$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: yXLWlSRR6ZCNkYCrkqBzOxHlr9+3bjgXgz7V5pyMOhA= Subject key identifier: F3:53:B2:55:0D:A3:DA:D0:65:BE:5D:6F:51:A6:0C:66:AA:FE:90:8F Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1A9F Signing time: Sun 12 Oct 2025 16:43:16 +0000 Manifest this update: Sun 12 Oct 2025 16:43:15 +0000 Manifest next update: Sun 19 Oct 2025 16:43:15 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: nQAJUSRm0xI7MNOC0QGexTahWCGO0n8hn+BuFDiUCHE=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 16:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6825 (0x1aa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Oct 12 16:43:15 2025 GMT Not After : Oct 19 16:43:15 2025 GMT Subject: CN=68ebdaa3-8828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b9:c4:89:d8:fb:40:81:86:b6:5f:3f:60:ae: 30:d2:97:9f:60:99:e7:9d:e3:71:02:c4:02:9d:81: 33:d0:a0:10:41:fa:db:b8:4f:63:a3:fe:9c:60:a7: bd:be:bb:f1:1f:69:a1:a5:9a:95:88:c1:e1:7d:8b: b0:c3:eb:4d:11:11:7e:46:f5:e6:1c:8e:3d:32:41: 96:cc:83:6c:94:33:bd:03:d6:10:ec:01:40:df:c7: c5:46:a0:a6:98:0c:b5:1c:32:a8:98:4e:09:5b:9c: ff:10:d3:70:6f:1b:f7:fb:25:0f:ae:89:10:0a:a3: 0f:e2:e1:5a:17:90:c7:b8:bc:20:55:7c:24:37:d5: 6e:9f:7b:a4:d5:50:f9:9f:06:f7:fa:91:70:6f:6c: 33:e1:b1:f3:4b:fe:62:34:ef:61:0d:9d:71:b2:dc: 2a:f5:2e:73:e5:13:c8:90:b7:9c:11:21:7e:69:b0: 03:b8:fc:89:27:31:f8:76:cb:9d:a7:25:a8:86:5d: fd:bb:42:7c:9b:10:3f:e6:dc:0c:54:f0:ab:dd:64: 3c:f6:ff:1b:37:fc:29:d1:d3:4e:a0:5e:a5:b4:96: 9e:d8:64:59:44:04:f9:70:29:28:42:07:bc:71:be: 37:a1:54:ab:17:b3:03:81:97:64:d0:b9:38:69:94: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:53:B2:55:0D:A3:DA:D0:65:BE:5D:6F:51:A6:0C:66:AA:FE:90:8F X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fe:3e:01:4c:48:9a:cc:c1:e0:c9:94:cf:62:1c:94:a3:e4: b5:7c:bf:c3:3a:95:4c:27:74:f6:5e:b1:31:91:5a:c5:f9:cb: 61:24:83:62:e2:3f:b6:6f:52:5a:73:39:c3:35:f3:81:54:6f: cb:e4:85:e0:f9:a1:80:b0:51:07:11:e9:e5:9d:5f:fa:4a:ca: 15:c1:da:f5:e2:0e:cd:50:66:e7:d1:d5:fe:c0:e7:7c:39:7a: 73:e6:00:e8:f0:80:05:a9:0c:8d:24:0f:56:04:35:f5:2e:74: b0:73:ad:d1:1f:80:1f:ce:f6:48:41:d2:2b:b0:7b:1f:c4:65: 98:dc:ea:1e:7e:4c:d8:44:24:68:a2:31:fd:66:15:9a:25:41: de:9f:09:69:6f:c8:86:02:15:33:a9:c0:7e:b9:06:60:03:6d: 61:71:5d:17:a2:72:43:79:a9:2b:c7:34:bb:bd:de:c3:dc:10: cf:0e:95:59:42:26:75:b5:8b:69:36:b4:cd:86:7e:52:ef:18: f1:6a:61:82:cf:11:42:10:ae:88:50:0a:20:ce:33:17:28:21: 48:e8:e1:3b:49:80:16:d2:0b:e7:24:8d:98:dc:9a:e9:c7:78: 54:20:51:c8:22:eb:e1:74:4a:c2:1f:81:97:05:b8:08:8f:1d: 72:34:fa:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUxMDEyMTY0MzE1WhcNMjUxMDE5MTY0MzE1WjAYMRYwFAYD VQQDEw02OGViZGFhMy04ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07nEidj7QIGGtl8/YK4w0pefYJnnneNxAsQCnYEz0KAQQfrbuE9jo/6cYKe9 vrvxH2mhpZqViMHhfYuww+tNERF+RvXmHI49MkGWzINslDO9A9YQ7AFA38fFRqCm mAy1HDKomE4JW5z/ENNwbxv3+yUProkQCqMP4uFaF5DHuLwgVXwkN9Vun3uk1VD5 nwb3+pFwb2wz4bHzS/5iNO9hDZ1xstwq9S5z5RPIkLecESF+abADuPyJJzH4dsud pyWohl39u0J8mxA/5twMVPCr3WQ89v8bN/wp0dNOoF6ltJae2GRZRAT5cCkoQge8 cb43oVSrF7MDgZdk0Lk4aZQb8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNTslUN o9rQZb5db1GmDGaq/pCPMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/j4BTEiazMHgyZTPYhyUo+S1fL/DOpVMJ3T2XrExkVrF+cthJINi 4j+2b1JacznDNfOBVG/L5IXg+aGAsFEHEenlnV/6SsoVwdr14g7NUGbn0dX+wOd8 OXpz5gDo8IAFqQyNJA9WBDX1LnSwc63RH4AfzvZIQdIrsHsfxGWY3OoefkzYRCRo ojH9ZhWaJUHenwlpb8iGAhUzqcB+uQZgA21hcV0XonJDeakrxzS7vd7D3BDPDpVZ QiZ1tYtpNrTNhn5S7xjxamGCzxFCEK6IUAogzjMXKCFI6OE7SYAW0gvnJI2Y3Jrp x3hUIFHIIuvhdErCH4GXBbgIjx1yNPpj -----END CERTIFICATE-----Generated at Tue Oct 14 16:36:30 2025 by rpki-client