$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: W68zu84eUPJ0wROr76DYh3nmnqqX8lfQVkIcYNgCDIg= Subject key identifier: 64:6C:69:F9:BC:2E:46:7D:1E:1F:33:3D:30:01:32:2A:C5:E1:E0:8E Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 0153 Signing time: Wed 05 Nov 2025 04:20:17 +0000 Manifest this update: Wed 05 Nov 2025 04:20:16 +0000 Manifest next update: Wed 12 Nov 2025 04:20:16 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: K+UoivzBXCzIWQXr2LSIv7f89neYs1bY5RseBC3e/XA=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: Nov 5 04:20:16 2025 GMT Not After : Nov 12 04:20:16 2025 GMT Subject: CN=690ad081-2b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:1a:45:f1:f5:17:45:e8:9d:19:c9:73:e4: e2:b2:c3:9a:2c:f0:05:87:1d:50:25:c2:3f:8b:c3: 27:a2:6c:19:eb:63:02:b4:63:c2:f0:0e:d2:3e:7b: bf:02:a4:4f:32:5d:f9:3c:e2:75:f3:57:e8:2d:13: b7:5a:19:38:b7:5e:33:f9:db:6d:23:03:fd:bd:21: 8b:5d:94:e1:09:4e:15:72:82:8c:25:30:1a:0f:b7: 0c:98:05:f5:98:38:f0:3a:c0:29:54:d8:2b:1d:21: c1:a8:e4:ca:8b:4a:9f:37:14:19:f4:6d:9a:57:d7: a5:df:34:13:ef:28:28:c9:09:c8:47:84:09:35:da: fc:cb:76:e1:28:b5:d6:03:02:29:44:b9:9c:7f:e1: 42:c9:6f:89:6a:21:3f:a4:d1:fc:8d:b8:69:86:6e: 83:ee:91:72:b1:8a:94:28:06:59:13:1c:dc:4b:54: ab:29:b4:bd:4d:3d:a8:1c:35:7e:1a:86:70:8e:9b: cd:43:30:cd:dc:82:15:be:6e:cd:ca:ac:78:08:10: cc:3f:65:6d:d2:cb:68:5f:3b:7d:90:12:7a:97:a3: 1d:af:4a:5a:6b:bf:d3:6c:b7:30:75:04:e1:fb:6c: 1a:a9:66:74:c7:e5:db:f6:59:81:f7:93:5d:60:f0: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:69:F9:BC:2E:46:7D:1E:1F:33:3D:30:01:32:2A:C5:E1:E0:8E X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a0:38:31:7f:53:07:49:3d:14:48:f9:23:30:92:23:42:ca: fa:cd:ab:b2:d5:5f:0a:67:b9:32:6e:ff:ab:3c:2c:c8:ff:13: c5:2f:85:b0:1f:8c:0e:f9:f7:7e:0e:f1:01:7e:5f:62:52:a9: fa:60:99:32:7b:21:fb:de:ea:8e:76:cf:0d:a2:a8:d7:c7:e4: 0e:0b:ed:b7:5e:39:7d:01:03:14:89:a9:49:82:27:c4:2c:e5: f2:28:e6:89:bd:a5:94:5e:88:ad:96:62:02:91:d0:0d:b0:49: 05:e6:7e:d9:6b:36:fa:60:16:63:a3:dc:73:27:17:a3:e0:30: 85:fc:4b:4e:71:cd:9e:cb:f7:5a:17:c7:55:f9:84:b7:49:c6: 83:18:09:c5:32:39:91:74:9d:d1:c9:7e:86:50:dd:c7:42:f9: 3f:c7:33:35:5f:7a:d3:3b:5e:51:c4:24:01:1a:f6:34:f0:db: ce:13:b3:fb:3f:ac:00:8a:37:f2:c3:08:b6:4a:8a:cb:0e:a9: 2e:17:3e:8e:02:26:38:70:a9:a3:c4:9b:f6:fd:47:db:f0:39: cf:62:18:17:33:eb:c6:b6:ab:e8:17:62:99:d2:1f:50:be:a7: 0c:e0:21:ec:16:ff:93:b6:10:a5:fe:23:5b:72:69:57:e0:3b: 26:b6:49:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjUxMTA1MDQyMDE2WhcNMjUxMTEyMDQyMDE2WjAYMRYwFAYD VQQDEw02OTBhZDA4MS0yYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NsaRfH1F0XonRnJc+TissOaLPAFhx1QJcI/i8MnomwZ62MCtGPC8A7SPnu/ AqRPMl35POJ181foLRO3Whk4t14z+dttIwP9vSGLXZThCU4VcoKMJTAaD7cMmAX1 mDjwOsApVNgrHSHBqOTKi0qfNxQZ9G2aV9el3zQT7ygoyQnIR4QJNdr8y3bhKLXW AwIpRLmcf+FCyW+JaiE/pNH8jbhphm6D7pFysYqUKAZZExzcS1SrKbS9TT2oHDV+ GoZwjpvNQzDN3IIVvm7Nyqx4CBDMP2Vt0stoXzt9kBJ6l6Mdr0paa7/TbLcwdQTh +2waqWZ0x+Xb9lmB95NdYPACmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRsafm8 LkZ9Hh8zPTABMirF4eCOMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBoDgxf1MHST0USPkjMJIjQsr6zauy1V8KZ7kybv+rPCzI/xPFL4Ww H4wO+fd+DvEBfl9iUqn6YJkyeyH73uqOds8NoqjXx+QOC+23Xjl9AQMUialJgifE LOXyKOaJvaWUXoitlmICkdANsEkF5n7Zazb6YBZjo9xzJxej4DCF/EtOcc2ey/da F8dV+YS3ScaDGAnFMjmRdJ3RyX6GUN3HQvk/xzM1X3rTO15RxCQBGvY08NvOE7P7 P6wAijfywwi2SorLDqkuFz6OAiY4cKmjxJv2/Ufb8DnPYhgXM+vGtqvoF2KZ0h9Q vqcM4CHsFv+TthCl/iNbcmlX4DsmtkkJ -----END CERTIFICATE-----Generated at Wed Nov 5 09:59:35 2025 by rpki-client