$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: yAcIrV8BeVBndM9iFhI2vkjy1glLy7woB8Zf3AXzDqQ= Subject key identifier: A1:31:40:AE:30:F3:18:C8:A6:FB:AF:4E:43:78:AF:CF:46:94:A7:3D Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: F2 Signing time: Mon 03 Nov 2025 05:14:33 +0000 Manifest this update: Mon 03 Nov 2025 05:14:32 +0000 Manifest next update: Mon 10 Nov 2025 05:14:32 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: Zs4z3VdGkfI4ZR+sN/Pifm+hHAQTUtD27uybJm841rk=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Nov 3 05:14:32 2025 GMT Not After : Nov 10 05:14:32 2025 GMT Subject: CN=69083a39-8ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:cb:8e:e7:5f:4d:cd:04:e5:35:31:19:ad: 70:79:1b:13:ab:03:9a:4d:dd:a8:d3:d9:77:f6:ee: 42:3a:ab:a4:f8:ec:3e:3a:c7:48:3f:8c:d5:05:bb: 77:d6:54:ee:f5:cb:bf:f5:12:ae:e6:cf:bc:09:f2: 1b:a3:a8:5b:ae:23:14:0a:3d:f6:03:2e:7f:b4:83: 46:fb:7d:24:46:d6:a8:f9:fd:4d:a1:fd:d1:68:86: f9:92:6a:cc:8a:fa:c3:13:f0:88:6b:67:9b:aa:4f: d1:40:b5:79:7b:14:f7:91:b7:ec:d2:34:6f:26:96: 78:91:9e:b9:25:8e:0b:94:c7:4a:d7:48:6c:37:10: 50:98:68:58:24:b0:09:18:4e:3c:37:81:78:6d:d9: d7:12:cf:73:5e:19:5e:0f:3a:b4:c1:37:20:c3:d2: f5:e5:8d:dd:2c:02:15:1b:0d:6c:bd:b1:fb:88:b8: 8f:05:79:bd:ed:d8:f0:7e:28:16:31:b6:25:d1:85: fb:af:3c:93:2b:63:c0:ad:1b:aa:66:80:49:c6:34: 9d:84:bf:c2:16:e8:73:d8:24:99:a6:72:20:4f:21: 60:5d:53:6e:19:74:cf:a7:76:87:22:88:f2:c3:c5: c1:e4:51:49:54:4d:52:cc:fe:39:48:fd:29:b9:31: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:40:AE:30:F3:18:C8:A6:FB:AF:4E:43:78:AF:CF:46:94:A7:3D X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c2:c4:15:17:4e:46:28:3a:36:cb:c5:2e:c3:0b:c8:4a:8a: 3f:19:f2:af:87:92:11:58:81:79:7c:19:71:64:c6:39:d3:f2: e6:fc:65:09:ac:21:a9:97:0a:22:5f:1d:2e:bc:d7:81:8e:0f: 30:0a:4c:46:04:cf:84:4d:a3:67:4f:96:c2:5d:28:46:fb:93: d0:5b:6f:9e:03:53:1a:25:3e:77:fb:b2:01:1b:0f:a6:c6:59: 4f:6b:1f:4f:7f:fa:4d:fb:8f:6c:dc:5e:00:4e:02:63:47:bc: 81:eb:8d:43:13:9b:2e:3b:45:cd:98:f2:57:ee:94:87:5b:56: 64:ed:b9:7c:b8:ed:7e:ae:45:00:55:f9:51:fb:f4:c8:43:ae: d6:36:d9:93:9c:8d:47:a9:6c:16:7b:b9:5d:3d:86:81:16:d0: 11:21:d2:34:21:26:a1:dc:5d:fe:4b:ba:8d:3d:91:72:a3:dc: 1b:a6:01:0d:ee:7e:01:53:d4:20:bd:af:0e:9b:e8:bc:aa:f8: 27:ac:29:39:5b:fb:bc:88:c4:96:38:c4:3e:bb:0f:c6:35:90: e6:e4:54:5c:9f:cd:61:c5:6c:38:b4:92:1b:11:02:20:65:38: 9c:50:b7:3e:14:34:50:d1:24:a1:5c:8a:61:bf:f3:23:8d:1a: cd:c4:20:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUxMTAzMDUxNDMyWhcNMjUxMTEwMDUxNDMyWjAYMRYwFAYD VQQDEw02OTA4M2EzOS04ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDPLjudfTc0E5TUxGa1weRsTqwOaTd2o09l39u5COquk+Ow+OsdIP4zVBbt3 1lTu9cu/9RKu5s+8CfIbo6hbriMUCj32Ay5/tING+30kRtao+f1Nof3RaIb5kmrM ivrDE/CIa2ebqk/RQLV5exT3kbfs0jRvJpZ4kZ65JY4LlMdK10hsNxBQmGhYJLAJ GE48N4F4bdnXEs9zXhleDzq0wTcgw9L15Y3dLAIVGw1svbH7iLiPBXm97djwfigW MbYl0YX7rzyTK2PArRuqZoBJxjSdhL/CFuhz2CSZpnIgTyFgXVNuGXTPp3aHIojy w8XB5FFJVE1SzP45SP0puTH2bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKExQK4w 8xjIpvuvTkN4r89GlKc9MB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXwsQVF05GKDo2y8UuwwvISoo/GfKvh5IRWIF5fBlxZMY50/Lm/GUJ rCGplwoiXx0uvNeBjg8wCkxGBM+ETaNnT5bCXShG+5PQW2+eA1MaJT53+7IBGw+m xllPax9Pf/pN+49s3F4ATgJjR7yB641DE5suO0XNmPJX7pSHW1Zk7bl8uO1+rkUA VflR+/TIQ67WNtmTnI1HqWwWe7ldPYaBFtARIdI0ISah3F3+S7qNPZFyo9wbpgEN 7n4BU9Qgva8Om+i8qvgnrCk5W/u8iMSWOMQ+uw/GNZDm5FRcn81hxWw4tJIbEQIg ZTicULc+FDRQ0SShXIphv/MjjRrNxCBJ -----END CERTIFICATE-----Generated at Tue Nov 4 07:20:26 2025 by rpki-client