$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: 3v+6aZmJS4iF/6GqxvTPlGIfWHJXOk1Gs9R6ON2G1J4= Subject key identifier: 3D:AD:49:8E:AC:93:15:D3:CB:04:0B:5E:87:FD:E0:47:EA:8D:52:61 Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 60 Signing time: Mon 03 Nov 2025 07:05:07 +0000 Manifest this update: Mon 03 Nov 2025 07:05:06 +0000 Manifest next update: Mon 10 Nov 2025 07:05:06 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: Ljq9QCPQ7tVf57Vepz/2C0lHyD2MsPCLVIYOweLR3bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Nov 3 07:05:06 2025 GMT Not After : Nov 10 07:05:06 2025 GMT Subject: CN=69085423-eb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:71:94:f2:68:4d:f1:1a:46:63:17:21:27: 06:19:ea:a3:8e:7c:ea:73:a6:ff:91:0b:8e:a8:99: 02:af:f9:a9:44:9f:79:99:82:1b:bd:a7:04:58:a9: 8f:0a:30:da:f4:35:45:2f:4b:f2:b8:3e:ee:6d:39: 72:6b:25:78:31:45:f8:95:3d:c9:89:d8:fd:f7:be: 30:eb:91:b4:36:ec:80:fe:4d:a1:25:f2:ff:b0:57: 69:51:15:cb:c4:f9:b3:c4:7e:30:cb:49:ed:38:4e: ac:8a:e0:58:12:e7:08:20:fc:3f:3c:f5:4a:a1:12: c2:e6:ef:58:91:cc:ea:b1:63:98:40:6b:70:85:b7: 70:bd:88:36:3f:1c:ff:9a:1f:64:cf:f3:2d:74:a9: 15:6e:25:8e:62:29:3e:00:f9:d1:54:53:3a:cf:e2: 50:70:ea:5c:33:b3:2a:60:42:54:53:c9:aa:5e:63: cb:8c:b0:9d:2c:eb:9d:bc:ef:00:2a:ad:1d:60:0b: 5b:d4:19:46:45:7a:51:2a:66:38:0c:09:d8:88:8e: a4:6d:fb:53:c1:02:c4:ad:72:b8:d4:bc:24:66:0b: 9c:b4:78:14:b1:31:22:a4:04:86:ab:51:01:15:6d: f7:38:53:14:8a:49:a2:5b:79:8c:8d:3d:c2:44:7d: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AD:49:8E:AC:93:15:D3:CB:04:0B:5E:87:FD:E0:47:EA:8D:52:61 X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:bf:2a:4a:d4:fe:b7:1c:0c:5c:26:e0:85:a5:14:1e:be:28: 6e:65:6f:b8:09:f8:c9:0f:41:03:08:0b:0c:f7:df:ff:fc:dd: bd:f6:5f:35:5e:e9:02:c4:91:82:69:3f:7c:82:ef:d9:11:b2: c4:a8:c4:43:21:b5:33:32:65:6d:0e:db:73:2e:1a:4f:8b:e0: 67:fe:44:28:34:6d:2a:9b:6c:1d:74:38:e3:d2:4e:db:0e:0f: 62:08:2a:d0:d0:e0:e7:7d:5e:bb:7f:64:6a:e4:ae:83:a7:ae: 52:0b:24:5c:a8:d5:93:e2:91:96:e8:14:cf:c0:7c:d4:03:ae: 8d:bd:5d:0a:c5:7b:1f:b8:b5:54:aa:c5:cc:75:96:29:75:fc: 09:08:da:11:74:9d:4d:a1:d2:0b:65:cd:c8:29:7e:8a:6c:b7: 89:e3:c2:c3:d5:99:eb:dd:bf:7c:b6:32:ee:fe:03:e9:81:3a: 8e:8d:1b:04:99:17:c0:aa:d9:44:98:75:0f:fc:84:fc:8e:87: a0:8a:7c:d0:c2:dd:ff:61:ce:8c:92:43:67:94:6b:3d:37:4b: ab:4f:49:9c:d8:7a:f8:97:9c:22:60:03:68:44:7d:00:dc:02: 21:65:b3:16:46:43:3b:37:af:cb:80:cd:1c:46:66:b3:b3:5e: 31:3c:45:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTExMDMwNzA1MDZaFw0yNTExMTAwNzA1MDZaMBgxFjAUBgNV BAMTDTY5MDg1NDIzLWViMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZCnGU8mhN8RpGYxchJwYZ6qOOfOpzpv+RC46omQKv+alEn3mZghu9pwRYqY8K MNr0NUUvS/K4Pu5tOXJrJXgxRfiVPcmJ2P33vjDrkbQ27ID+TaEl8v+wV2lRFcvE +bPEfjDLSe04TqyK4FgS5wgg/D889UqhEsLm71iRzOqxY5hAa3CFt3C9iDY/HP+a H2TP8y10qRVuJY5iKT4A+dFUUzrP4lBw6lwzsypgQlRTyapeY8uMsJ0s65287wAq rR1gC1vUGUZFelEqZjgMCdiIjqRt+1PBAsStcrjUvCRmC5y0eBSxMSKkBIarUQEV bfc4UxSKSaJbeYyNPcJEfda5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPa1JjqyT FdPLBAteh/3gR+qNUmEwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIi/KkrU/rccDFwm4IWlFB6+KG5lb7gJ+MkPQQMICwz33//83b32XzVe 6QLEkYJpP3yC79kRssSoxEMhtTMyZW0O23MuGk+L4Gf+RCg0bSqbbB10OOPSTtsO D2IIKtDQ4Od9Xrt/ZGrkroOnrlILJFyo1ZPikZboFM/AfNQDro29XQrFex+4tVSq xcx1lil1/AkI2hF0nU2h0gtlzcgpfopst4njwsPVmevdv3y2Mu7+A+mBOo6NGwSZ F8Cq2USYdQ/8hPyOh6CKfNDC3f9hzoySQ2eUaz03S6tPSZzYeviXnCJgA2hEfQDc AiFlsxZGQzs3r8uAzRxGZrOzXjE8RSg= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:16 2025 by rpki-client