$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: SkFtWTMHwuGUxUBY8OykY6GpYdgDDcZc1NtjLNjN9cc= Subject key identifier: D1:FF:85:37:CD:C1:DF:4B:0B:75:B3:37:50:C2:E1:29:3D:C9:9E:6E Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04FA Signing time: Mon 27 Oct 2025 00:41:52 +0000 Manifest this update: Mon 27 Oct 2025 00:41:52 +0000 Manifest next update: Mon 03 Nov 2025 00:41:52 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: t17fDbotYVGramWkMPIz4eqUj6q/QVMfMmHh3Nk50r4=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Oct 27 00:41:52 2025 GMT Not After : Nov 3 00:41:52 2025 GMT Subject: CN=68febfd0-5e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:a0:ae:26:28:38:f2:7b:02:0a:63:57:e0: 33:c4:a2:29:b3:8d:e9:5a:51:66:77:de:81:87:90: e2:97:ff:a8:c1:6b:2f:ca:a8:15:a8:36:93:3a:37: 9b:97:b4:56:25:c2:ee:52:5d:bd:46:01:b2:42:a8: 26:6d:70:2f:67:63:4c:5b:93:01:4a:1e:8e:e2:82: 02:86:ae:93:aa:3a:ca:75:5f:8d:82:3b:cd:f0:d5: 8f:8f:2a:95:ee:7e:8c:69:12:f8:b0:bf:28:ba:90: 39:5d:b8:ed:c2:7d:e7:f5:27:08:4c:21:e2:71:a7: e7:4e:1b:d7:c4:78:e1:04:ae:83:d2:31:bc:37:3a: 98:fa:12:ff:67:8c:97:78:98:ab:d8:4e:9e:ab:15: 35:b1:a4:0f:50:98:e7:c2:34:95:12:61:44:f1:b8: 0c:50:a2:27:b3:28:d5:37:71:c8:80:2f:35:21:1f: 53:0b:3a:0b:69:29:40:c5:2d:40:0b:45:30:a1:83: 8f:95:7e:89:3b:e4:8c:d7:be:6b:08:a9:ef:c2:d8: 66:5f:1e:be:48:3b:70:0f:cf:ff:0f:d2:c3:49:6a: a7:fd:c0:6f:a9:ce:61:82:90:bf:36:45:dd:e1:e7: e2:35:12:c2:41:a2:21:54:bc:74:a4:2e:75:14:f5: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:85:37:CD:C1:DF:4B:0B:75:B3:37:50:C2:E1:29:3D:C9:9E:6E X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:1d:1c:df:43:4c:ec:14:8d:4d:77:54:2c:15:0e:19:25:c1: 3d:13:bd:eb:34:01:ef:72:ae:26:7a:7a:9d:4c:6a:0f:92:07: d6:72:5b:bc:b4:46:ba:1f:4c:6d:df:9e:27:33:74:2c:08:5c: ea:c0:20:f2:00:69:35:b2:85:07:41:dc:88:49:4d:7a:5f:b7: 9f:ba:c9:6f:2e:ab:cc:40:42:75:f2:34:3d:4c:e8:a3:01:e6: 7a:8b:48:4e:02:47:0c:67:3f:fd:7d:42:1f:36:d7:43:0c:57: 53:fb:55:4d:fa:be:e5:27:89:c7:e3:d3:fa:eb:a4:26:bf:b5: dd:7d:2f:59:71:30:ce:c1:5c:60:73:e4:e1:54:0f:48:8d:90: 9f:28:81:9f:3f:8f:e1:b5:77:97:3a:66:69:c5:b7:d3:90:80: a9:d0:3f:bb:84:a3:05:22:9d:43:23:8b:ed:53:50:bb:88:6e: b4:24:89:9c:65:28:47:24:04:47:4e:02:2a:1e:78:4c:43:7f: cc:a9:66:67:8d:a6:c7:14:f8:0c:ae:39:71:47:c3:12:73:9a: 1e:a8:04:d8:a2:a1:8f:77:04:a9:36:47:c0:fe:ab:b0:9d:d8: a1:97:ce:f1:95:a5:9a:be:b3:d5:e5:05:b7:cd:07:12:71:92: c9:9f:c7:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUxMDI3MDA0MTUyWhcNMjUxMTAzMDA0MTUyWjAYMRYwFAYD VQQDEw02OGZlYmZkMC01ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9WgriYoOPJ7AgpjV+AzxKIps43pWlFmd96Bh5Dil/+owWsvyqgVqDaTOjeb l7RWJcLuUl29RgGyQqgmbXAvZ2NMW5MBSh6O4oIChq6TqjrKdV+NgjvN8NWPjyqV 7n6MaRL4sL8oupA5Xbjtwn3n9ScITCHicafnThvXxHjhBK6D0jG8NzqY+hL/Z4yX eJir2E6eqxU1saQPUJjnwjSVEmFE8bgMUKInsyjVN3HIgC81IR9TCzoLaSlAxS1A C0UwoYOPlX6JO+SM175rCKnvwthmXx6+SDtwD8//D9LDSWqn/cBvqc5hgpC/NkXd 4efiNRLCQaIhVLx0pC51FPUNgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH/hTfN wd9LC3WzN1DC4Sk9yZ5uMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzHRzfQ0zsFI1Nd1QsFQ4ZJcE9E73rNAHvcq4menqdTGoPkgfWclu8 tEa6H0xt354nM3QsCFzqwCDyAGk1soUHQdyISU16X7efuslvLqvMQEJ18jQ9TOij AeZ6i0hOAkcMZz/9fUIfNtdDDFdT+1VN+r7lJ4nH49P666Qmv7XdfS9ZcTDOwVxg c+ThVA9IjZCfKIGfP4/htXeXOmZpxbfTkICp0D+7hKMFIp1DI4vtU1C7iG60JImc ZShHJARHTgIqHnhMQ3/MqWZnjabHFPgMrjlxR8MSc5oeqATYoqGPdwSpNkfA/quw ndihl87xlaWavrPV5QW3zQcScZLJn8eY -----END CERTIFICATE-----Generated at Tue Oct 28 12:56:02 2025 by rpki-client