$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json) Hash identifier: zNXTzRAOKOKkWXrfL5S+1duiJqQoizo8QUE77KVt++g= Subject key identifier: E0:7B:AB:C4:A9:9D:F1:EE:E6:6A:10:14:96:DA:C3:A4:E4:B4:98:C7 Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft Manifest number: 01DC Signing time: Wed 05 Nov 2025 02:57:35 +0000 Manifest this update: Wed 05 Nov 2025 02:57:34 +0000 Manifest next update: Wed 12 Nov 2025 02:57:34 +0000 Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: uCFpqzjpPyM3o+11hrAGM6fKV+tskz701AU6AJJPYkw=) 2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: y2CRuE70MquHCIr0B6b6CP/AdGdh0+ETsyjf8zknJdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: Nov 5 02:57:34 2025 GMT Not After : Nov 12 02:57:34 2025 GMT Subject: CN=690abd1e-733a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:70:5b:ec:70:d7:31:01:77:be:91:d8:b6: 61:59:28:75:0e:76:7d:00:a7:f6:13:53:f8:62:4e: 08:c0:55:09:81:50:f3:59:12:01:0d:8f:f5:9f:c0: cb:88:cf:ce:24:19:21:55:3c:bf:39:c4:4d:0a:ef: 75:70:52:f1:4b:df:bb:4d:2e:37:38:56:df:4e:0d: 11:e5:37:a6:c5:49:05:a3:86:84:5d:f0:70:25:4f: 30:97:3d:e4:55:33:da:e9:80:84:14:09:21:96:54: fb:0e:b4:31:df:9a:72:a8:e1:49:d9:e1:0f:46:2f: 05:4f:e1:ea:cc:9e:6f:ae:16:41:85:e2:da:3b:c2: c9:71:a6:b7:a7:d0:65:77:01:75:9f:90:2f:1a:3f: 08:35:d3:8a:ad:58:92:83:64:e8:f9:99:2b:e6:31: d7:4d:34:15:57:76:ac:84:c6:7d:46:75:0c:4b:31: 36:f0:b6:09:b5:a8:d5:08:17:2d:b1:11:8c:09:3b: 34:17:7d:70:6d:39:6a:30:68:63:e3:39:25:26:2c: 08:46:9c:78:e9:e3:80:27:2f:09:11:d9:34:ed:bb: 80:ea:b3:83:14:91:da:59:2f:ad:5f:9d:a6:ba:e0: 8c:2c:9b:f7:3c:22:ed:d7:3e:a7:4b:d8:36:5c:3a: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7B:AB:C4:A9:9D:F1:EE:E6:6A:10:14:96:DA:C3:A4:E4:B4:98:C7 X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:5d:80:7f:49:a2:67:de:79:eb:14:f3:08:c2:86:db:c6:88: de:66:e8:22:97:10:3a:ee:e6:f8:fa:c4:df:f9:1a:5e:7e:a8: 28:8f:78:d5:55:4d:71:ff:a0:6f:47:21:24:4d:f6:6a:39:aa: a1:47:9c:81:14:dc:76:8b:f2:ba:17:f2:02:18:a3:70:f0:bd: 81:9e:46:fe:53:68:5a:68:74:21:4a:6a:5d:fa:d4:97:55:7d: 0d:39:49:0d:cf:d1:f8:da:42:37:d9:6d:38:67:10:a4:68:ce: 83:c0:99:9d:d4:5d:56:20:15:e8:1e:39:b5:98:65:1a:8b:c4: dd:44:93:58:bc:5f:d7:02:cb:65:35:6c:a8:47:80:8b:9d:5d: 0d:10:3c:26:f9:07:52:51:75:1d:f5:37:d1:c1:fe:6a:01:62: 1e:a3:d3:c5:13:20:20:2a:e5:09:cd:08:09:d4:bc:71:cb:12: f4:ab:6e:59:79:b5:62:a9:5d:11:ff:0c:27:98:4d:72:5c:0a: d5:91:c7:c2:bc:24:bf:31:dd:7e:a1:d2:e1:3f:03:e6:1e:91: 6e:66:de:cd:02:3e:a4:b1:04:eb:12:02:00:48:10:a8:5a:3d: d3:01:4e:b5:c6:06:bc:ec:e5:3c:de:1e:39:22:61:7a:6c:d3: 0d:ef:3e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFMjQxMTAvBgNVBAUTKDI0MjIzRDBDN0QxMDFEQjdBRDdFM0NCOEREQjE3MDYy OTM2NUNBRUUwHhcNMjUxMTA1MDI1NzM0WhcNMjUxMTEyMDI1NzM0WjAYMRYwFAYD VQQDEw02OTBhYmQxZS03MzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LtwW+xw1zEBd76R2LZhWSh1DnZ9AKf2E1P4Yk4IwFUJgVDzWRIBDY/1n8DL iM/OJBkhVTy/OcRNCu91cFLxS9+7TS43OFbfTg0R5TemxUkFo4aEXfBwJU8wlz3k VTPa6YCEFAkhllT7DrQx35pyqOFJ2eEPRi8FT+HqzJ5vrhZBheLaO8LJcaa3p9Bl dwF1n5AvGj8INdOKrViSg2To+Zkr5jHXTTQVV3ashMZ9RnUMSzE28LYJtajVCBct sRGMCTs0F31wbTlqMGhj4zklJiwIRpx46eOAJy8JEdk07buA6rODFJHaWS+tX52m uuCMLJv3PCLt1z6nS9g2XDp1gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB7q8Sp nfHu5moQFJbaw6TktJjHMB8GA1UdIwQYMBaAFCQiPQx9EB23rX48uN2xcGKTZcru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUUyNC9GMkY2NzVGRUYz RkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhiZXRmank0M2JGd1lwTmx5 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhi ZXRmank0M2JGd1lwTmx5dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjXYB/SaJn3nnrFPMIwobbxojeZugilxA67ub4+sTf+Rpefqgoj3jV VU1x/6BvRyEkTfZqOaqhR5yBFNx2i/K6F/ICGKNw8L2Bnkb+U2haaHQhSmpd+tSX VX0NOUkNz9H42kI32W04ZxCkaM6DwJmd1F1WIBXoHjm1mGUai8TdRJNYvF/XAstl NWyoR4CLnV0NEDwm+QdSUXUd9TfRwf5qAWIeo9PFEyAgKuUJzQgJ1LxxyxL0q25Z ebViqV0R/wwnmE1yXArVkcfCvCS/Md1+odLhPwPmHpFuZt7NAj6ksQTrEgIASBCo Wj3TAU61xga87OU83h45ImF6bNMN7z60 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:20 2025 by rpki-client