$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: 19QWIpzqwCNBWgGbBuxMwgYugnsiwsJjeIJbRxpwfIk= Subject key identifier: E3:B2:2F:F6:9D:8B:6D:BE:E3:53:41:4F:57:2E:B7:50:26:49:A1:5E Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 08A3 Signing time: Sun 02 Nov 2025 20:28:22 +0000 Manifest this update: Sun 02 Nov 2025 20:28:21 +0000 Manifest next update: Sun 09 Nov 2025 20:28:21 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: FEq4RCUJhWXxjA38RGTosexcRroxXfqk6xQmlZfmVdQ=) 2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: SYp3+Qw2NUOxAP2PI8VyKC4eZrJ7XxwyTmQykIlzc3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Nov 2 20:28:21 2025 GMT Not After : Nov 9 20:28:21 2025 GMT Subject: CN=6907bee5-5edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:54:2d:31:30:9f:19:57:89:f4:39:b8:48: 1c:4c:fa:3f:9a:4f:58:9b:9d:d4:c3:1d:15:9f:8f: d6:0c:d0:47:d4:98:9b:28:68:03:24:f7:e7:a2:ff: 5f:bc:db:30:c9:ad:f2:04:8b:fc:50:2b:ab:56:53: 72:16:1a:88:ab:16:99:4a:1d:a3:9e:c1:f2:98:27: 12:ea:df:d6:a8:c3:6e:35:4b:24:20:12:89:d8:38: f8:6a:8d:8f:e2:23:52:a0:80:2e:a5:b5:1d:b7:e7: ca:2b:d2:64:28:c1:18:aa:a1:9d:26:cb:dd:06:96: 54:ec:83:bd:9c:3a:49:82:16:4b:64:5a:43:f1:d2: aa:1b:f9:4b:9f:a0:29:fb:39:32:a6:d4:91:30:4b: b7:c1:c1:f6:89:6c:bc:40:7c:f3:72:be:72:e2:27: a2:70:57:ce:c9:ba:b1:f5:d3:70:e2:82:6d:f7:bb: 27:a4:3b:fd:3f:c8:30:2d:16:83:43:45:0a:c2:ba: 20:80:eb:75:db:e2:f6:fa:1f:24:f6:85:e1:cd:00: 89:60:45:92:e5:bc:7e:08:8a:e5:9e:9b:3f:f8:74: 93:16:f5:70:f7:e2:9f:6b:03:8c:88:70:16:02:97: 5a:c8:dd:a4:88:84:31:ba:22:05:90:17:a5:df:09: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B2:2F:F6:9D:8B:6D:BE:E3:53:41:4F:57:2E:B7:50:26:49:A1:5E X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:55:d4:2e:58:21:65:6f:3d:aa:51:58:62:80:ed:8e:dd:f8: 5b:36:24:42:9d:e5:ef:39:e9:79:06:e4:0b:99:a1:4f:0d:66: b8:fd:9f:87:dc:5f:38:8b:62:14:6e:f9:b4:ae:7e:82:58:2d: 5a:a8:73:d2:ae:00:be:f4:c4:1f:56:d9:b4:1e:e6:c7:35:57: 3a:5d:3c:35:33:63:b1:8b:cf:64:f0:db:93:05:c1:e3:74:1e: 3c:d8:d4:b7:6a:54:20:5a:98:de:20:b9:48:27:4d:b2:85:a1: d2:60:97:be:07:a9:43:c3:4c:9c:d2:c4:af:58:97:31:e5:92: ea:60:a4:4f:53:4d:f4:9b:b8:bc:25:c9:54:8c:a0:f6:1c:b6: 43:e9:5c:d6:57:9b:6d:68:c5:ae:3b:65:71:a9:d7:6b:4a:c7: a2:a2:f5:e5:03:d6:dc:ea:6d:88:a4:d9:6d:70:a9:e2:37:a5: 37:bb:58:8a:d6:4f:59:bf:98:a2:86:76:6c:03:66:df:59:99: cb:7c:c9:2f:22:a1:44:c5:20:68:a0:d9:7d:c2:e8:44:63:cd: 94:0a:47:5f:fa:0a:12:32:6d:82:78:f6:7a:ac:93:df:51:6e: f1:8c:79:37:4d:15:d1:20:33:ef:61:a7:ff:45:2c:f4:f2:a0: f4:a9:f1:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUxMTAyMjAyODIxWhcNMjUxMTA5MjAyODIxWjAYMRYwFAYD VQQDEw02OTA3YmVlNS01ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseVULTEwnxlXifQ5uEgcTPo/mk9Ym53Uwx0Vn4/WDNBH1JibKGgDJPfnov9f vNswya3yBIv8UCurVlNyFhqIqxaZSh2jnsHymCcS6t/WqMNuNUskIBKJ2Dj4ao2P 4iNSoIAupbUdt+fKK9JkKMEYqqGdJsvdBpZU7IO9nDpJghZLZFpD8dKqG/lLn6Ap +zkyptSRMEu3wcH2iWy8QHzzcr5y4ieicFfOybqx9dNw4oJt97snpDv9P8gwLRaD Q0UKwroggOt12+L2+h8k9oXhzQCJYEWS5bx+CIrlnps/+HSTFvVw9+KfawOMiHAW ApdayN2kiIQxuiIFkBel3wk2twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOyL/ad i22+41NBT1cut1AmSaFeMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6VdQuWCFlbz2qUVhigO2O3fhbNiRCneXvOel5BuQLmaFPDWa4/Z+H 3F84i2IUbvm0rn6CWC1aqHPSrgC+9MQfVtm0HubHNVc6XTw1M2Oxi89k8NuTBcHj dB482NS3alQgWpjeILlIJ02yhaHSYJe+B6lDw0yc0sSvWJcx5ZLqYKRPU030m7i8 JclUjKD2HLZD6VzWV5ttaMWuO2VxqddrSseiovXlA9bc6m2IpNltcKniN6U3u1iK 1k9Zv5iihnZsA2bfWZnLfMkvIqFExSBooNl9wuhEY82UCkdf+goSMm2CePZ6rJPf UW7xjHk3TRXRIDPvYaf/RSz08qD0qfF3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:13 2025 by rpki-client