$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: OXtUxRwa02m5d369RoxoekDMKRRiZ6+7QilNYihzNCo= Subject key identifier: 63:FD:FE:CC:CA:12:AD:35:3E:B7:62:E6:C4:C2:D5:0D:6F:86:6C:99 Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 6F Signing time: Wed 05 Nov 2025 07:06:59 +0000 Manifest this update: Wed 05 Nov 2025 07:06:58 +0000 Manifest next update: Wed 12 Nov 2025 07:06:58 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: yl3Ck5ySA/1cQKM2qpSEFTJ7WJfz9dJhJjaZR9LqOs8=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: Nov 5 07:06:58 2025 GMT Not After : Nov 12 07:06:58 2025 GMT Subject: CN=690af793-3594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:10:41:b3:75:45:97:d9:80:1e:90:41:90: 9a:e7:49:45:c1:11:17:d3:06:52:ff:d3:b8:7e:f9: 94:75:30:7a:ff:7f:c0:d0:31:57:4b:c7:a4:92:1d: fa:5b:7a:c5:35:d4:30:e3:df:59:39:99:d7:e0:76: 9e:8b:22:0f:a2:5e:0d:64:ab:56:ec:ee:60:ed:eb: 11:1e:6c:5a:56:30:7c:48:85:3e:65:e9:46:91:c7: 7a:5b:b1:71:4f:8f:64:52:2f:18:be:36:e0:bc:74: f8:32:86:6c:e4:3d:25:2b:9b:4c:2c:5b:c2:57:9d: 30:fc:f8:7c:bf:ce:64:fa:07:d0:ba:8e:6d:d0:bc: 57:a7:54:9e:dc:87:80:a0:e3:0a:70:23:cc:b3:14: 79:92:74:a7:c2:bc:c0:c8:5a:34:65:e1:33:72:32: a5:4b:82:ce:0c:5a:90:e1:a3:67:44:02:2b:a3:75: 86:8e:ab:22:e3:4e:ea:3c:af:6b:c4:bc:c7:83:e6: 36:b5:dc:45:ef:fe:e0:95:5b:23:0f:be:ed:d7:51: 2d:41:54:26:68:bc:e7:13:33:98:14:57:71:2a:22: a2:ec:0b:57:36:6a:fd:29:29:61:0f:bb:98:1c:81: b3:25:45:a6:70:39:24:18:68:5c:3f:26:51:20:a6: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:FE:CC:CA:12:AD:35:3E:B7:62:E6:C4:C2:D5:0D:6F:86:6C:99 X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2b:f4:ec:c9:ad:77:01:b2:81:a0:bb:77:02:f3:99:77:32: d5:9d:4f:ef:50:8e:8f:2e:f3:b6:cc:e9:28:1b:e1:3e:6e:ff: 3b:3e:61:e2:8e:4b:b6:9e:c5:64:c4:35:cc:89:76:c4:ff:cf: 11:11:8e:80:31:c2:8b:c9:e5:6b:80:95:28:ab:aa:26:14:51: 77:a0:68:e6:cc:9a:c6:06:05:bb:ab:55:23:c4:20:12:b5:7b: 6c:8c:5c:b0:d3:c2:19:bf:09:4a:54:1b:b6:b7:31:45:5a:b0: da:17:8c:5a:0e:4e:7b:25:11:30:29:b3:70:e9:a4:77:f4:c3: 2c:de:30:27:ef:a3:37:6c:a0:59:23:bc:ea:9e:03:12:43:87: 21:e6:1a:5a:03:d0:ea:2a:b9:bc:46:22:14:21:18:12:ae:7d: 0e:31:88:f9:20:f9:c5:cc:e6:1a:da:c5:7d:f6:11:37:0d:6d: ee:6d:88:26:87:ed:0f:80:6e:0e:d5:ca:98:7d:8b:d5:d6:03: 15:a9:4e:1e:e5:2c:51:75:2b:cb:48:e9:b9:da:74:45:73:5d: de:84:17:79:7d:01:db:10:35:53:89:f8:85:0a:d6:fd:75:b9: 71:b7:45:62:1a:a2:fc:c5:94:3a:1d:0f:a5:1c:cf:5c:c4:19: 1a:a8:18:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTExMDUwNzA2NThaFw0yNTExMTIwNzA2NThaMBgxFjAUBgNV BAMTDTY5MGFmNzkzLTM1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoXxBBs3VFl9mAHpBBkJrnSUXBERfTBlL/07h++ZR1MHr/f8DQMVdLx6SSHfpb esU11DDj31k5mdfgdp6LIg+iXg1kq1bs7mDt6xEebFpWMHxIhT5l6UaRx3pbsXFP j2RSLxi+NuC8dPgyhmzkPSUrm0wsW8JXnTD8+Hy/zmT6B9C6jm3QvFenVJ7ch4Cg 4wpwI8yzFHmSdKfCvMDIWjRl4TNyMqVLgs4MWpDho2dEAiujdYaOqyLjTuo8r2vE vMeD5ja13EXv/uCVWyMPvu3XUS1BVCZovOcTM5gUV3EqIqLsC1c2av0pKWEPu5gc gbMlRaZwOSQYaFw/JlEgpi67AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY/3+zMoS rTU+t2LmxMLVDW+GbJkwHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGwr9OzJrXcBsoGgu3cC85l3MtWdT+9Qjo8u87bM6Sgb4T5u/zs+YeKO S7aexWTENcyJdsT/zxERjoAxwovJ5WuAlSirqiYUUXegaObMmsYGBburVSPEIBK1 e2yMXLDTwhm/CUpUG7a3MUVasNoXjFoOTnslETAps3DppHf0wyzeMCfvozdsoFkj vOqeAxJDhyHmGloD0OoqubxGIhQhGBKufQ4xiPkg+cXM5hraxX32ETcNbe5tiCaH 7Q+Abg7Vyph9i9XWAxWpTh7lLFF1K8tI6bnadEVzXd6EF3l9AdsQNVOJ+IUK1v11 uXG3RWIaovzFlDodD6Ucz1zEGRqoGJU= -----END CERTIFICATE-----Generated at Thu Nov 6 00:40:40 2025 by rpki-client