$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: LXfV5S9hS6cEJWywI9QsxvvlA8OYQbKcIOYG9Alqk/c= Subject key identifier: 8F:8D:F0:F8:38:D5:57:14:89:FD:DD:C9:C4:21:5C:DA:BE:98:4A:AD Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: 011A Signing time: Wed 05 Nov 2025 05:05:47 +0000 Manifest this update: Wed 05 Nov 2025 05:05:47 +0000 Manifest next update: Wed 12 Nov 2025 05:05:47 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: KGBIWetUNhua7H3N4+wbtVSs/9Yxasu5D/sG1wN/0xk=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: Nov 5 05:05:47 2025 GMT Not After : Nov 12 05:05:47 2025 GMT Subject: CN=690adb2b-c5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:9a:3d:5d:db:1e:73:1b:cc:6e:b1:66:c8: 4d:02:ce:16:8d:01:92:33:ca:a4:8c:fd:10:df:86: ee:50:6f:18:23:b3:16:de:d3:a4:73:02:3f:77:62: 75:b1:39:29:49:78:79:a6:95:9b:04:2d:e0:39:92: b4:99:33:fe:b9:94:a7:a8:26:3f:3b:ba:2b:76:61: bb:c0:b3:e3:9d:39:7b:56:5d:f5:ec:fa:03:41:dd: 22:c6:3d:3b:4a:e8:0a:ef:c0:33:70:74:e2:56:97: bf:c0:5c:ff:68:c3:3f:d0:f1:2a:42:02:5a:bd:6c: 76:fc:9d:ee:0a:61:bd:10:f3:b7:53:9e:b4:07:6a: 5f:ca:92:73:5f:dd:79:ea:41:c1:ff:31:7a:3c:5d: d3:d1:44:a7:65:7f:d5:ed:67:e2:28:46:7a:43:df: 1d:3f:da:20:93:46:19:82:4a:0b:f5:04:3e:4f:e4: b1:39:0b:d5:84:46:c1:43:b6:01:bc:bd:3c:8d:dd: 58:5c:cf:47:92:0a:35:0c:d3:72:1d:2f:c1:f6:00: 6e:53:6a:25:12:eb:cf:2e:5c:9c:d1:45:f3:c3:af: b5:cc:af:1a:fb:6b:70:6d:f2:eb:bf:58:d7:c3:0d: 37:79:8c:85:33:d6:b8:e7:e4:0e:f4:aa:aa:85:46: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:F0:F8:38:D5:57:14:89:FD:DD:C9:C4:21:5C:DA:BE:98:4A:AD X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:3c:89:dc:ba:9d:d1:22:b7:66:5f:65:11:5f:90:8d:11: 88:4e:c5:05:ee:bd:05:ae:5a:44:0f:dc:1d:92:f9:f3:b9:b4: d2:a8:60:e0:3b:dd:bc:2b:c8:6b:70:99:d4:5a:89:dd:45:40: 4e:1c:c4:d2:9b:79:61:da:02:f9:4b:e0:7d:08:2a:44:00:6b: c0:55:8e:8c:d5:0a:d9:93:ba:dc:cd:33:5c:33:7c:ee:bb:d8: 1e:69:32:14:a5:fb:43:f1:b5:71:a0:b7:ad:82:25:cb:e2:71: e8:4c:d2:04:de:c0:2a:e2:b9:ed:6c:92:e3:be:8d:43:57:18: ed:95:0a:c1:b8:e2:64:58:d7:25:f6:95:f7:2c:19:e8:ff:ca: 56:f5:55:ff:c4:a2:be:83:8d:14:37:d0:a3:d0:c8:e6:1f:ca: 54:0d:2d:de:36:f7:a3:8d:8a:ad:7a:e1:9f:d9:30:7f:55:a2: da:8d:2d:c8:36:52:39:55:72:12:c5:ee:1e:fa:93:57:48:b6: 3c:03:ea:57:73:3b:15:f9:86:59:35:93:dc:04:29:34:35:cb: 49:e7:33:8e:43:5e:46:cd:68:1b:9e:88:b8:fc:6c:99:00:c1: cc:9c:90:3e:9e:89:58:f3:49:91:e6:bf:3e:d4:6a:6f:84:ba: 72:55:d1:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUxMTA1MDUwNTQ3WhcNMjUxMTEyMDUwNTQ3WjAYMRYwFAYD VQQDEw02OTBhZGIyYi1jNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBKaPV3bHnMbzG6xZshNAs4WjQGSM8qkjP0Q34buUG8YI7MW3tOkcwI/d2J1 sTkpSXh5ppWbBC3gOZK0mTP+uZSnqCY/O7ordmG7wLPjnTl7Vl317PoDQd0ixj07 SugK78AzcHTiVpe/wFz/aMM/0PEqQgJavWx2/J3uCmG9EPO3U560B2pfypJzX915 6kHB/zF6PF3T0USnZX/V7WfiKEZ6Q98dP9ogk0YZgkoL9QQ+T+SxOQvVhEbBQ7YB vL08jd1YXM9Hkgo1DNNyHS/B9gBuU2olEuvPLlyc0UXzw6+1zK8a+2twbfLrv1jX ww03eYyFM9a45+QO9KqqhUZThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+N8Pg4 1VcUif3dycQhXNq+mEqtMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBccDyJ3Lqd0SK3Zl9lEV+QjRGITsUF7r0FrlpED9wdkvnzubTSqGDg O928K8hrcJnUWondRUBOHMTSm3lh2gL5S+B9CCpEAGvAVY6M1QrZk7rczTNcM3zu u9geaTIUpftD8bVxoLetgiXL4nHoTNIE3sAq4rntbJLjvo1DVxjtlQrBuOJkWNcl 9pX3LBno/8pW9VX/xKK+g40UN9Cj0MjmH8pUDS3eNvejjYqteuGf2TB/VaLajS3I NlI5VXISxe4e+pNXSLY8A+pXczsV+YZZNZPcBCk0NctJ5zOOQ15GzWgbnoi4/GyZ AMHMnJA+nolY80mR5r8+1GpvhLpyVdHr -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:20 2025 by rpki-client