$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json) Hash identifier: Gx7lrYgDwxtpfkqIG8yPRqPXzAUFh4v5s/oPFHMfTv8= Subject key identifier: A8:06:89:57:29:C6:9F:BF:2B:8C:F4:A7:C4:39:71:2B:3B:6C:0E:D7 Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft Manifest number: 0CA8 Signing time: Tue 04 Nov 2025 18:26:17 +0000 Manifest this update: Tue 04 Nov 2025 18:26:17 +0000 Manifest next update: Tue 11 Nov 2025 18:26:17 +0000 Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: 4RadVdgL0C5DXMtPueK+Fub//A6amJOv8jFi0f6bFBk=) 2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: olmc/o09ErYiChJbWXMyIgbGCNghcLiwj8HQmo8o9wc=) 3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: 8+Ymqe/569V8FlYV76TmLK19yyKhwgBdmhVdUs4TFXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Nov 4 18:26:17 2025 GMT Not After : Nov 11 18:26:17 2025 GMT Subject: CN=690a4549-a983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:74:ff:42:b8:e7:29:9f:41:ab:84:9d:4c: 49:f5:83:0e:07:a5:88:1a:6b:93:db:7f:ce:40:b4: a7:56:5c:41:83:83:18:23:29:07:5e:f8:66:26:7a: 54:10:ba:c5:dd:88:89:75:0b:a8:71:74:6a:3b:ec: f3:98:23:c2:70:ab:e2:07:e3:74:75:fa:52:03:1d: 9a:3f:8e:5e:23:d6:20:0e:7f:a6:02:9c:47:ff:bc: 27:2f:b3:28:77:1a:17:34:6a:c9:c0:44:75:a3:a5: 7c:c5:14:11:01:3f:9c:e8:92:93:9d:5c:39:59:ce: c4:c6:af:a2:04:2d:aa:83:39:7f:79:fc:d0:ce:37: e7:82:82:14:14:3e:86:19:7e:25:44:a2:d1:38:b2: 16:35:3e:33:7c:1e:24:d0:73:8e:ae:7c:74:da:72: d1:8d:f4:02:0d:c6:11:f5:48:ed:fa:15:1a:a6:f2: 6d:ed:6f:ab:56:8e:27:af:ab:67:2a:fb:55:ea:fe: f0:b5:68:8d:f6:7c:db:bc:bd:21:3b:f8:5f:8f:d0: a1:b6:41:6f:82:24:35:92:a7:93:4f:1f:4b:a6:68: 11:4a:7f:98:7b:9f:af:60:aa:75:f4:17:23:43:bb: 9f:30:df:93:39:d0:c8:85:23:60:a1:bc:63:53:a9: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:89:57:29:C6:9F:BF:2B:8C:F4:A7:C4:39:71:2B:3B:6C:0E:D7 X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:45:11:aa:21:63:7e:30:c6:11:ee:c0:af:35:8f:53:61:2a: df:fe:41:bb:67:cc:42:64:12:40:76:f2:2d:0c:4f:d7:85:c4: cf:e6:62:cc:14:63:f9:b5:6c:a3:46:63:11:d2:fa:f3:dd:90: 2a:d4:50:b4:36:f5:f5:57:46:6b:61:76:45:43:0d:e8:6a:50: c9:da:d3:4c:64:c7:ea:6b:31:cd:74:2d:39:d7:c6:a3:f0:b0: 30:fe:d9:22:b9:69:f6:84:e1:ff:c4:9d:b4:b9:91:86:fb:db: 69:ae:28:da:4b:13:ba:01:fb:2f:01:60:80:0e:94:3c:18:c5: ee:eb:a8:0d:f8:6c:4c:74:29:8f:14:e4:f6:cd:3d:80:af:6f: d8:31:07:02:e7:3c:9b:bb:b1:c6:44:9f:77:76:68:37:69:86: 35:dd:be:8d:6a:2e:fe:d5:49:ec:29:52:de:6e:a1:44:7e:36: 03:f6:28:e4:8f:05:e7:ad:ee:36:a9:f1:ef:2d:ae:a3:96:9d: 54:1a:e1:08:55:a3:cb:df:2d:b0:3e:3d:b9:fb:3b:1a:3f:96: 28:44:d5:eb:2b:c4:47:c7:8e:5b:b1:81:e3:e3:fe:24:2d:e4: d8:5e:0c:2d:30:fa:39:7e:1f:0d:50:c1:16:a5:dc:ed:e8:4a: a5:2d:72:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjUxMTA0MTgyNjE3WhcNMjUxMTExMTgyNjE3WjAYMRYwFAYD VQQDEw02OTBhNDU0OS1hOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAod10/0K45ymfQauEnUxJ9YMOB6WIGmuT23/OQLSnVlxBg4MYIykHXvhmJnpU ELrF3YiJdQuocXRqO+zzmCPCcKviB+N0dfpSAx2aP45eI9YgDn+mApxH/7wnL7Mo dxoXNGrJwER1o6V8xRQRAT+c6JKTnVw5Wc7Exq+iBC2qgzl/efzQzjfngoIUFD6G GX4lRKLROLIWNT4zfB4k0HOOrnx02nLRjfQCDcYR9Ujt+hUapvJt7W+rVo4nr6tn KvtV6v7wtWiN9nzbvL0hO/hfj9ChtkFvgiQ1kqeTTx9LpmgRSn+Ye5+vYKp19Bcj Q7ufMN+TOdDIhSNgobxjU6l8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgGiVcp xp+/K4z0p8Q5cSs7bA7XMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNFMS85RkQ1OERBNjA1QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3Ju SC0tbWJLUlJZMkhGaXVIWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgRRGqIWN+MMYR7sCvNY9TYSrf/kG7Z8xCZBJAdvItDE/XhcTP5mLM FGP5tWyjRmMR0vrz3ZAq1FC0NvX1V0ZrYXZFQw3oalDJ2tNMZMfqazHNdC0518aj 8LAw/tkiuWn2hOH/xJ20uZGG+9tprijaSxO6AfsvAWCADpQ8GMXu66gN+GxMdCmP FOT2zT2Ar2/YMQcC5zybu7HGRJ93dmg3aYY13b6Nai7+1UnsKVLebqFEfjYD9ijk jwXnre42qfHvLa6jlp1UGuEIVaPL3y2wPj25+zsaP5YoRNXrK8RHx45bsYHj4/4k LeTYXgwtMPo5fh8NUMEWpdzt6EqlLXJ3 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:01 2025 by rpki-client