$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: 0yEWDsHpm6e+am7z5+Zd1Yj0znpLO9fMlaLClqMpD8Y= Subject key identifier: 20:8A:77:2D:50:6D:B9:15:E8:A9:21:89:57:AF:0E:F2:84:B0:34:CC Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 01B7 Signing time: Sun 19 Oct 2025 05:33:46 +0000 Manifest this update: Sun 19 Oct 2025 05:33:45 +0000 Manifest next update: Sun 26 Oct 2025 05:33:45 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: EAsAVYTUMMhohpQc0XbsuDm3W72a7u8Regg6EkkgwII=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: TJboroWTjSH5MHMWjJ273LEWmOXtmootlWn74QKDiMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Oct 19 05:33:45 2025 GMT Not After : Oct 26 05:33:45 2025 GMT Subject: CN=68f4783a-a5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:29:d1:b2:2e:4e:d3:04:9e:f4:95:7f:ea: 13:80:0e:2a:05:2a:d1:42:cb:86:b0:ab:9e:3c:01: b4:d5:8f:3b:90:63:14:8d:23:c9:0f:cf:fe:cb:f6: be:cd:f8:1f:f8:09:f8:30:20:cc:f1:f5:f3:da:c1: 48:5d:77:c2:18:d2:9e:12:68:54:34:85:3a:65:91: 83:a6:ef:d5:11:9a:27:88:cc:55:95:19:28:27:cf: 7c:03:7a:42:e1:89:14:cc:aa:40:96:4c:73:95:cb: 26:46:97:e9:d8:0a:e0:bf:1d:1c:50:fe:71:37:33: f2:6f:fb:77:14:ae:55:03:36:de:c0:5b:14:e1:d0: c9:4e:22:89:e6:d7:67:4e:b8:3f:d5:2d:da:47:f2: 59:5d:94:cc:3b:cd:25:ae:60:7a:d4:b0:42:63:66: 18:6e:21:7e:fa:03:57:8f:59:d5:31:dd:dd:32:a7: 39:4f:2c:08:86:00:3d:4f:5f:0b:37:94:3c:b9:95: e4:88:04:50:63:6a:38:7f:d4:d2:99:a1:99:03:4d: 4f:21:b9:11:11:a6:8f:7b:b2:f4:20:a8:85:1a:09: d7:85:d4:fd:f6:3a:d8:3e:dc:e1:77:ba:c6:6d:87: e5:7a:59:f0:7d:23:94:ae:42:ab:0a:bf:2f:f7:7a: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:77:2D:50:6D:B9:15:E8:A9:21:89:57:AF:0E:F2:84:B0:34:CC X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:97:e1:15:1a:61:54:1d:61:6f:13:21:bc:7d:5f:8c:79:ce: fd:5c:38:4d:d9:94:46:27:4c:03:b9:9f:01:70:ae:05:3b:90: dc:57:60:8d:b8:ad:ec:61:a0:de:9b:39:36:09:ef:c8:45:97: 06:f8:be:97:94:b6:4c:01:88:69:12:8c:37:d1:cd:9c:84:4c: e8:20:7e:1d:7f:71:e0:ef:1f:b0:9b:4a:0b:bb:be:6c:97:e9: bd:28:92:1a:2b:ce:e4:ce:de:9c:4e:f5:7e:9a:5f:b0:80:87: c1:73:ba:20:8f:65:84:aa:41:9b:cd:a1:a6:90:b0:fb:76:1e: 58:03:21:c9:e9:81:bb:73:cb:94:50:58:f2:ac:14:38:2d:3f: cb:1a:03:94:2b:58:7e:60:cf:24:28:d4:64:44:a8:b4:c0:a8: 71:b0:b6:82:4a:93:f5:f7:37:7f:eb:4a:b3:c5:2f:09:ff:39: bc:75:1b:80:c4:2a:39:3e:0d:66:f3:ae:47:ea:38:97:da:c3: 55:44:00:db:90:97:6a:5e:33:d6:24:ac:09:e5:d3:20:0f:03: 15:96:ff:ae:6d:f2:6d:44:aa:55:7a:b7:da:41:ed:fd:18:ba: 81:ba:8b:ce:e9:48:c8:9e:07:82:ea:28:ab:9a:e5:c7:86:66: 31:51:ec:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjUxMDE5MDUzMzQ1WhcNMjUxMDI2MDUzMzQ1WjAYMRYwFAYD VQQDEw02OGY0NzgzYS1hNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0kp0bIuTtMEnvSVf+oTgA4qBSrRQsuGsKuePAG01Y87kGMUjSPJD8/+y/a+ zfgf+An4MCDM8fXz2sFIXXfCGNKeEmhUNIU6ZZGDpu/VEZoniMxVlRkoJ898A3pC 4YkUzKpAlkxzlcsmRpfp2Argvx0cUP5xNzPyb/t3FK5VAzbewFsU4dDJTiKJ5tdn Trg/1S3aR/JZXZTMO80lrmB61LBCY2YYbiF++gNXj1nVMd3dMqc5TywIhgA9T18L N5Q8uZXkiARQY2o4f9TSmaGZA01PIbkREaaPe7L0IKiFGgnXhdT99jrYPtzhd7rG bYflelnwfSOUrkKrCr8v93olSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCKdy1Q bbkV6KkhiVevDvKEsDTMMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsl+EVGmFUHWFvEyG8fV+Mec79XDhN2ZRGJ0wDuZ8BcK4FO5DcV2CN uK3sYaDemzk2Ce/IRZcG+L6XlLZMAYhpEow30c2chEzoIH4df3Hg7x+wm0oLu75s l+m9KJIaK87kzt6cTvV+ml+wgIfBc7ogj2WEqkGbzaGmkLD7dh5YAyHJ6YG7c8uU UFjyrBQ4LT/LGgOUK1h+YM8kKNRkRKi0wKhxsLaCSpP19zd/60qzxS8J/zm8dRuA xCo5Pg1m865H6jiX2sNVRADbkJdqXjPWJKwJ5dMgDwMVlv+ubfJtRKpVerfaQe39 GLqBuovO6UjIngeC6iirmuXHhmYxUez8 -----END CERTIFICATE-----Generated at Mon Oct 20 16:37:15 2025 by rpki-client