$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json) Hash identifier: KTh50Em9Z4k0WeV3+5U/kKf8JhFxPQ20bGb3I5CWTQk= Subject key identifier: 56:F1:84:97:18:20:1D:A0:B5:FC:24:DC:6D:01:69:A1:74:32:FA:19 Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft Manifest number: 0638 Signing time: Mon 20 Oct 2025 19:28:01 +0000 Manifest this update: Mon 20 Oct 2025 19:28:01 +0000 Manifest next update: Mon 27 Oct 2025 19:28:00 +0000 Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: qBwDEAKcbHvCiZMrHzWE/B1SKdE7NbBf/Z4AfHYOmxc=) 2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: w1O1ZsevC2HzFSEj/1IPY4lUEna5oDbCvbrv+EoKv3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Validity Not Before: Oct 20 19:28:01 2025 GMT Not After : Oct 27 19:28:00 2025 GMT Subject: CN=68f68d41-ba9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:af:49:c9:0c:db:eb:0a:48:27:f2:a5:3e: 22:70:46:a1:17:c5:77:d6:3c:3a:cb:b5:2f:84:07: d8:fd:2f:68:85:6f:57:15:73:8b:72:83:9e:4c:40: 85:8d:fd:12:02:e9:8f:06:12:24:05:32:9b:2a:eb: d4:32:88:27:4c:50:c9:7e:e5:62:7a:3f:00:b8:93: c6:23:59:3f:a5:70:45:bb:5a:cb:7e:e2:20:11:9e: 7b:dc:77:27:9b:96:f2:e1:12:6e:73:32:3b:66:e7: 8a:94:b3:10:c0:7a:8c:f3:8c:6b:f3:ba:4e:1e:84: b6:15:47:1e:b2:21:1b:fa:94:33:8a:a0:40:ee:17: 1a:72:3d:1a:f7:50:f9:1d:65:95:4c:32:a8:e4:44: 59:af:a2:8f:55:4b:02:99:70:2a:b6:9e:f4:c8:39: 98:f3:38:c3:a1:46:d2:fe:88:ff:40:2d:d5:0f:49: c7:ec:5c:3a:2c:06:29:3c:9a:f4:1c:ad:d1:d1:d8: 7a:e6:a4:eb:ed:28:0b:f4:a6:40:b3:bb:ad:1f:bb: 23:54:c4:42:45:3c:7e:fd:0e:e8:94:40:a1:55:cb: 6d:1d:80:de:77:48:a6:b5:06:5d:44:df:1a:60:72: d7:6a:54:a2:22:e8:94:da:66:4c:3f:f0:9b:fc:11: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:84:97:18:20:1D:A0:B5:FC:24:DC:6D:01:69:A1:74:32:FA:19 X509v3 Authority Key Identifier: keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9b:25:f3:b7:af:e5:5d:ec:63:2b:9f:0f:09:07:6a:c6:8e: a0:30:0e:a1:6c:fa:f1:3e:07:82:c6:e3:9d:2c:32:1a:7a:31: de:00:fd:4e:04:6e:44:f4:72:03:2a:57:93:01:04:f1:9c:99: 9c:ca:71:33:d7:0e:c9:c8:96:c2:24:03:8f:e3:e6:e1:df:49: 8d:15:c4:69:c8:54:ca:24:99:70:e0:93:71:9f:99:9d:a1:97: c9:78:f3:eb:79:27:78:80:9c:13:81:1e:85:59:1a:d5:b6:9d: e0:c1:07:ca:fe:a0:1e:12:cb:ed:eb:19:04:b6:ec:7d:74:53: 98:e4:92:a9:e2:00:41:ba:9d:40:e2:33:85:97:d4:6a:4c:99: d9:25:94:53:92:5e:44:80:30:85:e3:13:63:ea:f2:f7:f6:ae: d3:c7:86:13:23:d5:2e:03:5e:b7:c1:ae:22:69:5a:1c:ee:11: 77:ba:01:85:65:06:6a:c1:28:18:7a:41:5a:56:3e:63:c1:4f: 2d:e6:84:6e:aa:ba:7f:75:82:0c:95:34:65:42:72:92:30:d7: ac:d7:13:60:3a:fc:04:b5:7c:c1:5d:bc:30:5a:17:09:a7:85: ea:ea:92:cf:47:69:5f:15:e1:9f:4f:4b:52:1a:d0:1f:33:7b: 2f:2f:8b:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE QThFNkQyNTYwHhcNMjUxMDIwMTkyODAxWhcNMjUxMDI3MTkyODAwWjAYMRYwFAYD VQQDEw02OGY2OGQ0MS1iYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+2vSckM2+sKSCfypT4icEahF8V31jw6y7UvhAfY/S9ohW9XFXOLcoOeTECF jf0SAumPBhIkBTKbKuvUMognTFDJfuViej8AuJPGI1k/pXBFu1rLfuIgEZ573Hcn m5by4RJuczI7ZueKlLMQwHqM84xr87pOHoS2FUcesiEb+pQziqBA7hcacj0a91D5 HWWVTDKo5ERZr6KPVUsCmXAqtp70yDmY8zjDoUbS/oj/QC3VD0nH7Fw6LAYpPJr0 HK3R0dh65qTr7SgL9KZAs7utH7sjVMRCRTx+/Q7olEChVcttHYDed0imtQZdRN8a YHLXalSiIuiU2mZMP/Cb/BEYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbxhJcY IB2gtfwk3G0BaaF0MvoZMB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS84MzU1OUM3Q0IyMTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83 QTNGWDZ6bjViYnZham0wbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8myXzt6/lXexjK58PCQdqxo6gMA6hbPrxPgeCxuOdLDIaejHeAP1O BG5E9HIDKleTAQTxnJmcynEz1w7JyJbCJAOP4+bh30mNFcRpyFTKJJlw4JNxn5md oZfJePPreSd4gJwTgR6FWRrVtp3gwQfK/qAeEsvt6xkEtux9dFOY5JKp4gBBup1A 4jOFl9RqTJnZJZRTkl5EgDCF4xNj6vL39q7Tx4YTI9UuA163wa4iaVoc7hF3ugGF ZQZqwSgYekFaVj5jwU8t5oRuqrp/dYIMlTRlQnKSMNes1xNgOvwEtXzBXbwwWhcJ p4Xq6pLPR2lfFeGfT0tSGtAfM3svL4t4 -----END CERTIFICATE-----Generated at Wed Oct 22 02:50:41 2025 by rpki-client