$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: mGmfd9NYbvDcimdY8EkAbrEaTLerOweahjEy5EK+4ho= Subject key identifier: 3D:61:1D:A1:3C:87:03:84:90:F0:A0:A2:05:D6:0A:F9:65:37:A4:ED Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 01F9 Signing time: Sat 25 Oct 2025 05:49:01 +0000 Manifest this update: Sat 25 Oct 2025 05:49:00 +0000 Manifest next update: Sat 01 Nov 2025 05:49:00 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: 2yN8BC+IVslCb69ep4UrXynty1gB9Sj7oGWxYbJwIrw=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: jmqDKa5arq4fgvLtUOSSDm4TPSp4JnFMPE58CkrLpbg=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: DgdiiCMEKe93Jsgcn1AG1optizE0ES0MbtD24A2hP+4=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: RaeRinKNGLed6XLJqu8FU+BHOJQNHJHt8FZoOYMBImQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 05:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Oct 25 05:49:00 2025 GMT Not After : Nov 1 05:49:00 2025 GMT Subject: CN=68fc64cc-c432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:81:42:12:28:d7:bf:5c:8c:7c:d9:c9:d0:4d: 12:d8:6e:f5:4e:d4:75:2b:23:5a:9a:03:01:9d:67: ad:83:51:be:4f:b0:a8:15:d0:41:ff:d4:a4:61:f7: bb:42:04:ca:92:c9:5d:25:86:79:90:e1:9e:2d:a5: f0:8f:fe:1e:3f:d2:36:e5:5b:52:a9:7d:2e:c9:71: cc:2b:58:75:7b:69:47:a6:96:05:f1:5e:ec:0e:03: 07:ef:93:85:ae:95:a7:f2:1e:3e:c0:bb:59:bc:37: 5c:94:ae:af:26:b6:d7:75:30:ee:76:23:12:20:44: 2e:5d:92:66:0b:89:47:4b:b5:e3:8b:67:87:a2:60: 20:a4:85:dc:80:9b:7e:24:bc:1c:56:45:64:eb:15: 53:d6:34:46:b5:ae:b2:c4:98:ba:34:f4:ec:5c:90: 6e:a7:5f:9d:8c:87:42:7b:d2:d8:af:65:9f:28:c5: 42:d5:36:8f:c8:be:a2:32:f6:6b:90:82:13:0f:62: aa:54:31:7b:4b:9a:bb:38:00:b6:91:c4:d9:48:1c: 4e:af:ac:ef:63:49:e6:87:ce:bd:8f:f3:c0:d7:75: f2:b6:ba:d6:2c:24:c2:70:99:2e:e4:ee:ce:99:4d: 67:31:b0:b2:bf:3c:54:0f:8c:d6:fe:4c:20:05:75: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:61:1D:A1:3C:87:03:84:90:F0:A0:A2:05:D6:0A:F9:65:37:A4:ED X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fe:ef:63:0b:ec:23:19:21:9a:93:c1:80:27:af:67:a1:02: 9e:15:5e:1c:1d:c6:0e:c0:e6:41:72:ee:bd:44:28:d8:58:0c: a8:f6:02:9f:f4:6b:f1:1f:ba:9c:57:3a:2a:66:b5:7e:c2:f0: 99:8c:17:89:cb:a9:42:ef:82:e5:99:03:61:17:76:88:5f:ee: 99:53:71:4e:91:c7:b5:68:75:7d:10:bd:f8:d0:01:53:ea:97: 13:b0:1d:ad:53:17:12:1b:f4:a5:03:45:44:80:ce:1c:81:9f: ba:bf:52:d8:c0:34:0a:8b:03:34:cc:ce:38:d8:d1:13:26:74: 97:50:d4:14:26:5d:70:17:a5:96:2d:c2:a9:20:22:bd:a3:aa: 2a:42:16:6b:c5:10:9d:24:0f:69:e2:bc:3d:14:15:a4:5d:2d: f4:c2:80:fb:78:aa:b4:4c:54:c2:50:84:6d:78:8b:af:4d:63: f9:01:50:99:12:b8:84:24:c8:e4:8d:57:36:1a:54:fc:ac:ed: 3a:5a:e0:62:ac:8b:e9:e5:df:96:5e:f9:f3:c6:f0:12:94:17: 32:06:23:88:97:86:f1:cc:9a:9d:21:a2:e2:47:89:15:4b:be: 20:ab:16:d8:96:da:ab:cd:7a:7b:a6:06:fe:a2:a0:80:d9:dc: 37:c3:26:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUxMDI1MDU0OTAwWhcNMjUxMTAxMDU0OTAwWjAYMRYwFAYD VQQDEw02OGZjNjRjYy1jNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94FCEijXv1yMfNnJ0E0S2G71TtR1KyNamgMBnWetg1G+T7CoFdBB/9SkYfe7 QgTKksldJYZ5kOGeLaXwj/4eP9I25VtSqX0uyXHMK1h1e2lHppYF8V7sDgMH75OF rpWn8h4+wLtZvDdclK6vJrbXdTDudiMSIEQuXZJmC4lHS7Xji2eHomAgpIXcgJt+ JLwcVkVk6xVT1jRGta6yxJi6NPTsXJBup1+djIdCe9LYr2WfKMVC1TaPyL6iMvZr kIITD2KqVDF7S5q7OAC2kcTZSBxOr6zvY0nmh869j/PA13XytrrWLCTCcJku5O7O mU1nMbCyvzxUD4zW/kwgBXVfRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1hHaE8 hwOEkPCgogXWCvllN6TtMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb/u9jC+wjGSGak8GAJ69noQKeFV4cHcYOwOZBcu69RCjYWAyo9gKf 9GvxH7qcVzoqZrV+wvCZjBeJy6lC74LlmQNhF3aIX+6ZU3FOkce1aHV9EL340AFT 6pcTsB2tUxcSG/SlA0VEgM4cgZ+6v1LYwDQKiwM0zM442NETJnSXUNQUJl1wF6WW LcKpICK9o6oqQhZrxRCdJA9p4rw9FBWkXS30woD7eKq0TFTCUIRteIuvTWP5AVCZ EriEJMjkjVc2GlT8rO06WuBirIvp5d+WXvnzxvASlBcyBiOIl4bxzJqdIaLiR4kV S74gqxbYltqrzXp7pgb+oqCA2dw3wyY6 -----END CERTIFICATE-----Generated at Sat Oct 25 17:18:59 2025 by rpki-client