$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json) Hash identifier: H1ekHLR2g9PbNMhKZeHN2acEfYOB5rzYauOhqtuxYFI= Subject key identifier: F3:84:DF:B9:2E:27:2F:89:3F:E3:C5:7B:D4:0D:F7:C7:7E:59:13:63 Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft Manifest number: 06AD Signing time: Tue 04 Nov 2025 22:19:34 +0000 Manifest this update: Tue 04 Nov 2025 22:19:34 +0000 Manifest next update: Tue 11 Nov 2025 22:19:33 +0000 Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: RRJnVfwi1R/gvphbuqYm1hYPzVck6RNMpMsaYh94+AQ=) 2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: IYSv1L8CrFfVZhb7vVnKxPTFDHznaeEotmtw/x51wYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Validity Not Before: Nov 4 22:19:34 2025 GMT Not After : Nov 11 22:19:33 2025 GMT Subject: CN=690a7bf6-7bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4a:94:f4:dc:b6:93:6c:c1:81:6c:ab:51:21: c0:af:6b:ca:a8:3b:2b:42:db:93:99:81:c9:a9:db: 72:fd:6d:a1:64:bf:19:97:b0:e3:08:f8:2e:8d:b6: 98:09:45:da:27:c8:38:6c:e8:b9:01:d2:b6:c8:d6: 70:6c:50:fc:e0:2f:28:0b:9b:43:ba:ea:02:13:e2: 86:73:32:44:13:44:04:0e:a5:5d:c1:c0:c7:ea:7a: ff:90:e0:16:6d:b3:89:ff:93:43:fc:34:43:23:78: 4e:5c:5b:84:72:f6:ef:a1:41:44:87:57:83:02:2e: 8b:03:0d:5d:8d:bf:d6:e6:1b:33:23:3f:d2:aa:05: 22:dc:5c:03:ee:91:0f:7f:96:b2:0f:85:8a:08:a6: cd:48:a8:ee:22:17:07:c6:cd:68:01:60:20:e9:fe: 23:2b:90:fd:ea:7e:02:c9:4a:1e:38:48:34:ad:25: 1a:86:25:b1:9e:06:70:cd:55:24:1e:69:68:85:9d: 60:14:99:ad:95:3f:7d:4c:f9:ad:12:75:37:78:91: ef:4a:fd:73:d8:5e:92:1f:4e:11:7d:5e:10:f5:b1: 90:39:0a:bb:cb:a8:47:ce:6f:a9:fa:c4:a0:c1:8f: 7d:81:9e:18:1f:e4:26:3e:90:ef:5a:53:3f:dc:50: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:84:DF:B9:2E:27:2F:89:3F:E3:C5:7B:D4:0D:F7:C7:7E:59:13:63 X509v3 Authority Key Identifier: keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:45:7d:88:88:88:43:e6:b1:5b:b1:e2:c4:e7:8b:e7:be:d2: e6:f9:47:dc:82:b5:7f:0b:76:eb:85:aa:5c:ea:66:4a:d2:af: 21:46:6e:71:d6:e9:62:e7:fd:bf:82:88:c9:23:63:29:38:50: a4:1a:29:ac:6a:1c:c4:da:e2:a3:f9:6d:3a:7a:7b:1a:92:2d: bb:4b:92:96:1c:83:9b:46:a3:ff:cf:56:0a:03:fc:92:05:64: b7:81:9a:b2:62:3d:6f:35:89:ce:bd:d3:cc:fe:68:80:f8:2f: 6d:e8:39:1b:08:ea:a4:e8:14:50:6a:f2:f1:ea:2a:37:85:26: 70:66:d4:db:a1:ec:c8:4f:bb:87:90:9c:4e:93:fc:0a:1a:a3: f4:38:0c:f2:c7:3d:7c:35:c3:ad:81:25:b2:d3:e0:89:c2:f4: ab:19:6b:75:a1:ea:a9:8c:b9:06:86:75:82:43:a4:f1:da:69: 7d:60:18:9b:21:9d:d5:73:76:2f:a5:c4:40:e4:76:6a:70:27: e4:ed:c0:5d:ad:28:0b:f0:60:32:f4:fd:ad:41:e8:3d:bc:d9: f9:0a:53:67:07:cb:4a:dd:bf:4a:9f:01:a4:d6:ad:79:5d:ed: cb:cd:94:9b:15:df:e3:fe:e2:50:28:69:cb:03:b5:28:0d:f6: 02:40:35:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRCNTcxMTAvBgNVBAUTKDI1QjYxNzhCQTRGODZGRjBCNUYyNTUxNzgwOUJERjIw RDk0NjhFNjkwHhcNMjUxMTA0MjIxOTM0WhcNMjUxMTExMjIxOTMzWjAYMRYwFAYD VQQDEw02OTBhN2JmNi03YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UqU9Ny2k2zBgWyrUSHAr2vKqDsrQtuTmYHJqdty/W2hZL8Zl7DjCPgujbaY CUXaJ8g4bOi5AdK2yNZwbFD84C8oC5tDuuoCE+KGczJEE0QEDqVdwcDH6nr/kOAW bbOJ/5ND/DRDI3hOXFuEcvbvoUFEh1eDAi6LAw1djb/W5hszIz/SqgUi3FwD7pEP f5ayD4WKCKbNSKjuIhcHxs1oAWAg6f4jK5D96n4CyUoeOEg0rSUahiWxngZwzVUk HmlohZ1gFJmtlT99TPmtEnU3eJHvSv1z2F6SH04RfV4Q9bGQOQq7y6hHzm+p+sSg wY99gZ4YH+QmPpDvWlM/3FD9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOE37ku Jy+JP+PFe9QN98d+WRNjMB8GA1UdIwQYMBaAFCW2F4uk+G/wtfJVF4Cb3yDZRo5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEI1Ny84MzhDODkxNjgz NTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJfQzE4bFVYZ0p2ZklObEdq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0piWVhpNlQ0Yl9DMThsVVhnSnZmSU5sR2ptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEI1Ny84MzhDODkxNjgzNTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJf QzE4bFVYZ0p2ZklObEdqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGRX2IiIhD5rFbseLE54vnvtLm+UfcgrV/C3brhapc6mZK0q8hRm5x 1uli5/2/gojJI2MpOFCkGimsahzE2uKj+W06ensaki27S5KWHIObRqP/z1YKA/yS BWS3gZqyYj1vNYnOvdPM/miA+C9t6DkbCOqk6BRQavLx6io3hSZwZtTboezIT7uH kJxOk/wKGqP0OAzyxz18NcOtgSWy0+CJwvSrGWt1oeqpjLkGhnWCQ6Tx2ml9YBib IZ3Vc3YvpcRA5HZqcCfk7cBdrSgL8GAy9P2tQeg9vNn5ClNnB8tK3b9KnwGk1q15 Xe3LzZSbFd/j/uJQKGnLA7UoDfYCQDUx -----END CERTIFICATE-----Generated at Wed Nov 5 19:30:13 2025 by rpki-client