$ rpki-client -vvf rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft File: J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft (raw, json) Hash identifier: bmQTopqTlWJETduVfsEd56OzG7WcmNzs6cBLi1aZBN4= Subject key identifier: 2C:92:09:48:E0:05:9E:3A:D3:6F:6B:9D:7D:B0:D7:DC:FA:8E:D3:00 Authority key identifier: 27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07 Certificate issuer: /CN=A9141559/serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft Manifest number: 5C Signing time: Wed 05 Nov 2025 07:17:52 +0000 Manifest this update: Wed 05 Nov 2025 07:17:52 +0000 Manifest next update: Wed 12 Nov 2025 07:17:52 +0000 Files and hashes: 1: J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl (hash: SKVTVe6EXOKBozj+LPjv4Sj6yRPTr6INk/JHPZyYh0s=) 2: 1CF72A482B0C11F08B7A2511C4F9AE02.roa (hash: 2ofBFHApjBEiLo4MH3QZR4kbgOi0f02WpjAlcU00vM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141559, serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507 Validity Not Before: Nov 5 07:17:52 2025 GMT Not After : Nov 12 07:17:52 2025 GMT Subject: CN=690afa20-722e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:82:9e:d8:a9:64:94:ec:bb:77:46:84:d6: 7b:be:25:73:96:18:e0:c6:b4:83:22:b4:3c:63:d7: 63:59:09:86:83:b4:bc:c0:aa:d4:5b:3b:1f:3e:37: 8a:bf:7b:87:e5:c8:7b:46:73:7a:50:c6:e3:e3:d1: 34:6d:5e:ce:07:b6:c0:c5:87:e9:45:66:2e:80:fc: a7:7d:8d:67:8e:01:7d:9f:07:46:ae:35:65:77:2d: 55:89:7d:a7:47:75:2a:57:65:9d:bf:7d:8e:22:31: 51:f5:50:03:d6:ee:79:c7:d8:4b:c2:d6:a0:07:60: e4:a5:77:7d:5d:f0:7d:95:d9:14:91:a9:85:44:85: bd:cb:d0:fe:ad:80:97:14:74:b9:2e:73:c1:2a:fc: 37:11:c0:9b:91:00:2a:2c:e3:d8:3a:94:df:66:0a: 9b:fe:9e:13:10:03:b0:67:cc:f8:c0:1a:d2:27:99: 8a:33:7e:b6:de:45:4d:e6:9a:21:33:fe:dc:ab:7c: 2d:dd:68:2b:62:f5:a3:b6:ce:7b:df:02:ee:a0:84: f2:dd:57:ba:fa:e7:7f:16:07:a5:74:74:d3:4b:ef: ce:23:b6:b4:80:da:36:99:f8:d1:87:4b:f4:0d:b6: f8:ef:91:75:bb:02:00:0d:81:77:8b:f7:53:df:e0: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:92:09:48:E0:05:9E:3A:D3:6F:6B:9D:7D:B0:D7:DC:FA:8E:D3:00 X509v3 Authority Key Identifier: keyid:27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f8:a6:67:7c:3e:17:5a:0d:fc:01:f4:ff:84:68:21:6c:7c: 26:1a:ed:b9:4a:94:41:1a:77:fc:78:2f:73:94:1e:dd:07:f2: 6f:61:bc:af:15:35:57:3c:11:bb:37:eb:76:37:8d:a1:d0:59: 01:28:32:ad:10:82:d8:55:cd:3f:9f:04:16:cc:e6:e6:c8:ca: 2a:3a:b1:bf:73:12:57:0d:4e:f1:22:44:7c:51:0b:d6:6f:83: a3:2d:c8:6b:0c:d8:35:98:dc:da:fd:42:e4:e3:f9:b7:9d:e5: 34:ba:50:28:5a:bb:68:56:8b:85:72:62:6b:9b:33:37:cb:7d: 0e:e1:b9:71:b6:a2:13:bf:4e:00:4a:7a:ef:36:62:51:a8:a6: ac:81:6b:b1:94:82:3e:a8:6a:07:2f:19:42:cd:7a:e9:d5:1a: c8:f6:6b:5f:4e:1f:59:21:a9:06:f6:64:f4:bb:25:64:31:c0: 31:74:ec:b2:4b:ca:55:3e:51:23:87:74:3b:f4:f9:8f:7f:28: 34:a6:b8:b5:27:0d:c7:91:22:d9:5e:a4:1f:ba:51:9c:e9:4a: 99:e1:aa:bc:57:df:33:aa:c6:08:e0:f0:05:61:07:a5:79:7e: d0:7a:cd:4b:9a:99:51:76:00:30:33:86:0d:c0:92:20:d6:9e: 22:3b:1e:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTU1OTExMC8GA1UEBRMoMjdGNUFEQTlBMTcxMzA3MzkzMTA5Mzg0NTlCMTRBREEy REQyRjUwNzAeFw0yNTExMDUwNzE3NTJaFw0yNTExMTIwNzE3NTJaMBgxFjAUBgNV BAMTDTY5MGFmYTIwLTcyMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuDYKe2KlklOy7d0aE1nu+JXOWGODGtIMitDxj12NZCYaDtLzAqtRbOx8+N4q/ e4flyHtGc3pQxuPj0TRtXs4HtsDFh+lFZi6A/Kd9jWeOAX2fB0auNWV3LVWJfadH dSpXZZ2/fY4iMVH1UAPW7nnH2EvC1qAHYOSld31d8H2V2RSRqYVEhb3L0P6tgJcU dLkuc8Eq/DcRwJuRACos49g6lN9mCpv+nhMQA7BnzPjAGtInmYozfrbeRU3mmiEz /tyrfC3daCti9aO2znvfAu6ghPLdV7r6538WB6V0dNNL784jtrSA2jaZ+NGHS/QN tvjvkXW7AgANgXeL91Pf4Ml5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULJIJSOAF njrTb2udfbDX3PqO0wAwHwYDVR0jBBgwFoAUJ/WtqaFxMHOTEJOEWbFK2i3S9Qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNTU5LzI3QzJFM0U2MkIw QjExRjBCOTJFQ0Y4MUM0RjlBRTAyL0pfV3RxYUZ4TUhPVEVKT0VXYkZLMmkzUzlR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSl9XdHFhRnhNSE9URUpPRVdiRksyaTNTOVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NTU5LzI3QzJFM0U2MkIwQjExRjBCOTJFQ0Y4MUM0RjlBRTAyL0pfV3RxYUZ4TUhP VEVKT0VXYkZLMmkzUzlRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADX4pmd8PhdaDfwB9P+EaCFsfCYa7blKlEEad/x4L3OUHt0H8m9hvK8V NVc8Ebs363Y3jaHQWQEoMq0QgthVzT+fBBbM5ubIyio6sb9zElcNTvEiRHxRC9Zv g6MtyGsM2DWY3Nr9QuTj+bed5TS6UChau2hWi4VyYmubMzfLfQ7huXG2ohO/TgBK eu82YlGopqyBa7GUgj6oagcvGULNeunVGsj2a19OH1khqQb2ZPS7JWQxwDF07LJL ylU+USOHdDv0+Y9/KDSmuLUnDceRItlepB+6UZzpSpnhqrxX3zOqxgjg8AVhB6V5 ftB6zUuamVF2ADAzhg3AkiDWniI7HsM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:22 2025 by rpki-client