$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json) Hash identifier: bZtlMIJyZJWSp+pjKlZYG7x5PUcMaFXlQ/FA0Z7yWuI= Subject key identifier: D8:C3:09:A3:A1:AB:C0:10:BF:80:88:C4:1C:92:C7:18:8B:DD:C9:81 Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft Manifest number: 1C1A Signing time: Sun 02 Nov 2025 16:13:17 +0000 Manifest this update: Sun 02 Nov 2025 16:13:16 +0000 Manifest next update: Sun 09 Nov 2025 16:13:16 +0000 Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: KF3LibekdGRUCMy2fEYVpFszwCxTOVKtPZcO1nWX2e8=) 2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: kBZXfU8hYHbxkpL5pMVsBeQd1k5TVtind4j2n+kliDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7205 (0x1c25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: Nov 2 16:13:16 2025 GMT Not After : Nov 9 16:13:16 2025 GMT Subject: CN=6907831c-34ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:5b:9b:a1:16:cb:c2:91:e5:b6:60:90:19: 76:73:5b:95:0d:cc:7e:be:a9:d1:d0:72:fc:48:c1: e0:b2:52:99:d4:dd:a3:87:4e:e9:4d:25:c6:16:c3: a2:4a:46:1c:d4:ac:d0:5d:97:d1:37:dc:58:5a:f3: c7:8f:c7:13:9f:fc:1e:d8:98:25:83:ce:b9:05:6d: f0:0a:3e:d9:48:4d:36:87:fd:58:8f:1d:ae:ca:13: 3d:38:53:c3:bf:88:b7:9b:92:05:af:0f:df:9b:53: 9c:1f:24:da:34:e4:87:26:3c:ed:aa:d0:2d:c8:d2: a2:23:4d:ae:ff:ab:1c:88:36:6f:3f:00:4c:02:17: 7f:22:78:5d:9f:b5:19:a9:6e:64:e6:7b:c7:0c:14: ed:49:19:1c:80:62:ae:79:82:87:d2:6c:a2:85:e4: 79:db:54:5e:04:9d:6b:28:95:b0:1f:12:c4:e3:cf: d5:02:4f:ca:c4:82:57:1c:ff:2d:2e:b7:b4:3d:af: 7f:77:a7:a3:9e:9c:15:a4:12:e1:0a:72:14:22:53: 2e:9b:73:ac:00:30:80:29:81:a9:cf:b1:61:79:28: 2c:a7:45:3f:a6:94:3a:61:02:f2:ed:47:ab:40:17: 92:76:09:11:12:12:a1:96:1d:32:17:9a:f7:75:f8: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C3:09:A3:A1:AB:C0:10:BF:80:88:C4:1C:92:C7:18:8B:DD:C9:81 X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:bf:3e:b6:2e:c4:24:d0:aa:27:fe:93:8e:70:bb:b2:ff:0a: be:14:b6:8b:12:09:e4:b7:f9:55:a2:d4:29:21:c9:29:74:05: ca:f4:af:6a:21:d5:7d:7b:b4:56:f3:64:1f:9a:3f:24:26:cb: 12:97:e2:be:73:1c:d2:f4:c0:e6:0a:ea:80:21:ea:22:6b:b7: fd:82:84:a5:bb:89:cc:78:ef:42:8e:3c:00:88:a7:df:2c:a9: 87:6f:1b:fd:47:f0:30:20:74:46:f7:a0:a0:26:d3:17:fe:ea: 80:74:28:ce:8b:ac:a3:0d:84:fd:9c:ad:2b:60:72:24:81:7d: a7:a7:48:1b:5c:c2:b2:83:2c:dd:09:55:d6:f0:b9:14:2b:c0: 37:04:24:69:b4:86:07:8f:67:17:4e:25:8e:ed:c1:7f:fc:73: 11:38:08:97:42:67:dc:e0:9d:ee:a2:ff:55:1b:29:3d:0d:25: 62:89:a9:9d:53:33:c3:da:78:5e:de:af:e5:69:02:39:68:27: 6e:a5:96:3b:a0:53:4e:0e:9c:7f:e6:46:b7:99:b2:d1:93:67: 6b:35:83:58:3d:82:51:24:b2:f3:e6:61:62:48:a5:28:42:17: db:e6:f8:ac:a9:30:fc:57:bc:a9:fa:54:fc:6c:2a:f7:c1:83: b2:9e:ae:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjUxMTAyMTYxMzE2WhcNMjUxMTA5MTYxMzE2WjAYMRYwFAYD VQQDEw02OTA3ODMxYy0zNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzlbm6EWy8KR5bZgkBl2c1uVDcx+vqnR0HL8SMHgslKZ1N2jh07pTSXGFsOi SkYc1KzQXZfRN9xYWvPHj8cTn/we2Jglg865BW3wCj7ZSE02h/1Yjx2uyhM9OFPD v4i3m5IFrw/fm1OcHyTaNOSHJjztqtAtyNKiI02u/6sciDZvPwBMAhd/Inhdn7UZ qW5k5nvHDBTtSRkcgGKueYKH0myiheR521ReBJ1rKJWwHxLE48/VAk/KxIJXHP8t Lre0Pa9/d6ejnpwVpBLhCnIUIlMum3OsADCAKYGpz7FheSgsp0U/ppQ6YQLy7Uer QBeSdgkREhKhlh0yF5r3dfgz/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjDCaOh q8AQv4CIxBySxxiL3cmBMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhvz62LsQk0Kon/pOOcLuy/wq+FLaLEgnkt/lVotQpIckpdAXK9K9q IdV9e7RW82Qfmj8kJssSl+K+cxzS9MDmCuqAIeoia7f9goSlu4nMeO9CjjwAiKff LKmHbxv9R/AwIHRG96CgJtMX/uqAdCjOi6yjDYT9nK0rYHIkgX2np0gbXMKygyzd CVXW8LkUK8A3BCRptIYHj2cXTiWO7cF//HMROAiXQmfc4J3uov9VGyk9DSViiamd UzPD2nhe3q/laQI5aCdupZY7oFNODpx/5ka3mbLRk2drNYNYPYJRJLLz5mFiSKUo Qhfb5visqTD8V7yp+lT8bCr3wYOynq6T -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:33 2025 by rpki-client