$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft File: jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json) Hash identifier: QL8BhCtztmn0m96u7EzVKx+w6mwEn9R4/yzHIO2xYGE= Subject key identifier: 3A:D3:D9:D9:17:5B:8C:6A:3D:09:E2:AB:0D:1A:53:B0:4A:0A:E4:C6 Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 Certificate issuer: /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft Manifest number: 0240 Signing time: Mon 03 Nov 2025 01:45:19 +0000 Manifest this update: Mon 03 Nov 2025 01:45:19 +0000 Manifest next update: Mon 10 Nov 2025 01:45:19 +0000 Files and hashes: 1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: OzkxVxkjJMuEmF7oKCmc2edxhicRI2I0DD2PTvXdJ/Q=) 2: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: IyWwjIStMD7CLHAYI80G9u0bSfl+ZxcEcIIy1oHhXzo=) 3: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: cQgwz6VDyiOHU3CVFbp+dck6b+15ezgPGKxe1LIqxfA=) 4: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: egVVNLsPdwUoef36phQTdD6372WDtBPUXE4iD/r+2cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53 Validity Not Before: Nov 3 01:45:19 2025 GMT Not After : Nov 10 01:45:19 2025 GMT Subject: CN=6908092f-125b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:b5:12:dc:df:b2:6f:66:b3:0d:c2:f4:35: a4:49:ba:57:13:32:ce:a5:8f:a1:1c:40:47:73:00: 58:40:92:63:6c:74:3e:57:bf:55:26:ad:8e:37:d0: da:60:ac:69:64:36:ef:71:e2:7b:86:8d:67:4e:5a: ae:8a:9f:26:36:f6:54:82:dc:b3:30:ba:01:ac:33: f8:0a:32:83:9b:aa:17:b4:d9:74:c8:ee:d9:0c:a4: dc:7b:b9:66:55:84:1a:77:44:1c:ca:a5:48:63:55: 55:d0:72:f5:07:cc:cc:dd:8a:ad:e8:94:eb:82:a7: 6d:02:68:3b:89:5a:f8:b6:e2:16:81:2b:dc:23:74: b6:d9:3a:fc:bb:91:b6:83:42:bf:3c:3b:ae:33:8b: d6:c7:79:73:e2:bb:b1:c0:4e:1e:fe:0d:ff:aa:74: 31:52:af:75:a9:09:9d:53:08:48:81:3e:77:24:aa: 0c:b9:c2:04:b8:76:6e:b5:ad:80:09:39:2e:74:42: 89:22:f6:3b:e9:e9:06:b9:43:45:38:3a:fe:78:7e: 75:62:20:5d:7b:4b:c1:d5:be:6a:fa:ea:ed:01:dc: 68:23:b8:85:72:2c:84:ed:5a:9a:d5:d6:76:e5:b5: 2b:51:82:7f:68:ba:9c:e3:25:62:9b:f6:34:13:62: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:D9:D9:17:5B:8C:6A:3D:09:E2:AB:0D:1A:53:B0:4A:0A:E4:C6 X509v3 Authority Key Identifier: keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f8:b6:0e:d6:90:d0:0b:a8:b1:1e:db:a1:07:32:1a:95:63: 9c:11:e7:12:a8:10:51:b3:13:43:7f:c9:45:71:d3:50:ac:4b: 32:72:cf:fe:1c:d9:94:c5:91:d0:a7:94:f6:e7:52:be:48:59: 95:1a:83:61:a7:ab:47:81:c0:bb:35:72:bd:f2:b6:16:dd:3e: b5:28:1f:84:85:05:d2:39:58:a1:83:d6:c4:0f:37:46:79:74: 08:eb:ab:c7:89:10:bf:bc:51:a4:b9:32:06:2d:bb:c7:70:9e: 18:87:98:6d:60:91:e2:5d:2c:a3:a6:e2:f9:93:61:f5:c6:1b: 8c:8c:22:26:59:9d:36:32:2e:0a:9b:ab:27:85:a4:67:7c:76: b7:0b:a1:43:93:39:7d:c9:e0:a4:36:64:5e:dc:80:b0:5d:1d: 29:d7:54:dc:cb:b1:a7:e2:52:1a:74:18:a3:f2:ae:7c:47:54: f5:2b:1e:50:43:e3:9d:4d:5d:dd:22:7f:4c:f4:20:f0:27:a2: 21:df:a2:ba:86:52:21:97:67:e1:42:a5:53:bb:b9:3a:31:87: fa:3e:22:f8:14:cf:c7:cd:e9:bb:71:bf:86:fa:0c:78:fd:64: e7:1d:82:20:ef:3c:d5:e7:c3:fd:c1:f9:94:28:1a:54:08:b1: 78:46:e4:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjExMTAvBgNVBAUTKDhERjY5MzI0MkQ2MTBGODc2MzA3NDc1MzQyQTkyRTE1 NTYwMjhFNTMwHhcNMjUxMTAzMDE0NTE5WhcNMjUxMTEwMDE0NTE5WjAYMRYwFAYD VQQDEw02OTA4MDkyZi0xMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48q1Etzfsm9msw3C9DWkSbpXEzLOpY+hHEBHcwBYQJJjbHQ+V79VJq2ON9Da YKxpZDbvceJ7ho1nTlquip8mNvZUgtyzMLoBrDP4CjKDm6oXtNl0yO7ZDKTce7lm VYQad0QcyqVIY1VV0HL1B8zM3Yqt6JTrgqdtAmg7iVr4tuIWgSvcI3S22Tr8u5G2 g0K/PDuuM4vWx3lz4ruxwE4e/g3/qnQxUq91qQmdUwhIgT53JKoMucIEuHZuta2A CTkudEKJIvY76ekGuUNFODr+eH51YiBde0vB1b5q+urtAdxoI7iFciyE7Vqa1dZ2 5bUrUYJ/aLqc4yVim/Y0E2IvMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrT2dkX W4xqPQniqw0aU7BKCuTGMB8GA1UdIwQYMBaAFI32kyQtYQ+HYwdHU0KpLhVWAo5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2MS9CMkMyMDZFMDRB MUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0ZGpCMGRUUXFrdUZWWUNq bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYVRKQzFoRDRkakIwZFRRcWt1RlZZQ2psTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2MS9CMkMyMDZFMDRBMUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0 ZGpCMGRUUXFrdUZWWUNqbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy+LYO1pDQC6ixHtuhBzIalWOcEecSqBBRsxNDf8lFcdNQrEsycs/+ HNmUxZHQp5T251K+SFmVGoNhp6tHgcC7NXK98rYW3T61KB+EhQXSOVihg9bEDzdG eXQI66vHiRC/vFGkuTIGLbvHcJ4Yh5htYJHiXSyjpuL5k2H1xhuMjCImWZ02Mi4K m6snhaRnfHa3C6FDkzl9yeCkNmRe3ICwXR0p11Tcy7Gn4lIadBij8q58R1T1Kx5Q Q+OdTV3dIn9M9CDwJ6Ih36K6hlIhl2fhQqVTu7k6MYf6PiL4FM/Hzem7cb+G+gx4 /WTnHYIg7zzV58P9wfmUKBpUCLF4RuSX -----END CERTIFICATE-----Generated at Tue Nov 4 02:45:43 2025 by rpki-client