$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft File: jhahBq30E6__xY8QEZJ09wDPpZM.mft (raw, json) Hash identifier: raMmVNJQFJeE09vgF36N1+9zs362Ccs6Gp1DGktTDNU= Subject key identifier: 31:0A:A5:38:13:FD:39:C7:55:37:FF:70:02:58:00:A0:76:48:1F:A4 Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93 Certificate issuer: /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft Manifest number: 02B2 Signing time: Wed 05 Nov 2025 01:35:22 +0000 Manifest this update: Wed 05 Nov 2025 01:35:22 +0000 Manifest next update: Wed 12 Nov 2025 01:35:22 +0000 Files and hashes: 1: jhahBq30E6__xY8QEZJ09wDPpZM.crl (hash: E12b6n4SkXV+mVptLagQPNSW800piGikh2ehdCz/PtM=) 2: 92F8EAF428F511EDA8D1655FC4F9AE02.roa (hash: g0WHVr1kPPMvFlHteDjphuuHkMNmIovAW1zjTKN/Axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF8E, serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593 Validity Not Before: Nov 5 01:35:22 2025 GMT Not After : Nov 12 01:35:22 2025 GMT Subject: CN=690aa9da-a37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:04:76:dd:d7:04:5b:81:b3:6b:dd:8f:e8:72: 77:35:e8:34:af:ad:24:ec:fc:d3:95:9f:ae:bb:79: af:93:55:3d:af:f0:1a:7f:1b:db:be:d9:79:2c:88: d2:cf:61:df:6c:2a:55:5f:8f:38:d2:90:06:7e:d8: 8f:28:c8:10:2d:80:21:92:c7:45:f1:06:f1:1f:12: 04:b0:e2:03:6e:3f:df:21:ef:2e:60:1b:ce:69:a4: e2:e1:d7:fe:77:01:57:f6:84:d6:73:e4:25:91:e9: 91:36:7c:45:3b:42:88:d7:17:47:3e:dc:72:a9:1c: b1:b2:43:3e:31:37:da:69:3e:38:d8:58:f6:f7:1a: 55:20:ab:84:d2:52:26:8f:ef:85:72:53:31:07:c7: 8f:a8:68:30:d4:a2:05:ad:77:76:3b:fb:f8:c2:ca: 06:03:92:ce:00:dd:bf:6c:e1:2d:90:fa:07:ff:ca: d7:40:b6:1b:e9:c2:c1:bd:f5:f5:29:86:88:54:cf: 2b:b8:3d:bf:6f:7f:c9:45:30:d1:b8:f7:f4:1a:66: c5:a2:96:a9:2d:75:ec:b7:1f:53:9e:77:e6:7e:05: a5:be:80:49:48:71:ea:34:b8:10:1a:b1:04:e5:34: 10:e6:d5:74:b3:20:b6:b2:25:b3:6c:56:75:69:e7: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:A5:38:13:FD:39:C7:55:37:FF:70:02:58:00:A0:76:48:1F:A4 X509v3 Authority Key Identifier: keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a1:8c:3f:3d:5a:96:77:79:44:d4:2b:61:16:82:fb:42:f5: f8:27:0f:fe:1a:fb:0d:21:63:a0:a5:78:fe:de:67:ff:27:48: 3a:f1:1b:d1:a4:18:9c:8a:c6:10:25:e4:a3:1e:66:97:92:1e: 97:86:33:c0:3a:4f:7c:9b:79:89:cc:97:21:68:f1:76:7f:de: 22:4e:a9:f7:ec:4c:c4:2c:a2:29:0a:24:c9:45:8a:c1:f9:fa: c2:55:46:5f:ed:44:96:08:7b:46:57:14:c9:ba:d9:90:53:d1: e8:a3:d8:98:26:4d:f5:cf:86:14:8c:14:bb:90:ab:5c:6c:93: 6e:27:46:ed:9b:09:74:8c:2e:cd:cd:6f:ff:5c:6b:b7:04:2b: 4f:e6:3e:ea:02:71:2d:6e:7d:04:94:ce:ed:54:f3:ae:03:32: 20:34:5e:d7:03:73:a4:a2:b3:f7:01:92:b1:cc:9c:f1:03:c1: c0:43:f4:82:c2:75:20:77:da:6f:96:08:8c:78:31:c8:ce:78: de:9d:61:71:ce:94:33:00:58:04:bd:6b:2a:fb:71:8f:07:81: 4b:73:96:d0:6b:ef:d7:61:bd:99:65:33:b1:15:db:c5:81:07: 37:51:10:13:17:d8:61:6f:6b:67:37:60:df:37:07:f8:44:2a: e1:70:c2:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGOEUxMTAvBgNVBAUTKDhFMTZBMTA2QURGNDEzQUZGRkM1OEYxMDExOTI3NEY3 MDBDRkE1OTMwHhcNMjUxMTA1MDEzNTIyWhcNMjUxMTEyMDEzNTIyWjAYMRYwFAYD VQQDEw02OTBhYTlkYS1hMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+wR23dcEW4Gza92P6HJ3Neg0r60k7PzTlZ+uu3mvk1U9r/Aafxvbvtl5LIjS z2HfbCpVX4840pAGftiPKMgQLYAhksdF8QbxHxIEsOIDbj/fIe8uYBvOaaTi4df+ dwFX9oTWc+QlkemRNnxFO0KI1xdHPtxyqRyxskM+MTfaaT442Fj29xpVIKuE0lIm j++FclMxB8ePqGgw1KIFrXd2O/v4wsoGA5LOAN2/bOEtkPoH/8rXQLYb6cLBvfX1 KYaIVM8ruD2/b3/JRTDRuPf0GmbFopapLXXstx9TnnfmfgWlvoBJSHHqNLgQGrEE 5TQQ5tV0syC2siWzbFZ1aef8bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEKpTgT /TnHVTf/cAJYAKB2SB+kMB8GA1UdIwQYMBaAFI4WoQat9BOv/8WPEBGSdPcAz6WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY4RS8yQUIyNDkxODE3 MUIxMUVEQjM1NDRENjhDNEY5QUUwMi9qaGFoQnEzMEU2X194WThRRVpKMDl3RFBw Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poYWhCcTMwRTZfX3hZOFFFWkowOXdEUHBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUY4RS8yQUIyNDkxODE3MUIxMUVEQjM1NDRENjhDNEY5QUUwMi9qaGFoQnEzMEU2 X194WThRRVpKMDl3RFBwWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFoYw/PVqWd3lE1CthFoL7QvX4Jw/+GvsNIWOgpXj+3mf/J0g68RvR pBicisYQJeSjHmaXkh6XhjPAOk98m3mJzJchaPF2f94iTqn37EzELKIpCiTJRYrB +frCVUZf7USWCHtGVxTJutmQU9Hoo9iYJk31z4YUjBS7kKtcbJNuJ0btmwl0jC7N zW//XGu3BCtP5j7qAnEtbn0ElM7tVPOuAzIgNF7XA3OkorP3AZKxzJzxA8HAQ/SC wnUgd9pvlgiMeDHIznjenWFxzpQzAFgEvWsq+3GPB4FLc5bQa+/XYb2ZZTOxFdvF gQc3URATF9hhb2tnN2DfNwf4RCrhcMLm -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:37 2025 by rpki-client