$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json) Hash identifier: 675/lTCfgbwZ0XeC2b+cVwNQbjekaowcHIS/5tpRe/4= Subject key identifier: 22:91:B9:B6:F4:17:F5:EE:60:DB:67:93:4B:1A:80:8D:5E:B5:30:DE Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft Manifest number: 7F Signing time: Mon 03 Nov 2025 06:51:37 +0000 Manifest this update: Mon 03 Nov 2025 06:51:37 +0000 Manifest next update: Mon 10 Nov 2025 06:51:37 +0000 Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: WlhhqdHiFwYJMblcrMiOZ9y0ex2s0Z+cfFDgb1SDlBk=) 2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: 2g0YcwmcNYvF1yQbVU8JT3MVONcEq3Lo2nc0de/dtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Validity Not Before: Nov 3 06:51:37 2025 GMT Not After : Nov 10 06:51:37 2025 GMT Subject: CN=690850f9-4f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:86:7a:83:4e:86:51:65:1c:1c:2e:f9:a3: 5b:76:42:11:6a:c9:98:e8:9e:10:5d:2e:38:97:8b: de:58:f7:95:cd:7d:0a:42:9f:b1:77:67:b3:94:13: d0:89:46:15:62:73:1f:7f:87:0f:c4:e5:20:e7:6c: 00:b9:3d:8b:e8:6e:9b:63:62:d7:bc:01:9f:77:59: ef:fe:0e:c9:9a:3e:38:39:3e:f9:cf:9a:7a:1b:fd: 9d:de:11:73:42:b7:a0:e8:2f:e8:7d:f4:35:81:37: 76:16:12:39:c8:c8:ed:51:3c:a3:c5:f7:39:b2:85: 65:7b:41:dc:23:fe:97:4b:fd:ec:fe:b1:80:86:f8: a8:89:72:c7:c9:8e:78:be:83:35:71:15:b8:fb:53: 31:9b:d1:65:24:fa:8a:1d:58:e6:26:c7:10:1f:34: ee:02:30:72:81:32:38:ed:32:ad:a6:78:37:ef:81: b4:16:d0:bd:86:30:8b:a9:a8:de:e3:cb:7e:f6:58: 89:77:2c:66:cd:8b:bf:dc:74:82:87:b7:14:1f:3c: b7:f2:c2:e0:7f:2d:7b:e1:37:a9:39:13:34:e2:f4: 84:f5:c9:d5:cf:7a:1c:73:86:d2:40:28:22:75:29: 33:99:0e:ef:47:fb:17:b8:28:a6:85:9a:9a:a2:6d: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:91:B9:B6:F4:17:F5:EE:60:DB:67:93:4B:1A:80:8D:5E:B5:30:DE X509v3 Authority Key Identifier: keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:fd:4a:34:07:12:f0:72:e3:16:d5:8b:2c:02:55:10:7b:bc: 28:9e:fe:11:8b:81:69:3d:c7:1b:90:de:ee:7b:ab:df:bd:cb: b1:0f:a6:63:1d:5b:4f:2e:e1:2e:fd:20:1c:4c:e7:4a:95:a7: 89:b3:1a:8d:95:b3:f6:94:8b:9c:44:5a:af:2f:43:99:e2:3c: 49:1a:62:93:c7:f7:90:de:5c:d6:42:f0:ad:5f:9f:72:8b:04: 54:4e:97:81:40:f3:3c:c6:67:a0:20:53:06:91:b6:e0:90:73: 32:d6:83:ab:e8:1d:9b:30:65:15:7b:4d:0e:d3:e1:69:28:bf: 49:a9:f9:b2:d4:30:44:f1:2d:32:47:9e:64:ab:bd:e9:1b:47: 58:20:84:04:1e:41:e2:d7:4a:3b:46:23:14:ef:a5:7b:82:b4: 62:4b:b8:ee:cc:04:3a:32:bd:4d:e7:9f:a8:e1:99:d7:f7:f0: 05:83:80:b5:96:53:fb:09:7c:aa:9b:47:16:38:17:42:30:1a: ac:73:ce:60:3a:59:05:b9:ef:7d:b0:b2:ad:bc:5d:f8:aa:aa: b5:c8:67:9c:d0:60:54:4a:ec:06:1e:e9:f2:fb:5f:6b:e0:1b: e7:86:71:bb:fc:09:0f:ae:5a:6c:f8:32:94:46:54:da:47:4c: 05:1b:c9:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExNTcxMTAvBgNVBAUTKDI2MkVDMjBEMzJCQzEzMkQ3RDIwNEMzNDQ4MjIyOTc5 MjQyMUNGNzAwHhcNMjUxMTAzMDY1MTM3WhcNMjUxMTEwMDY1MTM3WjAYMRYwFAYD VQQDEw02OTA4NTBmOS00ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvqGeoNOhlFlHBwu+aNbdkIRasmY6J4QXS44l4veWPeVzX0KQp+xd2ezlBPQ iUYVYnMff4cPxOUg52wAuT2L6G6bY2LXvAGfd1nv/g7Jmj44OT75z5p6G/2d3hFz Qreg6C/offQ1gTd2FhI5yMjtUTyjxfc5soVle0HcI/6XS/3s/rGAhvioiXLHyY54 voM1cRW4+1Mxm9FlJPqKHVjmJscQHzTuAjBygTI47TKtpng374G0FtC9hjCLqaje 48t+9liJdyxmzYu/3HSCh7cUHzy38sLgfy174TepORM04vSE9cnVz3occ4bSQCgi dSkzmQ7vR/sXuCimhZqaom1OVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKRubb0 F/XuYNtnk0sagI1etTDeMB8GA1UdIwQYMBaAFCYuwg0yvBMtfSBMNEgiKXkkIc9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTE1Ny8wNkIyQjhFMjA3 MjYxMUYwODNGM0ZDNzVDNEY5QUUwMi9KaTdDRFRLOEV5MTlJRXcwU0NJcGVTUWh6 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppN0NEVEs4RXkxOUlFdzBTQ0lwZVNRaHozQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTE1Ny8wNkIyQjhFMjA3MjYxMUYwODNGM0ZDNzVDNEY5QUUwMi9KaTdDRFRLOEV5 MTlJRXcwU0NJcGVTUWh6M0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG/Uo0BxLwcuMW1YssAlUQe7wonv4Ri4FpPccbkN7ue6vfvcuxD6Zj HVtPLuEu/SAcTOdKlaeJsxqNlbP2lIucRFqvL0OZ4jxJGmKTx/eQ3lzWQvCtX59y iwRUTpeBQPM8xmegIFMGkbbgkHMy1oOr6B2bMGUVe00O0+FpKL9Jqfmy1DBE8S0y R55kq73pG0dYIIQEHkHi10o7RiMU76V7grRiS7juzAQ6Mr1N55+o4ZnX9/AFg4C1 llP7CXyqm0cWOBdCMBqsc85gOlkFue99sLKtvF34qqq1yGec0GBUSuwGHuny+19r 4BvnhnG7/AkPrlps+DKURlTaR0wFG8k7 -----END CERTIFICATE-----Generated at Tue Nov 4 01:11:52 2025 by rpki-client