$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: ZXEhmSPv8Aol0PT8y+ass5UGpBRVSu2uOMSefrtTevI= Subject key identifier: 71:60:19:7F:C8:A1:45:E3:0E:B2:8C:D1:3D:28:EC:5F:71:48:AC:21 Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 04FD Signing time: Mon 27 Oct 2025 00:41:36 +0000 Manifest this update: Mon 27 Oct 2025 00:41:35 +0000 Manifest next update: Mon 03 Nov 2025 00:41:35 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: UTyP41Oa2D7bYUI1vWkcjVbSN+OZGV09Z2MHPLjZ69k=) 2: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: tVHP7vE09ih639kPT+zHjlRDQm6GDfHkbd/XlPHcK/0=) 3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: 8OgnHoASF/UsFAo8WcuH4tg18eHyDNchCEmDTI3RcYo=) 4: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: Egnw+r9qbejML3EvsCqcWRH67VrUmMQV/ILZahM9IPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Oct 27 00:41:35 2025 GMT Not After : Nov 3 00:41:35 2025 GMT Subject: CN=68febfbf-e62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:e9:28:e9:08:12:eb:59:d6:4a:48:db:6f: 4b:de:1c:d1:24:b8:76:48:86:b3:ce:0a:49:7c:b0: 1b:91:cd:25:33:8f:fa:2c:9f:00:13:99:95:49:c0: 26:47:8c:59:6f:df:53:d4:19:11:17:78:6e:a1:98: 12:ff:4e:23:d5:6a:0a:61:61:3b:0f:1e:4e:81:24: c8:5f:ae:17:86:cd:b0:cc:c9:00:6d:c3:74:c5:ec: 31:75:56:fa:2b:29:a6:c8:b6:22:da:83:54:ca:d6: 22:83:2d:f6:f8:2b:3e:0a:3a:c4:98:18:33:75:38: 75:fd:b7:77:8b:40:56:f6:58:ee:c3:43:f6:2c:6a: b4:40:1b:6e:7e:93:cd:d8:bb:0c:f5:5d:13:a0:00: 0f:8e:a0:7f:2a:97:8c:fe:12:49:3f:f3:91:87:61: f9:0a:eb:49:45:4e:30:b6:c9:ce:63:6d:ec:c2:47: a5:e8:11:21:bb:0f:a0:f7:7c:95:fb:55:5d:66:22: 15:92:08:24:44:33:f9:d4:1a:e6:1c:90:c9:09:61: 1a:8d:32:e2:d3:08:ea:0a:46:c6:1f:71:bf:9d:c5: 2e:9e:13:f1:f3:a7:f0:cd:9e:95:6e:9a:61:0c:9e: 88:3f:6e:d6:ab:75:fa:57:cf:08:81:b5:6d:c3:91: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:60:19:7F:C8:A1:45:E3:0E:B2:8C:D1:3D:28:EC:5F:71:48:AC:21 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:14:32:a9:3a:8f:94:84:6e:38:37:dd:74:29:f8:68:74:0f: 94:e5:ce:71:4e:27:a6:fb:b8:50:30:f2:54:49:df:e6:f5:07: 57:c6:3f:71:f9:17:d4:a9:a4:25:15:d6:45:7f:4e:77:17:f8: 7c:b7:cf:08:3f:76:99:1b:4b:8f:2c:7c:da:0b:4b:ff:3b:e1: 61:cc:46:04:a4:98:1d:3f:d6:e3:a6:b6:61:fc:91:98:47:61: 93:60:23:19:16:a9:cf:ea:35:6d:63:c6:06:62:65:a5:93:59: 31:1f:92:6b:ca:a9:35:a5:e4:eb:c4:ba:12:7d:fb:87:8a:04: 10:b0:76:27:64:61:cb:20:b8:53:5f:db:fe:8a:27:d1:56:f1: 41:d1:b0:d5:42:24:b2:37:ac:1f:10:46:b1:4c:99:6d:9c:80: 63:92:2d:77:93:58:f5:0a:29:35:90:75:11:0f:b7:5e:8f:2b: 60:fe:34:b1:13:82:19:60:58:3b:36:81:c1:65:a3:98:15:3d: 55:70:77:0a:ee:61:8c:ba:77:ea:45:0c:a3:f0:02:52:b9:a8: 9c:99:a6:e9:08:e5:46:df:51:40:cc:d0:91:bc:de:71:03:75: cc:e8:21:96:11:d2:06:93:41:93:e2:21:d4:8f:8c:25:27:b9: e8:0a:5f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjUxMDI3MDA0MTM1WhcNMjUxMTAzMDA0MTM1WjAYMRYwFAYD VQQDEw02OGZlYmZiZi1lNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsezpKOkIEutZ1kpI229L3hzRJLh2SIazzgpJfLAbkc0lM4/6LJ8AE5mVScAm R4xZb99T1BkRF3huoZgS/04j1WoKYWE7Dx5OgSTIX64Xhs2wzMkAbcN0xewxdVb6 KymmyLYi2oNUytYigy32+Cs+CjrEmBgzdTh1/bd3i0BW9ljuw0P2LGq0QBtufpPN 2LsM9V0ToAAPjqB/KpeM/hJJP/ORh2H5CutJRU4wtsnOY23swkel6BEhuw+g93yV +1VdZiIVkggkRDP51BrmHJDJCWEajTLi0wjqCkbGH3G/ncUunhPx86fwzZ6Vbpph DJ6IP27Wq3X6V88IgbVtw5GovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFgGX/I oUXjDrKM0T0o7F9xSKwhMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/FDKpOo+UhG44N910KfhodA+U5c5xTiem+7hQMPJUSd/m9QdXxj9x +RfUqaQlFdZFf053F/h8t88IP3aZG0uPLHzaC0v/O+FhzEYEpJgdP9bjprZh/JGY R2GTYCMZFqnP6jVtY8YGYmWlk1kxH5Jryqk1peTrxLoSffuHigQQsHYnZGHLILhT X9v+iifRVvFB0bDVQiSyN6wfEEaxTJltnIBjki13k1j1Cik1kHURD7dejytg/jSx E4IZYFg7NoHBZaOYFT1VcHcK7mGMunfqRQyj8AJSuaicmabpCOVG31FAzNCRvN5x A3XM6CGWEdIGk0GT4iHUj4wlJ7noCl/S -----END CERTIFICATE-----Generated at Tue Oct 28 12:59:46 2025 by rpki-client