$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: iuM8MX5RyzOB9OwL5xxLXdEL1jpokn4PclHvJDPRg0k= Subject key identifier: 32:BF:9F:EB:75:C6:99:82:C0:C1:6D:FB:5D:39:E3:C3:94:37:5C:73 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 018B Signing time: Mon 03 Nov 2025 03:38:03 +0000 Manifest this update: Mon 03 Nov 2025 03:38:03 +0000 Manifest next update: Mon 10 Nov 2025 03:38:03 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: uwfZa/cGxVA0vuhvTLNcV7HHbUbiLtnLJ0iwFlLkbE0=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Nov 3 03:38:03 2025 GMT Not After : Nov 10 03:38:03 2025 GMT Subject: CN=6908239b-be8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:00:fc:97:ce:31:00:cc:ad:2c:9e:3d:82: 6f:f1:92:ac:7f:6a:82:02:6e:1e:ec:0f:db:04:82: c8:06:ca:3c:a3:2b:2c:9b:24:6c:8a:66:26:4f:b9: 58:aa:09:f7:d6:f8:ae:d4:bb:16:8c:d4:1c:a2:1d: fe:ad:70:8d:c2:3d:64:f5:04:c9:97:b6:03:b3:67: ea:94:c6:95:6d:5e:21:08:1d:5b:df:2c:0b:64:d9: 62:c5:53:07:58:f4:6d:e5:98:aa:21:2d:24:cb:b6: b9:4d:6b:23:63:95:75:69:d9:82:96:fc:5f:3c:10: 45:b2:be:f2:2c:86:87:4e:0d:e5:ec:52:91:f9:95: 59:54:0c:dd:00:90:e5:62:b8:d6:02:f4:f3:9c:3f: 30:70:42:b8:67:7b:8a:2b:bb:72:88:8c:99:24:7f: 97:2e:82:06:1c:26:cf:7c:47:af:7d:ca:c6:60:a3: 94:06:ca:93:55:a4:f4:bf:26:f6:76:92:1a:90:d6: fd:e6:0e:a1:4a:d2:59:51:fb:47:70:d9:a3:dd:bf: d3:31:3a:e5:2c:05:eb:a7:ca:e3:7d:23:74:dc:a0: 01:27:33:66:d3:41:97:bb:76:64:34:24:74:16:2f: 57:bb:f7:84:26:43:29:5b:56:9e:69:90:1f:bd:78: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:9F:EB:75:C6:99:82:C0:C1:6D:FB:5D:39:E3:C3:94:37:5C:73 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:5d:bb:b0:c2:76:59:3e:94:85:9e:a2:26:3f:f8:5d:b3:0f: 64:58:50:c3:90:00:7f:3d:c1:79:c8:6d:a8:77:f7:06:0d:b7: 40:4b:d4:9b:34:b5:ff:da:10:5e:d8:2a:f5:3a:2e:0d:46:aa: ec:e7:a3:69:ea:8f:71:fc:57:03:36:05:93:d2:d5:22:ec:cd: 45:b3:6c:0f:26:e9:1d:c7:7a:07:44:87:11:d7:4c:c8:db:73: 1e:c5:b9:04:d6:62:06:46:98:22:97:40:16:99:e3:37:d9:f4: bc:45:78:31:27:ab:6a:10:00:97:49:08:8c:ce:54:6f:e8:4f: b1:f5:80:a7:9c:38:b6:49:08:48:3d:75:70:1c:88:92:2a:e6: 4d:87:32:7a:c4:11:bd:a7:8a:59:be:37:6f:24:80:57:53:f2: f1:84:95:c8:8a:2d:7a:54:e3:e7:3e:cf:c2:0e:57:65:18:8e: bc:63:7f:51:79:17:db:1f:7c:60:d9:83:24:f6:09:dc:c9:a8: 98:a7:e6:e1:c4:cc:4c:60:6e:1b:4a:69:48:79:d0:71:30:44: c9:46:94:a9:f4:35:0a:bd:9b:8a:40:d0:39:a6:a5:3f:7a:a0: aa:2b:6f:46:77:69:70:94:a5:22:12:37:cb:b8:96:1f:c3:fa: 3a:70:c9:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUxMTAzMDMzODAzWhcNMjUxMTEwMDMzODAzWjAYMRYwFAYD VQQDEw02OTA4MjM5Yi1iZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3gA/JfOMQDMrSyePYJv8ZKsf2qCAm4e7A/bBILIBso8oyssmyRsimYmT7lY qgn31viu1LsWjNQcoh3+rXCNwj1k9QTJl7YDs2fqlMaVbV4hCB1b3ywLZNlixVMH WPRt5ZiqIS0ky7a5TWsjY5V1admClvxfPBBFsr7yLIaHTg3l7FKR+ZVZVAzdAJDl YrjWAvTznD8wcEK4Z3uKK7tyiIyZJH+XLoIGHCbPfEevfcrGYKOUBsqTVaT0vyb2 dpIakNb95g6hStJZUftHcNmj3b/TMTrlLAXrp8rjfSN03KABJzNm00GXu3ZkNCR0 Fi9Xu/eEJkMpW1aeaZAfvXh1GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK/n+t1 xpmCwMFt+10548OUN1xzMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUXbuwwnZZPpSFnqImP/hdsw9kWFDDkAB/PcF5yG2od/cGDbdAS9Sb NLX/2hBe2Cr1Oi4NRqrs56Np6o9x/FcDNgWT0tUi7M1Fs2wPJukdx3oHRIcR10zI 23MexbkE1mIGRpgil0AWmeM32fS8RXgxJ6tqEACXSQiMzlRv6E+x9YCnnDi2SQhI PXVwHIiSKuZNhzJ6xBG9p4pZvjdvJIBXU/LxhJXIii16VOPnPs/CDldlGI68Y39R eRfbH3xg2YMk9gncyaiYp+bhxMxMYG4bSmlIedBxMETJRpSp9DUKvZuKQNA5pqU/ eqCqK29Gd2lwlKUiEjfLuJYfw/o6cMlL -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:56 2025 by rpki-client