$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: 2IngtHtQQMEnRbFv9rE9xk8TkJwX7vJK+crh+nQVcCM= Subject key identifier: 94:0E:77:1E:71:30:05:23:7F:10:C7:82:76:60:EC:4F:90:D2:E3:6B Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 090F Signing time: Tue 04 Nov 2025 20:23:12 +0000 Manifest this update: Tue 04 Nov 2025 20:23:11 +0000 Manifest next update: Tue 11 Nov 2025 20:23:11 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: EuG7OClWSBuEIqfl+UVSXlgbsApSe8Sa359aVo/GfT4=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Nov 4 20:23:11 2025 GMT Not After : Nov 11 20:23:11 2025 GMT Subject: CN=690a60b0-3767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:d2:c6:5c:e3:0e:5d:bf:53:5e:b2:14:06: 2a:4c:04:c3:50:52:4d:6f:93:38:73:14:8b:1f:79: c2:46:4a:c7:0f:c3:82:da:7e:9d:34:59:e4:e3:9e: d5:9a:46:6c:a6:86:7f:a5:9b:6f:ba:f9:24:e9:a3: d6:c4:3c:c9:a0:7c:5c:6c:6a:9a:3d:43:89:a7:f5: 36:5c:67:42:3d:62:26:fe:ad:6c:76:05:8e:bc:16: 00:82:6a:87:32:b2:15:2b:23:33:12:07:13:3d:86: c1:2d:b4:2b:85:4f:95:aa:b8:98:3d:9d:09:e1:ac: 4b:f3:2e:a0:c5:8b:48:1c:b6:f8:79:c2:43:b6:b9: 00:90:0e:61:e2:09:c0:21:79:a2:6e:3b:85:a7:7d: 50:59:2c:90:68:e8:88:56:ee:ec:b4:15:4f:4e:00: fd:52:18:57:ab:f8:cd:a1:70:ab:49:31:d6:64:43: bf:07:ed:28:30:e5:7c:1d:fb:cb:69:f1:2f:13:61: 6b:fc:85:13:e2:5c:8f:00:0f:86:ab:bb:e7:bd:cb: 23:44:5d:fc:83:20:e7:f9:3d:bc:c0:cb:d5:19:c9: cd:db:f0:b1:fb:28:7a:6b:b2:35:39:07:81:e0:24: 33:f7:58:0d:c3:12:a0:0b:49:e9:57:d6:a6:e5:8e: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0E:77:1E:71:30:05:23:7F:10:C7:82:76:60:EC:4F:90:D2:E3:6B X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:56:52:a6:b0:12:cb:60:09:1b:cc:c3:60:59:05:16:44:5d: 2f:74:5f:e7:9b:0c:fa:41:3d:1f:b5:51:e2:f5:51:c2:14:cc: 82:a0:06:61:c5:35:a9:91:4d:25:31:0b:6e:27:b4:33:ee:06: f0:ba:b2:4f:9b:6d:31:4c:cc:3a:f5:56:f7:38:5e:fa:d3:52: 02:ed:3a:49:a6:3d:8b:6d:54:ba:fb:0a:a8:d2:4f:a1:a6:76: f9:14:50:40:3f:42:cb:59:f2:fb:1e:23:f5:1e:68:4b:21:ae: 1d:81:56:35:3d:34:a0:3e:b1:a7:a2:a0:f9:43:d9:fb:6a:5e: ab:c2:3c:b2:97:b5:de:a3:c1:f8:ca:b9:5c:6e:45:08:81:e8: 20:61:4a:08:fc:6b:35:b9:cc:6c:cc:e3:5b:39:25:20:cc:24: 50:5a:d5:d3:f8:5d:88:57:78:d9:d3:b1:ff:a0:1a:e1:32:f2: c8:f2:19:5c:98:82:fd:d7:57:d1:38:df:ff:99:c8:d2:48:57: 35:d2:c6:25:82:59:0f:2b:34:94:60:c1:0e:d7:31:7b:1d:3a: d8:0e:cc:1a:7b:2a:a0:a0:7e:b7:c1:e2:c4:99:4b:26:99:f5: 6f:06:ab:db:7d:a1:1a:79:b1:da:4a:c1:cb:2c:d0:62:09:dd: 05:d7:49:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUxMTA0MjAyMzExWhcNMjUxMTExMjAyMzExWjAYMRYwFAYD VQQDEw02OTBhNjBiMC0zNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvevSxlzjDl2/U16yFAYqTATDUFJNb5M4cxSLH3nCRkrHD8OC2n6dNFnk457V mkZspoZ/pZtvuvkk6aPWxDzJoHxcbGqaPUOJp/U2XGdCPWIm/q1sdgWOvBYAgmqH MrIVKyMzEgcTPYbBLbQrhU+VqriYPZ0J4axL8y6gxYtIHLb4ecJDtrkAkA5h4gnA IXmibjuFp31QWSyQaOiIVu7stBVPTgD9UhhXq/jNoXCrSTHWZEO/B+0oMOV8HfvL afEvE2Fr/IUT4lyPAA+Gq7vnvcsjRF38gyDn+T28wMvVGcnN2/Cx+yh6a7I1OQeB 4CQz91gNwxKgC0npV9am5Y5vCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQOdx5x MAUjfxDHgnZg7E+Q0uNrMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYVlKmsBLLYAkbzMNgWQUWRF0vdF/nmwz6QT0ftVHi9VHCFMyCoAZh xTWpkU0lMQtuJ7Qz7gbwurJPm20xTMw69Vb3OF7601IC7TpJpj2LbVS6+wqo0k+h pnb5FFBAP0LLWfL7HiP1HmhLIa4dgVY1PTSgPrGnoqD5Q9n7al6rwjyyl7Xeo8H4 yrlcbkUIgeggYUoI/Gs1ucxszONbOSUgzCRQWtXT+F2IV3jZ07H/oBrhMvLI8hlc mIL911fRON//mcjSSFc10sYlglkPKzSUYMEO1zF7HTrYDswaeyqgoH63weLEmUsm mfVvBqvbfaEaebHaSsHLLNBiCd0F10nZ -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:31 2025 by rpki-client