$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft File: JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json) Hash identifier: QqIA4fxjjah9aMp2LAoRURs/2pLjOsyqf0tWHsMo0uA= Subject key identifier: 88:17:74:C9:26:97:4A:FF:57:24:13:3E:5E:29:4F:0E:C8:CA:91:EA Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 Certificate issuer: /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft Manifest number: 02C8 Signing time: Mon 03 Nov 2025 01:21:23 +0000 Manifest this update: Mon 03 Nov 2025 01:21:23 +0000 Manifest next update: Mon 10 Nov 2025 01:21:23 +0000 Files and hashes: 1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: rFAszBvrWNlqcX3wxgSHLEjI0xVh7ceBITlu2zoW1+U=) 2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: MWEsRQVRa9qaHn6fTEOexcENWAVY9rzeLcSk3zwVJV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF37, serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Validity Not Before: Nov 3 01:21:23 2025 GMT Not After : Nov 10 01:21:23 2025 GMT Subject: CN=69080393-dfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:ed:c6:0d:60:b8:c6:34:d2:a5:ec:fc:b0: 7d:8b:31:a1:90:ef:40:33:77:bd:35:ad:19:77:de: 0e:73:e6:41:e2:42:e8:ce:f8:29:85:2c:a5:93:bd: ee:67:fb:0a:c1:1b:f6:92:71:8f:6d:1c:8e:b7:42: c3:6e:49:84:1b:b1:df:00:25:40:ca:5d:bc:24:d7: f7:2b:ad:80:35:e4:e3:19:28:ec:4e:53:a6:09:7e: 48:36:11:3e:f8:11:e5:58:f4:26:44:5b:67:65:a8: cd:d9:f0:98:c7:9e:ef:c2:8c:65:d8:35:82:e6:14: 2d:fe:03:f7:60:3a:39:73:3a:b2:0d:3e:9f:f3:de: 60:c8:a9:50:50:8c:74:e7:ea:d5:e8:ba:1e:d3:94: 06:c5:ad:12:21:7f:51:f9:6b:2d:a6:6f:ea:c8:bc: 67:40:17:45:f0:61:55:21:ec:ed:76:c8:19:86:36: 55:52:88:f4:62:90:26:57:44:40:2e:58:ec:d7:e4: 23:5f:fd:c5:42:18:a2:d4:5c:1a:82:78:da:d7:89: 67:55:2e:13:92:e2:47:08:6c:15:b9:45:b5:f6:7f: e2:bf:b8:98:f3:fb:e4:8e:eb:aa:e0:b9:87:1a:c6: df:1a:38:e0:fc:50:5b:7d:92:c7:08:a4:45:16:97: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:17:74:C9:26:97:4A:FF:57:24:13:3E:5E:29:4F:0E:C8:CA:91:EA X509v3 Authority Key Identifier: keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c1:d3:bf:84:90:e6:ed:cd:f5:88:f4:34:7c:d9:30:1b:22: ad:44:e7:a4:22:21:e6:10:bc:df:a1:3b:c3:1a:ca:56:bd:2c: 3b:ee:69:14:ea:86:ce:3f:6e:e8:b6:b4:97:90:7c:b8:26:00: 50:73:ef:39:31:d3:e3:28:66:bf:5e:d1:49:1d:cb:19:60:38: b9:f5:ec:28:dc:fe:0d:95:86:1b:f3:2c:fa:4f:71:40:34:95: 27:96:a5:da:76:0c:9e:9b:33:6a:20:8d:1b:03:60:76:08:bf: 44:7e:7b:86:b0:30:a0:1e:34:1a:72:5c:3f:78:19:67:a7:7a: 18:ec:7f:45:0a:46:20:ee:be:4b:31:36:71:6a:d2:97:65:af: 6a:af:44:58:5b:63:01:da:d3:67:d1:f1:a4:19:1e:7e:4f:84: 0d:5d:fa:14:fe:30:37:40:f3:66:e1:7d:aa:2c:4c:78:c9:83: 7f:d7:1a:9d:3a:d2:6d:02:c9:05:b2:c4:66:15:54:a0:7d:86: 01:80:c4:dd:3a:5e:a8:aa:27:da:91:65:ac:c8:f6:9a:bd:8e: f9:05:28:df:50:56:59:44:da:cf:07:a6:3c:e0:25:74:71:42: 2c:29:68:e3:f1:8a:6f:31:94:22:ba:e4:7a:67:dd:44:9f:79: 5f:e6:de:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMzcxMTAvBgNVBAUTKDI1NjY1NjZBODRDNURDRTc2RjNCN0YzOTA4REU3RjMy Qjg2NzY3MDcwHhcNMjUxMTAzMDEyMTIzWhcNMjUxMTEwMDEyMTIzWjAYMRYwFAYD VQQDEw02OTA4MDM5My1kZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgbtxg1guMY00qXs/LB9izGhkO9AM3e9Na0Zd94Oc+ZB4kLozvgphSylk73u Z/sKwRv2knGPbRyOt0LDbkmEG7HfACVAyl28JNf3K62ANeTjGSjsTlOmCX5INhE+ +BHlWPQmRFtnZajN2fCYx57vwoxl2DWC5hQt/gP3YDo5czqyDT6f895gyKlQUIx0 5+rV6Loe05QGxa0SIX9R+Wstpm/qyLxnQBdF8GFVIeztdsgZhjZVUoj0YpAmV0RA Lljs1+QjX/3FQhii1Fwagnja14lnVS4TkuJHCGwVuUW19n/iv7iY8/vkjuuq4LmH GsbfGjjg/FBbfZLHCKRFFpdMSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgXdMkm l0r/VyQTPl4pTw7IypHqMB8GA1UdIwQYMBaAFCVmVmqExdznbzt/OQjefzK4Z2cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYzNy9DOENDNUFCNDBE MkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNPZHZPMzg1Q041X01yaG5a d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXWldhb1RGM09kdk8zODVDTjVfTXJoblp3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYzNy9DOENDNUFCNDBEMkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNP ZHZPMzg1Q041X01yaG5ad2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPwdO/hJDm7c31iPQ0fNkwGyKtROekIiHmELzfoTvDGspWvSw77mkU 6obOP27otrSXkHy4JgBQc+85MdPjKGa/XtFJHcsZYDi59ewo3P4NlYYb8yz6T3FA NJUnlqXadgyemzNqII0bA2B2CL9EfnuGsDCgHjQaclw/eBlnp3oY7H9FCkYg7r5L MTZxatKXZa9qr0RYW2MB2tNn0fGkGR5+T4QNXfoU/jA3QPNm4X2qLEx4yYN/1xqd OtJtAskFssRmFVSgfYYBgMTdOl6oqifakWWsyPaavY75BSjfUFZZRNrPB6Y84CV0 cUIsKWjj8YpvMZQiuuR6Z91En3lf5t6H -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:03 2025 by rpki-client