$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft File: jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json) Hash identifier: U+gqpGndkVDW1uxDalhFfMMnc3HN78YkRqp92ElUTLc= Subject key identifier: 7B:29:D9:4F:74:6A:0D:44:E3:1D:01:D1:AA:67:1E:03:4D:A4:21:F3 Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5 Certificate issuer: /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft Manifest number: 9E Signing time: Sun 19 Oct 2025 09:35:36 +0000 Manifest this update: Sun 19 Oct 2025 09:35:35 +0000 Manifest next update: Sun 26 Oct 2025 09:35:35 +0000 Files and hashes: 1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: ELEom/TUXiPWSoikDLnInW4u1gbz0wg2G9SrJICPkAk=) 2: A1FE9790C1B111EFACAB4071C4F9AE02.roa (hash: nTebHJ2nY/z4pA9GR9Zium43gwzyk8WFga213syhwvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5 Validity Not Before: Oct 19 09:35:35 2025 GMT Not After : Oct 26 09:35:35 2025 GMT Subject: CN=68f4b0e7-d136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:81:96:62:a7:d6:26:74:e4:17:1e:ce:9c: a9:30:75:af:4c:03:dc:f6:10:f0:4b:98:88:26:41: c2:e1:1e:c8:01:a0:db:f8:d2:bd:a0:5a:be:9e:3b: 4c:eb:ef:0d:d2:ce:b8:9c:57:72:b0:eb:b6:50:34: 0a:12:33:de:d6:1b:9d:5a:9b:89:ad:e4:fb:3b:a3: e9:55:6f:7f:6e:d9:0c:59:ac:a6:3d:cb:0e:f1:bd: f1:26:45:da:09:3d:27:cc:18:4e:f4:62:8e:ab:a9: 73:30:10:36:a9:82:5a:cc:e8:78:0a:aa:4d:ed:cb: 59:ed:91:15:43:e6:e1:7c:3a:51:5a:1a:45:57:36: 06:a2:4a:8a:3b:21:77:79:d0:6c:14:d2:34:39:98: be:38:45:3d:d1:41:8c:f4:2e:8e:0a:c2:ad:16:14: c7:58:ee:f3:a7:5c:e6:5f:b4:f3:3e:d3:45:ed:c4: cf:63:c9:b0:80:81:d0:47:09:c7:d1:58:8a:0e:48: e9:d7:4c:a0:e4:46:51:3d:ce:df:23:57:13:88:c7: 2a:ac:2d:0e:7e:15:8a:59:b2:fd:ae:62:43:d1:24: 6d:18:13:d3:ad:d9:9a:d1:4e:74:3d:bc:24:04:db: b0:32:60:28:ba:e2:a0:42:66:0d:07:67:68:e5:7c: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:29:D9:4F:74:6A:0D:44:E3:1D:01:D1:AA:67:1E:03:4D:A4:21:F3 X509v3 Authority Key Identifier: keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dd:2f:a3:6a:b9:f0:18:d2:37:8b:0c:75:66:8c:06:d2:4d: a4:ff:b1:d9:1f:0a:ca:3c:36:7d:a2:6e:d4:67:4f:8d:ef:4e: 2a:40:93:e7:4f:ed:d0:4f:85:8b:5e:f5:f0:a6:af:05:d9:b0: 13:c4:c7:a1:9d:c2:8f:cf:73:da:5a:e7:67:ae:75:00:ec:9e: 78:c4:17:e0:6e:89:6d:6a:2d:62:39:97:2b:79:18:29:9d:0f: ae:e8:f4:34:19:2f:43:d2:ba:f2:b1:cf:b4:e3:3c:ca:ac:11: 81:46:e7:50:00:ac:04:3f:f9:48:f8:48:3e:f7:8f:47:21:be: 32:94:9b:60:72:27:52:20:1f:fc:13:6b:00:3b:0c:68:b8:d0: bd:69:d0:01:6a:b2:a5:58:dd:98:f3:fa:46:3c:2d:cb:ad:2c: 12:eb:2b:ec:6b:a2:cf:e6:7d:70:32:f0:c7:eb:6f:31:9d:bf: 3b:87:31:d6:85:60:5f:9e:85:38:a4:9e:43:f3:06:d2:a9:5a: 04:93:0d:28:75:ea:59:23:74:c3:12:08:53:64:6c:fd:cb:fd: ce:8c:63:bd:71:e1:a2:d4:99:09:36:2a:b2:e7:3a:12:2d:a1: 0d:a5:76:7c:41:cc:d5:35:ac:ab:4f:5d:87:26:91:9d:9d:cc: d6:7a:8f:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGMTkxMTAvBgNVBAUTKDhENjExRjJDRDczNzk0QUY4MDFDMUJGNjlEODg0ODA5 MTM4MEI0QTUwHhcNMjUxMDE5MDkzNTM1WhcNMjUxMDI2MDkzNTM1WjAYMRYwFAYD VQQDEw02OGY0YjBlNy1kMTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3w+BlmKn1iZ05BcezpypMHWvTAPc9hDwS5iIJkHC4R7IAaDb+NK9oFq+njtM 6+8N0s64nFdysOu2UDQKEjPe1hudWpuJreT7O6PpVW9/btkMWaymPcsO8b3xJkXa CT0nzBhO9GKOq6lzMBA2qYJazOh4CqpN7ctZ7ZEVQ+bhfDpRWhpFVzYGokqKOyF3 edBsFNI0OZi+OEU90UGM9C6OCsKtFhTHWO7zp1zmX7TzPtNF7cTPY8mwgIHQRwnH 0ViKDkjp10yg5EZRPc7fI1cTiMcqrC0OfhWKWbL9rmJD0SRtGBPTrdma0U50Pbwk BNuwMmAouuKgQmYNB2do5XwrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsp2U90 ag1E4x0B0apnHgNNpCHzMB8GA1UdIwQYMBaAFI1hHyzXN5SvgBwb9p2ISAkTgLSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkYxOS9EMjNDQjBCQUMx QUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xLLUFIQnYyblloSUNST0F0 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkYxOS9EMjNDQjBCQUMxQUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xL LUFIQnYyblloSUNST0F0S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA83S+jarnwGNI3iwx1ZowG0k2k/7HZHwrKPDZ9om7UZ0+N704qQJPn T+3QT4WLXvXwpq8F2bATxMehncKPz3PaWudnrnUA7J54xBfgboltai1iOZcreRgp nQ+u6PQ0GS9D0rrysc+04zzKrBGBRudQAKwEP/lI+Eg+949HIb4ylJtgcidSIB/8 E2sAOwxouNC9adABarKlWN2Y8/pGPC3LrSwS6yvsa6LP5n1wMvDH628xnb87hzHW hWBfnoU4pJ5D8wbSqVoEkw0odepZI3TDEghTZGz9y/3OjGO9ceGi1JkJNiqy5zoS LaENpXZ8QczVNayrT12HJpGdnczWeo9l -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:52 2025 by rpki-client