$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json) Hash identifier: dDpVMnqJkpROwgu+y0NDyGhNiYg9zTb6QNy1qB7xh2k= Subject key identifier: 5D:89:7C:57:13:AB:8D:71:54:9C:22:3E:3B:BD:AB:C5:41:4E:63:9D Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 1243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft Manifest number: 123A Signing time: Sat 18 Oct 2025 17:38:43 +0000 Manifest this update: Sat 18 Oct 2025 17:38:42 +0000 Manifest next update: Sat 25 Oct 2025 17:38:42 +0000 Files and hashes: 1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: WAFQPVOtasfRxRtVgy5ronH2A9ObDowostBGfjHY4hM=) 2: A295F860E71011E8899C3917C4F9AE02.roa (hash: u3ZjS5PQ+cLOr7B4bn5ZklBTiFJgjz1r0/eLvbqbKzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4675 (0x1243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Oct 18 17:38:42 2025 GMT Not After : Oct 25 17:38:42 2025 GMT Subject: CN=68f3d0a2-c65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:c7:d2:3f:07:04:98:57:eb:32:2d:31:c8: 10:bf:b4:87:44:35:45:47:f0:34:1d:24:23:91:d1: 3d:05:af:04:31:a4:e9:8e:b7:eb:72:cc:7d:77:57: e1:f4:4e:b6:63:56:94:14:62:ef:cc:e2:d1:55:73: c7:87:28:38:39:5e:e7:0e:11:da:f2:8a:a5:5b:96: f6:5f:12:56:90:d1:0e:17:89:5f:76:e2:99:a7:d1: a6:32:6a:e0:71:1b:72:9d:25:84:41:11:42:db:cd: 27:e3:5d:16:0f:6f:e2:92:0f:b3:37:1c:83:5c:bf: 78:22:64:14:24:9e:95:a0:81:61:a3:9a:31:6c:49: 0c:8e:a0:5b:67:59:e4:a9:0c:fa:06:ff:02:33:f4: 55:58:b2:11:a9:a6:ba:eb:43:af:22:04:99:b7:77: 23:56:cd:d2:c5:a4:1e:f1:8e:59:ba:ed:ed:89:1b: 59:46:f2:bf:22:21:20:c8:ae:a0:00:7f:6f:c5:11: a1:4c:25:70:09:c7:85:eb:8b:52:62:62:93:87:13: f0:c4:68:06:42:48:a9:11:10:37:ba:b4:5f:e1:87: ee:0d:98:98:be:68:1d:df:94:0d:7f:14:89:90:fe: 9a:9f:94:10:3d:82:9a:e4:91:dd:63:a2:15:b8:21: 7d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:89:7C:57:13:AB:8D:71:54:9C:22:3E:3B:BD:AB:C5:41:4E:63:9D X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:8f:90:19:56:d5:1a:19:29:68:bb:81:66:65:88:10:d2:0d: 03:43:37:20:90:3d:1a:ba:83:32:06:98:60:cb:f3:82:b1:99: 17:10:f4:b9:39:2c:99:e0:44:3a:88:1e:4e:a4:cd:9d:10:2e: c9:84:60:a6:bc:f2:32:05:0a:0e:d9:44:22:33:32:b4:98:79: ec:eb:8d:42:5c:75:a1:04:2f:f6:58:f9:cc:a2:6a:75:b0:ca: 4d:05:8b:a2:69:2a:fc:ba:2e:54:d1:ff:6e:ad:c9:36:e8:da: 68:c6:47:bf:da:0a:59:6b:f4:a9:3b:d4:70:b4:f5:e7:03:70: 3e:bd:77:2b:86:42:a5:6c:12:c3:9a:88:d7:d4:c3:46:50:72: e1:3b:43:65:de:35:3f:8f:95:af:dc:a8:d6:44:09:4f:01:08: cd:42:de:30:0b:e0:b8:33:19:a9:39:e0:5f:b5:90:a1:43:7e: 8d:41:81:33:f3:18:28:98:f4:53:05:87:98:0d:40:e1:ad:ba: 65:2e:c8:e7:8c:c0:42:73:b0:49:8e:8d:70:e2:72:09:ea:87: 87:8f:29:14:55:20:1c:8c:c3:e7:73:e5:26:fb:fc:22:c0:dc: 17:f9:60:24:de:4a:bb:b6:ae:ed:97:3d:b1:15:a1:44:11:0e: c5:b8:07:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjUxMDE4MTczODQyWhcNMjUxMDI1MTczODQyWjAYMRYwFAYD VQQDEw02OGYzZDBhMi1jNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvjH0j8HBJhX6zItMcgQv7SHRDVFR/A0HSQjkdE9Ba8EMaTpjrfrcsx9d1fh 9E62Y1aUFGLvzOLRVXPHhyg4OV7nDhHa8oqlW5b2XxJWkNEOF4lfduKZp9GmMmrg cRtynSWEQRFC280n410WD2/ikg+zNxyDXL94ImQUJJ6VoIFho5oxbEkMjqBbZ1nk qQz6Bv8CM/RVWLIRqaa660OvIgSZt3cjVs3SxaQe8Y5Zuu3tiRtZRvK/IiEgyK6g AH9vxRGhTCVwCceF64tSYmKThxPwxGgGQkipERA3urRf4YfuDZiYvmgd35QNfxSJ kP6an5QQPYKa5JHdY6IVuCF9wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2JfFcT q41xVJwiPju9q8VBTmOdMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf Wi14ZlNsUTZJRHBUNDg1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXj5AZVtUaGSlou4FmZYgQ0g0DQzcgkD0auoMyBphgy/OCsZkXEPS5 OSyZ4EQ6iB5OpM2dEC7JhGCmvPIyBQoO2UQiMzK0mHns641CXHWhBC/2WPnMomp1 sMpNBYuiaSr8ui5U0f9urck26Npoxke/2gpZa/SpO9RwtPXnA3A+vXcrhkKlbBLD mojX1MNGUHLhO0Nl3jU/j5Wv3KjWRAlPAQjNQt4wC+C4MxmpOeBftZChQ36NQYEz 8xgomPRTBYeYDUDhrbplLsjnjMBCc7BJjo1w4nIJ6oeHjykUVSAcjMPnc+Um+/wi wNwX+WAk3kq7tq7tlz2xFaFEEQ7FuAdN -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:44 2025 by rpki-client