$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json) Hash identifier: UAg7cqLrq4tbJQg/kRjd8hf/dq2Wb7qaYRQNxmenU1g= Subject key identifier: 63:51:6D:01:8F:3E:6A:A6:AB:79:D3:DF:DA:C6:CA:ED:7B:6E:28:86 Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft Manifest number: 0590 Signing time: Sun 02 Nov 2025 23:11:04 +0000 Manifest this update: Sun 02 Nov 2025 23:11:03 +0000 Manifest next update: Sun 09 Nov 2025 23:11:03 +0000 Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: 38jPKo6ME6e0t3H83SeonzVuMJkXOynnGrrT2ihq48Q=) 2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Validity Not Before: Nov 2 23:11:03 2025 GMT Not After : Nov 9 23:11:03 2025 GMT Subject: CN=6907e508-7a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:aa:b1:59:c6:77:46:6b:77:cd:67:60:a5: e1:4e:e6:21:00:5d:1a:e4:6e:f0:fd:32:68:81:73: 77:14:20:ef:88:98:14:9c:d9:24:c9:a9:4c:47:04: 4a:da:ee:d7:85:3b:2b:11:fe:f6:95:ef:34:60:89: a6:14:5b:03:09:c5:83:0a:dd:3d:d1:1a:e8:22:de: d6:79:db:8d:61:b4:bf:96:c6:ab:db:2a:7b:6b:28: fe:fe:66:b7:80:93:29:ae:85:df:4e:fa:b1:95:97: 45:e9:c1:e2:c8:a7:aa:c1:1d:e9:08:2d:59:b7:88: 4a:54:79:03:e2:fc:1e:93:8d:49:08:66:46:3c:da: 5e:8f:05:d9:70:e4:88:6a:64:32:bc:a5:b0:a5:87: 0c:bb:18:ec:86:ba:56:88:89:81:2c:09:6a:04:1c: e0:73:e4:d2:41:80:b8:f6:20:9a:c1:bb:bf:c8:bd: 68:3a:8b:e5:6b:79:0c:20:e0:e1:3a:4a:14:f2:87: 53:10:f7:8b:42:f4:6c:10:7b:63:ae:2f:90:61:46: d2:f1:6c:73:c6:45:d6:d3:07:6e:85:6a:a3:19:b5: 3d:c9:f4:8b:16:83:aa:70:19:bf:23:ad:85:a6:74: b3:b1:bc:73:e4:22:58:67:cb:b4:92:ca:01:1f:27: 11:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:51:6D:01:8F:3E:6A:A6:AB:79:D3:DF:DA:C6:CA:ED:7B:6E:28:86 X509v3 Authority Key Identifier: keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fe:5e:f0:33:16:17:4c:2e:5c:13:ae:85:6d:31:9e:fc:08: f4:0d:ad:8c:43:f1:d3:51:56:b9:b9:f1:08:0f:53:0f:17:00: 09:23:cb:81:a3:d8:d9:e7:66:be:77:b8:38:f7:58:5e:cb:74: 7d:33:05:45:cf:24:30:2e:99:b8:43:3d:6c:b0:9e:bc:7a:58: 1d:5c:8c:3d:07:f2:f3:51:be:1c:be:07:ad:1c:3c:43:26:af: d7:62:97:6e:65:d7:f1:83:ba:36:d6:50:6f:8c:d5:48:5d:f9: f8:34:eb:f3:d1:74:3a:a3:79:b1:cb:25:2c:6d:c8:fe:77:71: cd:1f:e3:75:5c:44:8d:9f:10:2f:1f:16:c2:ee:f7:3b:a1:8e: 49:7e:c9:e4:a7:be:62:af:9b:98:96:3f:74:e5:ef:3d:c9:50: 7a:d7:5c:c9:56:aa:e8:24:d5:2b:2f:ca:d4:8d:92:bf:f4:49: 39:52:3e:a9:fe:f4:92:12:20:78:80:4c:6c:d2:79:4d:27:8d: 11:8e:95:33:87:38:f4:1f:53:14:55:45:54:e6:ef:e1:83:a3: ba:20:dd:9f:ee:d0:fe:ce:39:e8:d4:d8:ba:8a:15:5c:56:94: 6a:00:11:ec:60:c0:1e:fd:41:08:26:d7:bd:73:f8:a5:42:ed: a9:d5:04:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC MDY4MzQ0NjAwHhcNMjUxMTAyMjMxMTAzWhcNMjUxMTA5MjMxMTAzWjAYMRYwFAYD VQQDEw02OTA3ZTUwOC03YTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncSqsVnGd0Zrd81nYKXhTuYhAF0a5G7w/TJogXN3FCDviJgUnNkkyalMRwRK 2u7XhTsrEf72le80YImmFFsDCcWDCt090RroIt7WeduNYbS/lsar2yp7ayj+/ma3 gJMproXfTvqxlZdF6cHiyKeqwR3pCC1Zt4hKVHkD4vwek41JCGZGPNpejwXZcOSI amQyvKWwpYcMuxjshrpWiImBLAlqBBzgc+TSQYC49iCawbu/yL1oOovla3kMIODh OkoU8odTEPeLQvRsEHtjri+QYUbS8WxzxkXW0wduhWqjGbU9yfSLFoOqcBm/I62F pnSzsbxz5CJYZ8u0ksoBHycR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNRbQGP Pmqmq3nT39rGyu17biiGMB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5 Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB//l7wMxYXTC5cE66FbTGe/Aj0Da2MQ/HTUVa5ufEID1MPFwAJI8uB o9jZ52a+d7g491hey3R9MwVFzyQwLpm4Qz1ssJ68elgdXIw9B/LzUb4cvgetHDxD Jq/XYpduZdfxg7o21lBvjNVIXfn4NOvz0XQ6o3mxyyUsbcj+d3HNH+N1XESNnxAv HxbC7vc7oY5Jfsnkp75ir5uYlj905e89yVB611zJVqroJNUrL8rUjZK/9Ek5Uj6p /vSSEiB4gExs0nlNJ40RjpUzhzj0H1MUVUVU5u/hg6O6IN2f7tD+zjno1Ni6ihVc VpRqABHsYMAe/UEIJte9c/ilQu2p1QS8 -----END CERTIFICATE-----Generated at Tue Nov 4 08:33:11 2025 by rpki-client