$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: A9Kx0gp8v8e+TANoQhcg1RlW6U0b204g2Qsozi/CEDM= Subject key identifier: F3:F2:44:BA:23:F8:F7:CE:96:C8:4D:28:D8:AA:4C:59:9F:F2:FC:6F Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0A52 Signing time: Tue 04 Nov 2025 19:49:47 +0000 Manifest this update: Tue 04 Nov 2025 19:49:47 +0000 Manifest next update: Tue 11 Nov 2025 19:49:47 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: S9A4w1I/xnn6MtTaWkz8fQN/J1PqVwyOC3EOVZsXcTg=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 3nC+gG2mDTZBTV04V3x6XaZzq6tvXUY+nCHa8UvPHpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Nov 4 19:49:47 2025 GMT Not After : Nov 11 19:49:47 2025 GMT Subject: CN=690a58db-d29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:52:68:e4:6d:06:f2:c7:cc:01:76:5b:55: b2:4b:6b:b3:6a:8f:1a:24:1e:c6:68:d6:a9:83:3c: 00:25:2c:48:30:5e:cf:5f:51:31:42:84:78:2c:e1: d9:28:cf:46:07:19:6e:35:33:1e:ed:cd:fb:ce:fb: 89:9e:b6:8a:82:42:9c:45:d6:3c:ca:f5:bc:b5:0f: 4a:37:1a:19:c5:69:b2:89:56:ad:43:ce:b3:ae:71: 6b:32:d4:6e:83:da:a9:b1:73:bf:95:65:58:fa:db: fe:df:ea:42:9a:d9:6b:ca:3f:0a:4d:e2:f8:20:6d: 5f:8d:1a:db:fd:13:79:85:0b:28:c4:d5:7d:5d:3e: 7f:cd:da:bc:2a:6f:53:7e:e1:74:8e:bc:ce:a8:7b: b5:b8:60:b8:0e:c8:40:d8:3c:bf:13:20:2c:c4:ed: 63:2b:29:1f:6f:04:7e:c9:62:6e:43:a8:91:e6:7c: ff:4d:ae:77:81:1a:db:4c:6e:8d:3e:49:6c:da:a9: 96:6f:fd:52:3f:5a:01:a7:cb:1a:e2:6d:40:d7:91: 29:d3:0f:68:fe:f4:03:30:6e:33:88:5a:65:34:e3: 03:8c:8a:04:a5:05:b1:2b:a9:be:72:67:c9:f9:69: 0e:19:ac:d8:a6:a5:18:76:ff:17:b5:cd:85:29:6d: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:44:BA:23:F8:F7:CE:96:C8:4D:28:D8:AA:4C:59:9F:F2:FC:6F X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:69:8c:8f:25:9a:48:dc:a7:ea:3e:d7:79:b1:a6:24:a0:05: 64:3f:16:2f:7d:35:47:49:9d:63:d4:b3:23:da:1e:c6:13:26: 36:8c:80:8c:e2:85:9a:a2:68:e2:22:95:05:38:72:32:29:20: 7a:ec:c5:d6:85:55:d3:f6:f1:6e:09:07:34:62:fb:a2:7e:d2: c6:2e:d0:8d:37:6c:8a:53:7c:26:36:56:d9:29:1e:60:bd:b2: a1:46:6a:67:5a:65:2b:c7:5d:a3:17:21:d2:2a:15:6f:f8:a2: 74:08:82:38:5b:b4:20:53:9d:4e:7a:94:4c:77:04:c3:d0:93: 46:8d:c7:3a:69:80:91:d2:c9:12:f2:46:56:47:79:f8:93:4f: bf:eb:7d:67:e8:9c:3f:85:70:73:01:55:db:94:ec:8c:96:49: e5:ca:2f:fa:46:51:a3:3a:f0:80:c2:bf:bc:50:50:04:8d:80: f0:af:81:58:9d:ea:93:16:56:07:ec:7e:5e:8b:3c:e1:f0:de: 0c:2a:52:bf:7a:d7:6e:25:3f:54:f3:00:ae:af:b9:2f:3e:b0: 1a:0f:bb:5a:ca:3c:d8:27:c6:78:73:f8:ca:16:e3:e3:40:2c: 78:86:cf:87:b9:0b:26:0b:7d:a4:00:2e:bf:c9:79:87:a4:80: 7a:6b:77:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUxMTA0MTk0OTQ3WhcNMjUxMTExMTk0OTQ3WjAYMRYwFAYD VQQDEw02OTBhNThkYi1kMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EJSaORtBvLHzAF2W1WyS2uzao8aJB7GaNapgzwAJSxIMF7PX1ExQoR4LOHZ KM9GBxluNTMe7c37zvuJnraKgkKcRdY8yvW8tQ9KNxoZxWmyiVatQ86zrnFrMtRu g9qpsXO/lWVY+tv+3+pCmtlryj8KTeL4IG1fjRrb/RN5hQsoxNV9XT5/zdq8Km9T fuF0jrzOqHu1uGC4DshA2Dy/EyAsxO1jKykfbwR+yWJuQ6iR5nz/Ta53gRrbTG6N Pkls2qmWb/1SP1oBp8sa4m1A15Ep0w9o/vQDMG4ziFplNOMDjIoEpQWxK6m+cmfJ +WkOGazYpqUYdv8Xtc2FKW3veQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPyRLoj +PfOlshNKNiqTFmf8vxvMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiaYyPJZpI3KfqPtd5saYkoAVkPxYvfTVHSZ1j1LMj2h7GEyY2jICM 4oWaomjiIpUFOHIyKSB67MXWhVXT9vFuCQc0YvuiftLGLtCNN2yKU3wmNlbZKR5g vbKhRmpnWmUrx12jFyHSKhVv+KJ0CII4W7QgU51OepRMdwTD0JNGjcc6aYCR0skS 8kZWR3n4k0+/631n6Jw/hXBzAVXblOyMlknlyi/6RlGjOvCAwr+8UFAEjYDwr4FY neqTFlYH7H5eizzh8N4MKlK/etduJT9U8wCur7kvPrAaD7tayjzYJ8Z4c/jKFuPj QCx4hs+HuQsmC32kAC6/yXmHpIB6a3d0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:35 2025 by rpki-client