$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: Qw2t1gm/RoEERtA7q5DQAWBHErwfp7itrklsXP70vek= Subject key identifier: 90:B2:C9:01:50:15:1A:37:C3:80:3D:D1:A1:9B:54:08:8C:1F:F4:B0 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 07ED Signing time: Sun 02 Nov 2025 21:01:37 +0000 Manifest this update: Sun 02 Nov 2025 21:01:36 +0000 Manifest next update: Sun 09 Nov 2025 21:01:36 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: co4zbm3hvwO8KCGrhF3sasxqVW4Di32GqRoKBmlnTvM=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: dBsQTbyo2ik4WtMZ8qhDnVJ6kQlfuadQJdvgtMFFBas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Nov 2 21:01:36 2025 GMT Not After : Nov 9 21:01:36 2025 GMT Subject: CN=6907c6b0-75f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:59:2d:fa:d9:d7:cd:ab:e5:72:4e:0f:91: a3:fc:cc:d3:bd:4e:4b:7d:20:fd:fa:48:80:c4:63: 22:6f:cb:ea:36:9e:cb:96:44:95:d0:9d:2d:42:29: 9e:88:cd:6a:9b:51:95:8a:96:05:0b:0d:b7:04:04: de:ea:bb:f0:4a:3c:ca:30:e5:e2:11:80:f6:2b:7e: fa:9d:46:82:8f:d6:56:1b:2e:d5:f4:47:a0:5a:52: d4:32:19:74:df:d6:e1:50:0d:15:0c:ff:f3:61:cd: 9a:ca:8f:2e:05:bd:2a:35:76:0b:a9:68:d8:0c:9a: 12:89:59:5d:31:60:e4:b5:cd:f4:38:0a:21:9b:7b: 12:46:c1:1e:65:21:e5:b1:1c:98:02:4c:d2:5c:a2: d8:9d:d4:d9:93:91:ea:d4:82:74:e8:02:a7:b3:7a: a7:7d:ee:9c:6e:96:37:79:46:2f:a2:3a:1a:e1:8b: 62:da:1d:ce:0e:fa:9e:99:36:12:3b:7d:4b:ad:07: 53:d2:f1:13:9d:d2:83:b0:72:c2:9e:b8:26:ec:a6: 16:30:b6:ab:97:20:d5:18:bc:6c:8f:d5:b1:a4:cd: 59:16:83:73:c9:34:fb:69:e1:0e:ea:66:6d:bb:2e: cb:61:1e:bf:96:5a:ce:e4:c2:8d:7f:33:31:49:3a: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:C9:01:50:15:1A:37:C3:80:3D:D1:A1:9B:54:08:8C:1F:F4:B0 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9f:ba:bd:5e:a7:e5:99:2a:4a:0e:aa:bc:7d:53:54:0d:bf: a6:42:90:26:97:60:6c:a4:ea:e9:ed:33:05:dd:95:e5:b1:47: d4:78:c1:f3:f9:2a:9a:bd:b3:b7:2e:9b:9f:bc:bb:4e:ea:d8: 77:cd:05:a5:28:d4:24:91:a6:bb:04:67:c8:fe:a8:cf:3d:ee: 68:27:a1:fb:b3:75:9f:16:cc:f9:5a:21:06:49:b3:0a:57:a6: 71:f3:ca:3c:75:26:cb:c2:07:e3:3f:49:81:8a:a6:c1:f4:47: 73:91:79:a6:f9:f7:49:6a:7c:08:5f:7d:5b:b4:45:da:b4:a9: cf:b6:d2:78:bf:6d:ea:18:22:e8:32:d2:f1:5b:7a:0a:ba:7d: 1e:6a:a1:40:c5:04:cc:80:8d:ba:6e:66:fc:99:f0:5a:51:92: b9:45:e7:19:5f:4e:a8:48:1b:16:61:3d:26:f3:f2:67:86:14: fb:88:49:37:40:03:0c:53:e6:03:ea:16:cb:1d:e9:5e:be:ae: 82:37:18:91:28:fb:75:2c:f2:5e:16:eb:1b:28:21:e9:df:9c: 14:ca:24:2c:90:de:7c:1f:7d:50:f7:61:49:f6:d7:ad:c2:fe: 82:30:49:3b:7d:7b:be:7a:17:9d:13:7f:2f:ed:14:f6:11:2b: a9:36:e2:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUxMTAyMjEwMTM2WhcNMjUxMTA5MjEwMTM2WjAYMRYwFAYD VQQDEw02OTA3YzZiMC03NWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRVZLfrZ182r5XJOD5Gj/MzTvU5LfSD9+kiAxGMib8vqNp7LlkSV0J0tQime iM1qm1GVipYFCw23BATe6rvwSjzKMOXiEYD2K376nUaCj9ZWGy7V9EegWlLUMhl0 39bhUA0VDP/zYc2ayo8uBb0qNXYLqWjYDJoSiVldMWDktc30OAohm3sSRsEeZSHl sRyYAkzSXKLYndTZk5Hq1IJ06AKns3qnfe6cbpY3eUYvojoa4Yti2h3ODvqemTYS O31LrQdT0vETndKDsHLCnrgm7KYWMLarlyDVGLxsj9WxpM1ZFoNzyTT7aeEO6mZt uy7LYR6/llrO5MKNfzMxSTpDnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCyyQFQ FRo3w4A90aGbVAiMH/SwMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAan7q9XqflmSpKDqq8fVNUDb+mQpAml2BspOrp7TMF3ZXlsUfUeMHz +SqavbO3LpufvLtO6th3zQWlKNQkkaa7BGfI/qjPPe5oJ6H7s3WfFsz5WiEGSbMK V6Zx88o8dSbLwgfjP0mBiqbB9EdzkXmm+fdJanwIX31btEXatKnPttJ4v23qGCLo MtLxW3oKun0eaqFAxQTMgI26bmb8mfBaUZK5RecZX06oSBsWYT0m8/JnhhT7iEk3 QAMMU+YD6hbLHelevq6CNxiRKPt1LPJeFusbKCHp35wUyiQskN58H31Q92FJ9tet wv6CMEk7fXu+ehedE38v7RT2ESupNuK3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:37 2025 by rpki-client