$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft File: jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json) Hash identifier: X2Bb7MD4MnQ4rt9mmEtQ7e5AvnOt8/oVf7pgYFd8WXc= Subject key identifier: BC:40:D0:78:44:0F:00:10:6C:6F:DC:52:4D:D3:92:4F:6E:21:96:0C Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5 Certificate issuer: /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft Manifest number: A5 Signing time: Mon 03 Nov 2025 06:17:45 +0000 Manifest this update: Mon 03 Nov 2025 06:17:45 +0000 Manifest next update: Mon 10 Nov 2025 06:17:45 +0000 Files and hashes: 1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: iYQdoMnaRaN3/dqWKWpe6kyBAXYeBCmGGGONL4E0dXk=) 2: A1FE9790C1B111EFACAB4071C4F9AE02.roa (hash: nTebHJ2nY/z4pA9GR9Zium43gwzyk8WFga213syhwvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5 Validity Not Before: Nov 3 06:17:45 2025 GMT Not After : Nov 10 06:17:45 2025 GMT Subject: CN=69084909-08e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:1a:67:85:ca:d0:0c:3b:05:3f:d6:29:25: 33:71:d1:f1:fe:41:29:ec:49:3c:55:5f:69:1b:57: e5:fc:da:a0:ab:ee:a1:d1:89:92:17:7b:88:af:dc: 4e:c4:49:bf:99:dc:1c:e2:2f:7e:64:14:14:2c:10: 70:e1:2a:e4:87:41:04:8e:1f:68:62:bb:64:2e:ec: 7b:8b:45:b1:0c:3a:35:df:8b:6a:a5:b1:f3:cd:1e: 37:07:9d:b4:2c:25:b8:3b:ff:1b:a4:b2:96:d2:49: 90:e8:f6:c4:43:ac:6f:e2:53:eb:eb:5e:7e:3a:2c: 8f:1a:63:93:22:3d:a0:e4:89:47:a6:37:d2:c6:9e: 88:ee:ea:0d:02:c0:02:8b:30:88:fc:31:a2:f8:c9: ff:10:7b:76:f9:a1:6a:a1:4f:d5:1f:d6:ae:67:48: 0b:94:b4:52:83:19:84:4c:05:64:2d:b4:72:e2:5c: 24:cc:b6:f5:93:19:97:1b:c8:f3:7d:3e:9b:b1:ba: 4b:38:5d:4d:3b:7f:a2:86:26:57:5b:82:ec:81:9c: 48:b8:33:57:4b:60:15:73:d1:cc:0c:e6:97:5b:6b: d9:b9:8e:72:d9:2c:7c:39:e1:e4:24:f3:0c:73:ea: 5f:5c:5f:5e:48:7c:fd:99:03:f9:b1:dc:6f:eb:95: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:40:D0:78:44:0F:00:10:6C:6F:DC:52:4D:D3:92:4F:6E:21:96:0C X509v3 Authority Key Identifier: keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b0:c1:60:28:e3:ee:9b:da:d2:63:ff:1a:e3:f3:32:e0:33: f3:b7:6f:db:10:8c:d8:de:3e:63:08:0a:01:4a:d2:a6:ac:25: 22:cf:5c:44:79:77:ab:a2:fa:04:da:fc:41:d4:82:c8:0b:f3: f4:78:34:d5:64:a0:ad:87:31:04:ff:d1:f0:9c:2a:ae:ac:95: 10:58:e8:bd:ff:07:52:5c:85:ec:b7:ab:16:72:f0:5d:ee:db: 01:e2:b1:2a:e3:24:5d:7c:3f:bd:c6:dd:7c:b5:73:85:69:ed: 8f:ea:4f:e8:31:39:b1:22:55:54:1a:15:7a:d3:6d:60:3f:a9: fd:46:d4:d4:3d:50:97:b3:c7:a1:18:24:f3:a6:17:82:b8:04: 0f:fb:5c:49:7d:d8:87:3e:30:1d:48:8a:e2:8a:ee:15:58:68: 6d:4a:c9:a8:96:fd:0b:2a:bd:bb:40:59:d5:2c:d1:38:13:8d: 6a:79:f4:6d:8f:88:3d:f5:06:02:27:ec:c6:64:ea:73:8e:f1: 57:4b:fd:9a:7e:18:d9:4b:ae:79:36:30:68:6b:21:05:ef:9a: 6c:81:ee:28:d8:8e:bf:a8:b4:2b:13:50:24:c1:e0:26:5a:b3: 8e:3c:40:97:80:d9:d8:92:38:d0:d4:df:c9:09:4d:90:45:94: 72:7c:95:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGMTkxMTAvBgNVBAUTKDhENjExRjJDRDczNzk0QUY4MDFDMUJGNjlEODg0ODA5 MTM4MEI0QTUwHhcNMjUxMTAzMDYxNzQ1WhcNMjUxMTEwMDYxNzQ1WjAYMRYwFAYD VQQDEw02OTA4NDkwOS0wOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D0aZ4XK0Aw7BT/WKSUzcdHx/kEp7Ek8VV9pG1fl/Nqgq+6h0YmSF3uIr9xO xEm/mdwc4i9+ZBQULBBw4Srkh0EEjh9oYrtkLux7i0WxDDo134tqpbHzzR43B520 LCW4O/8bpLKW0kmQ6PbEQ6xv4lPr615+OiyPGmOTIj2g5IlHpjfSxp6I7uoNAsAC izCI/DGi+Mn/EHt2+aFqoU/VH9auZ0gLlLRSgxmETAVkLbRy4lwkzLb1kxmXG8jz fT6bsbpLOF1NO3+ihiZXW4LsgZxIuDNXS2AVc9HMDOaXW2vZuY5y2Sx8OeHkJPMM c+pfXF9eSHz9mQP5sdxv65VqPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxA0HhE DwAQbG/cUk3Tkk9uIZYMMB8GA1UdIwQYMBaAFI1hHyzXN5SvgBwb9p2ISAkTgLSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkYxOS9EMjNDQjBCQUMx QUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xLLUFIQnYyblloSUNST0F0 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkYxOS9EMjNDQjBCQUMxQUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xL LUFIQnYyblloSUNST0F0S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBasMFgKOPum9rSY/8a4/My4DPzt2/bEIzY3j5jCAoBStKmrCUiz1xE eXerovoE2vxB1ILIC/P0eDTVZKCthzEE/9HwnCqurJUQWOi9/wdSXIXst6sWcvBd 7tsB4rEq4yRdfD+9xt18tXOFae2P6k/oMTmxIlVUGhV6021gP6n9RtTUPVCXs8eh GCTzpheCuAQP+1xJfdiHPjAdSIriiu4VWGhtSsmolv0LKr27QFnVLNE4E41qefRt j4g99QYCJ+zGZOpzjvFXS/2afhjZS655NjBoayEF75psge4o2I6/qLQrE1AkweAm WrOOPECXgNnYkjjQ1N/JCU2QRZRyfJUs -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:04 2025 by rpki-client