$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: lq4kKnyVN1tgaB4L9dMTblEEEk4gLRnSGXI8ki8LvVw= Subject key identifier: 18:5F:EE:F6:2F:8D:54:DF:E9:0F:5C:C2:CD:D2:3D:CE:13:05:2E:2E Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: E7 Signing time: Mon 27 Oct 2025 07:34:07 +0000 Manifest this update: Mon 27 Oct 2025 07:34:05 +0000 Manifest next update: Mon 03 Nov 2025 07:34:05 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: pR+K7eY0tC7pYW/kCklGpMJo1FCKRiHk35g6X8uvlSs=) 2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Oct 27 07:34:05 2025 GMT Not After : Nov 3 07:34:05 2025 GMT Subject: CN=68ff206e-45e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:47:8c:d9:d5:77:65:d8:44:85:82:4a:b1:7e: 87:f6:51:14:a2:56:e4:3a:1d:5f:af:94:ad:a9:85: d7:01:95:41:a5:7e:a3:58:2e:40:ea:e0:7d:56:b4: 52:88:56:e0:92:c8:bc:6d:84:c6:9e:8b:aa:fd:cc: 03:b3:1a:42:06:17:71:b0:53:c4:2f:2f:2f:bd:c4: 8e:b8:7b:a7:cf:9f:2d:79:d9:d2:44:7e:e7:53:b5: c9:0a:ff:86:00:9f:66:b3:5c:7a:1a:8a:d9:a7:7f: 3d:8a:94:0b:59:c8:fe:47:62:7a:4c:6f:f7:8d:67: 74:24:d5:75:ed:71:47:93:f1:ad:61:a2:23:44:b0: 1e:d3:52:c0:70:88:d8:b9:35:a2:66:ff:85:4b:ba: 82:15:7e:9c:7a:b6:c5:87:26:c9:f0:00:42:30:05: d8:68:0d:db:16:1e:dd:53:d1:98:8e:c7:3c:fa:a8: 78:99:87:26:5a:71:65:4a:1b:34:ec:b9:02:f1:10: ff:0c:5a:b3:f8:ed:40:56:4e:b4:01:4a:71:93:c9: 02:d9:14:d1:ab:b6:4d:58:04:8c:9b:fb:22:82:c4: 8e:3f:bb:c8:da:1e:b2:6a:b6:df:39:68:94:ac:fe: fd:81:e4:a7:f6:77:82:c8:de:78:4f:e7:12:c6:55: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5F:EE:F6:2F:8D:54:DF:E9:0F:5C:C2:CD:D2:3D:CE:13:05:2E:2E X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:3f:b1:a0:e4:5e:c7:13:66:52:4b:b0:1a:6a:9c:5d:1e:c3: 4b:0f:bb:bb:00:cf:c3:27:5c:43:92:5d:e3:ea:24:14:f2:db: 2e:ab:30:9d:8a:5d:9b:18:3f:a2:4a:d6:aa:68:91:5a:a5:b5: 82:54:b1:64:d3:e4:27:f9:d9:d7:07:e6:1c:03:e0:bc:98:27: 2e:4e:ef:1e:39:30:96:08:a4:e7:28:9f:ea:dc:e5:2c:29:a7: 27:ac:27:73:6a:9e:91:38:da:07:f6:ba:94:54:5f:67:dd:47: 31:e8:e1:a7:ce:ae:0c:a4:c5:9c:44:7e:42:97:6e:5f:7a:c7: 8d:88:84:ca:e0:12:7d:4b:d8:01:e7:3c:79:0d:8f:03:f1:95: cb:37:2c:de:31:3f:eb:b5:a1:06:b1:e0:e4:e3:5e:00:3b:d4: 82:8e:0d:89:aa:a5:b3:7a:76:5b:ae:3c:c9:13:76:61:23:3e: 19:97:43:1f:4b:ba:dd:b6:dc:14:4f:f6:58:71:d5:42:58:fb: 87:47:f4:a5:f2:0a:f2:1b:de:4b:4b:cd:c4:0e:14:2e:29:a3: ba:ed:1f:20:44:24:6d:99:1c:dd:3e:4b:3d:f8:9a:82:fa:30: 35:01:85:c9:c9:2a:86:c3:7f:24:a4:f8:40:cc:0e:12:2a:0b: cd:93:4f:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUxMDI3MDczNDA1WhcNMjUxMTAzMDczNDA1WjAYMRYwFAYD VQQDEw02OGZmMjA2ZS00NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EeM2dV3ZdhEhYJKsX6H9lEUolbkOh1fr5StqYXXAZVBpX6jWC5A6uB9VrRS iFbgksi8bYTGnouq/cwDsxpCBhdxsFPELy8vvcSOuHunz58tednSRH7nU7XJCv+G AJ9ms1x6GorZp389ipQLWcj+R2J6TG/3jWd0JNV17XFHk/GtYaIjRLAe01LAcIjY uTWiZv+FS7qCFX6cerbFhybJ8ABCMAXYaA3bFh7dU9GYjsc8+qh4mYcmWnFlShs0 7LkC8RD/DFqz+O1AVk60AUpxk8kC2RTRq7ZNWASMm/sigsSOP7vI2h6yarbfOWiU rP79geSn9neCyN54T+cSxlXJMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhf7vYv jVTf6Q9cws3SPc4TBS4uMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnP7Gg5F7HE2ZSS7AaapxdHsNLD7u7AM/DJ1xDkl3j6iQU8tsuqzCd il2bGD+iStaqaJFapbWCVLFk0+Qn+dnXB+YcA+C8mCcuTu8eOTCWCKTnKJ/q3OUs KacnrCdzap6RONoH9rqUVF9n3Ucx6OGnzq4MpMWcRH5Cl25feseNiITK4BJ9S9gB 5zx5DY8D8ZXLNyzeMT/rtaEGseDk414AO9SCjg2JqqWzenZbrjzJE3ZhIz4Zl0Mf S7rdttwUT/ZYcdVCWPuHR/Sl8gryG95LS83EDhQuKaO67R8gRCRtmRzdPks9+JqC +jA1AYXJySqGw38kpPhAzA4SKgvNk0+D -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:15 2025 by rpki-client