:25:ec:2e:12:f6:3f:0d:ad:fa: be:8d:06:41:21:23:ba:b5:9c:af:3e:46:10:0b:e2:b2:e7:c3: 8a:06:39:a3:94:75:a8:bd:8f:0a:d9:76:47:aa:31:42:14:93: f4:22:76:81:09:d1:87:25:34:e1:02:21:d7:26:fa:84:17:4f: 43:90:cf:8d:5c:5e:53:1d:77:e1:bd:da:81:96:8c:a1:36:98: 53:8c:c5:ae:28:9b:58:5c:31:e0:eb:92:a1:c5:bd:78:df:3c: 7c:5f:9a:78:3b:b4:40:12:23:57:83:31:e7:e2:0e:6e:02:e4: d2:0b:f8:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUxMDE5MDc1NzAxWhcNMjUxMDI2MDc1NzAxWjAYMRYwFAYD VQQDEw02OGY0OTljZC1hODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2beaFjn7CQ85mrkV7GJUZZGm9LJnyir2RH3XEzXpe1p7yWLr5mJGzg5u4ro1 y6X5v1oeQjTX73r+UpAOX0fIPWr93IFYJTEZpsWiEYdKRPNssT5XO8litRoTV3J3 g41vldL+glEAnMrB0ntSPIrza5Jdf8EQlpjoD2F1AHWyPdOoOExysfTGi/Nhg1JT rDlJCi8Du3CxGBq93B2lErLqWSekzUtbxusLxztb+AIPudjVxOnDfE444+8ZzSrf 5L6BBdV5Sf8oeg35kGeI2uXU1SBS/3TswP5w3493dIORoyIBzeiSI3PIYb4/jc3t iksxTWOsKLyRbLz9S3AulE2zmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLl5HGK n1Iwwcqom0jGAlUeugsUMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPvzYmXjYSNI58GWoW8bATtPOUrwTvOStvW+n4ljHKDl+Ae/urM7Sc KIioFlUPvQVZxt5pV1l1QMWfhzqDHmDwmnEyb+qP5B9kYNXSJmQ0in+1ES9ufrIJ NpjJNmENefxs8SCXuBfOaBLqnX/43MfWfYaEs0WAiJSnbIhro+4hkYX0/gd1+DAl 7C4S9j8Nrfq+jQZBISO6tZyvPkYQC+Ky58OKBjmjlHWovY8K2XZHqjFCFJP0InaB CdGHJTThAiHXJvqEF09DkM+NXF5THXfhvdqBloyhNphTjMWuKJtYXDHg65Khxb14 3zx8X5p4O7RAEiNXgzHn4g5uAuTSC/jm -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:42 2025 by rpki-client