$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: IZSfMvFXbDHDJFz8nNvHBox8xn6LlGkpbTB92mhS0T8= Subject key identifier: 75:90:36:9A:21:A7:3C:64:90:52:F3:08:F7:F1:6F:94:0C:2C:03:26 Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 1422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 1419 Signing time: Tue 04 Nov 2025 17:00:40 +0000 Manifest this update: Tue 04 Nov 2025 17:00:39 +0000 Manifest next update: Tue 11 Nov 2025 17:00:39 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: JMrrekXEM7EEhKFIyKGmP7ehCMfu8bVIn9o7eniZyUA=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 6bfHO59shnVhLVfkZQ/tBBlzPOnqeYneOazsjO1NW44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5154 (0x1422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Validity Not Before: Nov 4 17:00:39 2025 GMT Not After : Nov 11 17:00:39 2025 GMT Subject: CN=690a3138-970c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:eb:96:58:67:22:c6:21:dd:3e:42:34:76: 0f:23:32:3a:2c:73:0e:54:83:5c:5c:fe:60:8a:d1: 81:ea:85:95:06:9f:36:1e:4c:55:ac:25:c9:b7:25: 12:de:b7:65:45:86:b5:45:81:a8:75:09:db:65:2b: ba:c5:fa:c6:7f:21:41:d5:82:bc:72:62:82:fb:ef: 02:ad:0d:2b:08:48:b6:0e:ac:67:06:a8:91:48:ee: 58:98:a1:93:94:0c:87:c0:4b:9c:f4:b2:31:74:09: 5e:f1:17:4e:ab:92:cc:cb:db:83:78:94:7f:42:5b: a1:99:83:bf:55:f0:b2:e1:7d:7e:94:9d:a9:67:15: 58:c4:a8:b7:c9:aa:7f:c3:3c:bf:72:84:20:81:0a: 47:26:5d:9e:fd:1f:dd:a2:30:8b:d9:13:f2:07:ea: 84:57:ee:d4:70:cc:c4:22:27:b4:1f:9a:24:d7:b6: be:d9:c8:02:89:7e:b4:8f:fd:4b:91:e5:5f:3c:d3: 9d:fc:a9:d3:83:ad:f1:7b:bd:95:06:a1:9b:ab:8d: 3c:c7:38:21:4f:12:87:fe:93:49:f2:f8:00:cc:37: ee:66:d4:08:f6:de:12:2b:d1:33:45:d7:d2:59:8a: a8:6b:82:cb:b2:ef:07:51:4d:c5:6c:f6:82:80:28: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:90:36:9A:21:A7:3C:64:90:52:F3:08:F7:F1:6F:94:0C:2C:03:26 X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:36:17:b2:67:55:cd:d5:60:1e:c4:be:6b:da:2c:a0:86:28: 1b:37:e7:f9:28:60:fd:93:e7:d6:14:03:6f:9f:a1:99:5f:bb: a6:da:ef:66:70:b6:4c:b9:09:fe:4c:cf:49:7c:82:27:9d:27: 06:5c:41:68:85:b5:40:e7:8b:f4:5d:4b:67:69:f3:f6:2b:79: d3:e6:e1:95:a7:23:dc:63:ca:8f:f7:ad:c6:cf:ce:84:d4:6e: e5:04:a2:43:e3:9e:86:89:3c:da:c3:74:41:5b:a8:77:da:73: f8:1c:11:8d:59:52:a7:a0:fd:fc:db:ee:9d:3f:85:f4:44:2f: 21:69:0e:46:6c:df:ea:ca:0f:e1:4a:55:d9:50:97:0c:f3:ac: d4:40:77:3c:d0:45:37:0c:c5:72:38:d6:f8:ac:92:9c:50:2e: 59:6a:eb:6a:27:07:94:78:82:ab:7c:48:17:e3:81:3c:44:a4: 87:9a:b6:a7:f8:81:c7:5f:a6:66:70:e3:be:72:33:f9:cb:a7: 8f:73:c1:45:bf:3f:cb:af:b9:64:19:f0:8a:ab:60:b4:cd:9f: 14:6a:19:93:dd:ce:b9:a7:20:4c:c2:55:67:4d:6d:b5:8f:f8: d5:6e:7e:de:7c:59:04:cc:5a:ef:f5:e3:09:17:f2:fe:70:49: a5:84:ab:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjUxMTA0MTcwMDM5WhcNMjUxMTExMTcwMDM5WjAYMRYwFAYD VQQDEw02OTBhMzEzOC05NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrbrllhnIsYh3T5CNHYPIzI6LHMOVINcXP5gitGB6oWVBp82HkxVrCXJtyUS 3rdlRYa1RYGodQnbZSu6xfrGfyFB1YK8cmKC++8CrQ0rCEi2DqxnBqiRSO5YmKGT lAyHwEuc9LIxdAle8RdOq5LMy9uDeJR/QluhmYO/VfCy4X1+lJ2pZxVYxKi3yap/ wzy/coQggQpHJl2e/R/dojCL2RPyB+qEV+7UcMzEIie0H5ok17a+2cgCiX60j/1L keVfPNOd/KnTg63xe72VBqGbq408xzghTxKH/pNJ8vgAzDfuZtQI9t4SK9EzRdfS WYqoa4LLsu8HUU3FbPaCgCj0UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWQNpoh pzxkkFLzCPfxb5QMLAMmMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGNheyZ1XN1WAexL5r2iyghigbN+f5KGD9k+fWFANvn6GZX7um2u9m cLZMuQn+TM9JfIInnScGXEFohbVA54v0XUtnafP2K3nT5uGVpyPcY8qP963Gz86E 1G7lBKJD456GiTzaw3RBW6h32nP4HBGNWVKnoP382+6dP4X0RC8haQ5GbN/qyg/h SlXZUJcM86zUQHc80EU3DMVyONb4rJKcUC5ZautqJweUeIKrfEgX44E8RKSHmran +IHHX6ZmcOO+cjP5y6ePc8FFvz/Lr7lkGfCKq2C0zZ8UahmT3c65pyBMwlVnTW21 j/jVbn7efFkEzFrv9eMJF/L+cEmlhKth -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:36 2025 by rpki-client