$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: rWG0fZ7iHDpkI4SHm7eSqa8POvkzG3x1ejBQmTqSttc= Subject key identifier: C4:F4:25:C6:30:08:84:AC:33:8C:93:47:05:7A:32:9A:86:6C:1D:46 Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 0143 Signing time: Wed 05 Nov 2025 04:31:06 +0000 Manifest this update: Wed 05 Nov 2025 04:31:06 +0000 Manifest next update: Wed 12 Nov 2025 04:31:06 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: U8KIh4cotqaGSoyoYNW6hd7SS7IGuYrHaW/C0SQptJg=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 5gSCSjFQUqd+Yem2lvK3YYMNulDLaRkf2ZFE+aQiiYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Nov 5 04:31:06 2025 GMT Not After : Nov 12 04:31:06 2025 GMT Subject: CN=690ad30a-6a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:23:9d:4e:a3:f8:d1:ba:b2:18:9c:97:5c: 1e:3f:d4:81:9f:d8:a4:9b:39:7f:f3:8b:40:16:fb: 59:e1:8a:2b:22:71:1d:2d:71:2a:4c:e9:64:07:cb: 0e:80:64:b6:4e:41:1e:dd:dd:55:93:5d:22:79:49: 91:33:fd:11:86:51:bd:6c:ba:d6:8d:35:2d:f7:b0: 38:6b:35:94:18:dc:0a:4f:91:1d:b1:08:68:8e:eb: 13:65:07:85:32:41:03:26:7a:ea:c2:ea:9a:22:52: e4:fd:8c:ba:d1:9a:4f:eb:3d:96:5d:ab:3d:72:63: f0:85:9a:32:2e:1d:42:e9:20:9d:2c:37:dc:75:79: 55:c7:68:e3:ae:f3:29:1e:01:f1:ee:e6:91:14:a5: 32:35:e4:e4:0d:b3:c1:89:88:1d:2e:c4:12:dc:3d: 84:b7:99:4c:f2:96:b0:e7:47:79:3c:79:c6:5e:53: 49:62:4d:c9:27:af:5f:59:d7:cc:b0:0e:1c:53:9f: 40:1e:fc:ed:c5:d8:89:d0:32:bd:f0:24:ea:8a:a8: 0a:18:a6:23:87:3e:48:f5:e5:06:c2:58:9e:40:33: 85:3e:75:dc:46:f5:e1:e1:cb:2e:58:87:78:05:c8: 18:4c:65:7a:e1:35:10:d5:b0:5a:74:85:6f:71:48: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F4:25:C6:30:08:84:AC:33:8C:93:47:05:7A:32:9A:86:6C:1D:46 X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:50:46:b0:45:b5:ed:2c:b9:67:f2:08:e2:34:3d:27:e3:0f: 2f:12:c3:3c:74:0b:8c:30:2e:3e:52:dd:58:fb:94:d8:fd:d4: 71:e4:71:93:66:ea:fb:44:6f:2a:65:7d:db:a0:e2:0a:5d:7f: 9e:7f:e4:c0:08:5b:09:46:f3:67:65:cf:8a:5e:3b:0b:07:9e: 8b:95:24:00:70:28:d2:ba:9a:4a:e2:02:3b:92:38:17:e7:03: a5:d6:17:e4:1e:06:da:b7:d3:89:ba:23:f4:16:7b:c5:12:8c: f2:ab:94:34:05:d6:db:58:b5:78:ee:c4:67:d4:ee:43:43:b1: 28:d8:25:c3:62:2e:a4:41:d6:9d:af:9a:42:cb:23:c8:ba:c0: 21:9f:a6:71:d7:53:f4:b8:76:57:32:b9:a8:bb:92:94:92:b9: 16:c8:02:24:74:0d:e6:26:61:8b:55:23:e3:81:1b:f9:4b:87: 40:d6:0e:86:c2:bf:04:21:41:1d:18:48:f3:a6:ed:d1:27:e4: 5b:1f:92:ef:a9:f7:cf:93:3a:48:26:92:ef:c3:51:be:e7:af: 86:29:5f:1c:62:4f:9b:b7:e1:4b:9f:71:7e:ff:2f:76:2f:4f: 4a:58:7a:85:03:c1:cd:b9:26:b3:60:5d:e7:c1:eb:54:28:d7: 9b:6c:85:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjUxMTA1MDQzMTA2WhcNMjUxMTEyMDQzMTA2WjAYMRYwFAYD VQQDEw02OTBhZDMwYS02YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBcjnU6j+NG6shicl1weP9SBn9ikmzl/84tAFvtZ4YorInEdLXEqTOlkB8sO gGS2TkEe3d1Vk10ieUmRM/0RhlG9bLrWjTUt97A4azWUGNwKT5EdsQhojusTZQeF MkEDJnrqwuqaIlLk/Yy60ZpP6z2WXas9cmPwhZoyLh1C6SCdLDfcdXlVx2jjrvMp HgHx7uaRFKUyNeTkDbPBiYgdLsQS3D2Et5lM8paw50d5PHnGXlNJYk3JJ69fWdfM sA4cU59AHvztxdiJ0DK98CTqiqgKGKYjhz5I9eUGwlieQDOFPnXcRvXh4csuWId4 BcgYTGV64TUQ1bBadIVvcUi77wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT0JcYw CISsM4yTRwV6MpqGbB1GMB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwUEawRbXtLLln8gjiND0n4w8vEsM8dAuMMC4+Ut1Y+5TY/dRx5HGT Zur7RG8qZX3boOIKXX+ef+TACFsJRvNnZc+KXjsLB56LlSQAcCjSuppK4gI7kjgX 5wOl1hfkHgbat9OJuiP0FnvFEozyq5Q0BdbbWLV47sRn1O5DQ7Eo2CXDYi6kQdad r5pCyyPIusAhn6Zx11P0uHZXMrmou5KUkrkWyAIkdA3mJmGLVSPjgRv5S4dA1g6G wr8EIUEdGEjzpu3RJ+RbH5LvqffPkzpIJpLvw1G+56+GKV8cYk+bt+FLn3F+/y92 L09KWHqFA8HNuSazYF3nwetUKNebbIVz -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:38 2025 by rpki-client