$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: Nvl3MZ7FT7tQxxGqRQ664th7YjjoC06KZQmSO4Tie5U= Subject key identifier: 46:DD:16:B6:E3:CE:23:AF:2B:9A:A5:89:87:E8:60:BE:49:26:7B:DD Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 165A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 1650 Signing time: Sun 02 Nov 2025 16:44:09 +0000 Manifest this update: Sun 02 Nov 2025 16:44:08 +0000 Manifest next update: Sun 09 Nov 2025 16:44:08 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: YyPbnNJyKk7/2UR4QtCsRgZALeZGSh+uXFTvq1XodnU=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5722 (0x165a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: Nov 2 16:44:08 2025 GMT Not After : Nov 9 16:44:08 2025 GMT Subject: CN=69078a59-4c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:a6:ec:f2:04:a1:af:9d:52:f6:72:62:8f: 4b:1a:50:a5:b7:d1:1c:ac:fd:c5:7e:a7:d1:32:c6: 3c:b1:e9:9f:4a:6f:a1:dc:5b:f1:6d:90:87:f2:12: 0b:65:91:3a:34:9a:26:02:ae:cf:d3:8e:5a:6d:93: b7:10:02:7d:48:53:d7:68:8d:71:9d:2f:21:a9:91: 90:30:57:fc:30:f1:e3:45:c2:f4:06:1c:75:1a:df: e2:ee:7c:ae:7d:d9:3b:86:e4:77:f7:ea:e2:75:ab: 7b:ba:e7:e6:36:e0:e6:d1:6c:e7:21:03:c4:ae:28: 1d:4e:57:93:99:52:f5:a7:7c:3c:d3:24:4e:ae:e9: 71:85:27:a0:f1:ef:70:94:ca:97:61:7b:cb:20:f1: 4e:ff:df:7c:8c:4f:e0:aa:b0:7f:e6:2b:e3:2f:e1: c7:30:e8:e1:09:2b:69:75:c9:71:b8:cb:af:97:b2: 50:6f:e2:1a:97:55:ac:c9:f6:d2:26:1a:1c:ca:01: ef:da:23:be:e8:8d:3a:05:03:7b:3c:7c:dc:be:a9: ec:fb:60:c3:bf:b6:5a:02:34:29:21:9e:c0:17:d4: df:11:d7:b8:f2:75:62:76:68:1a:ec:9c:87:88:7f: f3:04:4c:c4:fc:52:56:a9:00:31:9d:ab:a6:0c:82: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DD:16:B6:E3:CE:23:AF:2B:9A:A5:89:87:E8:60:BE:49:26:7B:DD X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b4:66:51:8e:c0:5d:ab:0f:a1:7a:72:87:83:72:c4:03:49: 99:d4:c5:48:87:ef:11:4c:bd:8c:86:81:4e:8d:67:38:19:f1: ff:76:ee:6a:11:13:5e:0c:97:f3:80:4b:67:5c:b4:ca:cf:af: ce:cf:fc:4a:4f:e3:0a:77:df:eb:bc:63:d9:de:10:58:70:f4: 19:a8:43:23:7d:71:a0:8c:72:a4:64:8e:43:61:39:ab:ce:77: 8c:ab:55:74:c9:1c:17:f9:cf:05:7b:59:bf:b2:62:21:de:50: 96:68:10:fb:d3:45:d1:41:02:28:89:cb:26:5a:c5:8d:21:29: b9:e9:bc:86:be:76:3a:c4:cb:1c:c2:03:4b:a8:ec:bd:a2:e4: de:42:f7:d6:09:be:6f:e7:09:1f:92:2a:1f:e9:2c:7c:59:f8: 27:d6:55:63:e3:6e:b7:a7:d6:3b:fd:f0:ce:b3:d8:4d:4a:52: 95:b1:7d:0a:42:74:9b:88:f5:56:3a:1e:46:38:34:41:1e:2f: c0:0f:12:03:ce:80:b0:d4:c5:4e:54:b9:cc:b2:5b:d6:e7:cf: 07:81:47:f2:c8:0e:88:53:dc:79:9f:0d:fe:bf:23:5d:43:06: 31:b1:2c:5f:ce:a4:f9:f1:b7:be:50:8b:69:de:67:8c:c6:c3: c7:27:b6:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUxMTAyMTY0NDA4WhcNMjUxMTA5MTY0NDA4WjAYMRYwFAYD VQQDEw02OTA3OGE1OS00YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rqm7PIEoa+dUvZyYo9LGlClt9EcrP3FfqfRMsY8semfSm+h3FvxbZCH8hIL ZZE6NJomAq7P045abZO3EAJ9SFPXaI1xnS8hqZGQMFf8MPHjRcL0Bhx1Gt/i7nyu fdk7huR39+ridat7uufmNuDm0WznIQPErigdTleTmVL1p3w80yROrulxhSeg8e9w lMqXYXvLIPFO/998jE/gqrB/5ivjL+HHMOjhCStpdclxuMuvl7JQb+Ial1WsyfbS JhocygHv2iO+6I06BQN7PHzcvqns+2DDv7ZaAjQpIZ7AF9TfEde48nVidmga7JyH iH/zBEzE/FJWqQAxnaumDIKkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbdFrbj ziOvK5qliYfoYL5JJnvdMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAtGZRjsBdqw+henKHg3LEA0mZ1MVIh+8RTL2MhoFOjWc4GfH/du5q ERNeDJfzgEtnXLTKz6/Oz/xKT+MKd9/rvGPZ3hBYcPQZqEMjfXGgjHKkZI5DYTmr zneMq1V0yRwX+c8Fe1m/smIh3lCWaBD700XRQQIoicsmWsWNISm56byGvnY6xMsc wgNLqOy9ouTeQvfWCb5v5wkfkiof6Sx8Wfgn1lVj4263p9Y7/fDOs9hNSlKVsX0K QnSbiPVWOh5GODRBHi/ADxIDzoCw1MVOVLnMslvW588HgUfyyA6IU9x5nw3+vyNd QwYxsSxfzqT58be+UItp3meMxsPHJ7aZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:42 2025 by rpki-client