$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft File: JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json) Hash identifier: QpyuaTOdjd6fcnBPeMT8Nn7Rszf6xXvRFPWARQMfqiA= Subject key identifier: BD:AE:3C:A8:67:A7:CF:A4:BC:42:FF:C4:FA:20:03:CA:A0:8F:11:28 Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Certificate serial: 2843 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft Manifest number: 2825 Signing time: Sun 02 Nov 2025 15:36:46 +0000 Manifest this update: Sun 02 Nov 2025 15:36:46 +0000 Manifest next update: Sun 09 Nov 2025 15:36:45 +0000 Files and hashes: 1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: YxaOsI4P0pGh0V93V3jWTd8w9alId3lFtR2bx2SfQJM=) 2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: 0S9GAzXdX8/eY+v1QihZwNwaaUy/f0ZCSclJYlMg6j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10307 (0x2843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Validity Not Before: Nov 2 15:36:46 2025 GMT Not After : Nov 9 15:36:45 2025 GMT Subject: CN=69077a8e-26e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:45:bb:4e:e4:48:29:79:5e:24:15:0d:bd: df:76:23:0a:4f:1f:7f:a9:30:14:91:a3:1c:28:1f: 12:1b:be:f4:f4:57:91:51:da:7c:0d:28:d7:b5:7a: 71:ab:cf:1f:7d:dd:d3:12:13:e2:f2:d2:99:fd:1b: 37:cb:13:f4:a5:6b:2c:39:4f:ae:99:d7:93:f1:4b: 4a:e6:d8:30:6c:bb:4b:9d:dd:c1:f3:39:c4:de:a6: a1:31:32:70:09:8d:ed:de:b3:28:ac:6e:30:4d:03: ee:39:a6:6b:80:c3:a0:e5:1d:6c:f1:5a:d2:30:a4: 4f:2f:bf:56:2f:9f:56:fc:7b:3f:6f:4a:bc:f6:96: 0d:f7:7d:22:7a:8d:20:da:8c:0b:96:a3:84:56:bf: 6e:dd:d3:9d:fb:50:8f:51:3f:4c:67:5c:16:38:9c: c1:0a:4c:27:c2:3c:3c:2b:71:1f:30:1a:a0:e6:76: be:65:83:5a:26:5b:cf:e6:5c:35:46:25:43:2d:33: 1a:4b:3f:25:ec:4d:82:fe:49:51:31:81:d0:c0:fd: 5d:85:b8:22:5b:fa:54:79:79:aa:af:26:8e:bc:59: 7c:09:50:df:6c:aa:48:13:d6:ed:86:76:b8:28:2e: b9:e3:8c:6c:ab:aa:dc:d1:ac:cb:43:a3:99:c7:f2: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:3C:A8:67:A7:CF:A4:BC:42:FF:C4:FA:20:03:CA:A0:8F:11:28 X509v3 Authority Key Identifier: keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:8a:92:45:63:0a:8a:68:8b:de:0f:e4:21:da:46:e9:07:0b: e7:6d:56:e1:1c:19:42:67:a8:81:c4:19:a2:30:6c:f4:6b:14: b6:11:ff:65:1c:06:af:f6:9e:7a:03:b6:52:5a:88:9e:6f:18: c9:97:90:12:f6:61:52:51:45:07:d6:97:1c:1f:60:8f:ad:b5: 95:bb:ca:4a:b8:f7:ed:02:15:a7:74:e3:d0:77:23:4c:0a:73: d0:da:b3:7c:fe:2c:51:d3:9b:39:2e:a7:bd:f9:e4:c4:22:f9: 46:f7:49:d3:3f:e1:3d:fe:fd:aa:8e:61:b0:e9:64:d9:df:29: 0e:41:3f:0a:9d:42:b0:12:19:48:18:93:76:07:22:09:07:c3: 08:90:8e:86:e5:06:9e:73:28:6e:68:e4:e2:08:96:09:66:ce: 6b:97:fe:97:85:ae:be:36:af:aa:c8:ca:99:a1:b1:9c:bd:3f: 07:9a:20:af:9c:9b:8e:c6:ee:66:5a:36:48:0f:58:07:11:11: 0b:79:eb:c8:92:86:98:87:cf:86:52:80:63:29:93:6b:24:ea: 36:90:0f:54:5b:c3:04:d0:ba:d5:14:c6:01:cb:b3:71:f4:17: 36:de:99:2f:5e:f3:2b:24:9d:69:37:1c:9e:92:cd:f8:8a:d3: 32:da:91:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC NkIyREM5N0EwHhcNMjUxMTAyMTUzNjQ2WhcNMjUxMTA5MTUzNjQ1WjAYMRYwFAYD VQQDEw02OTA3N2E4ZS0yNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YRFu07kSCl5XiQVDb3fdiMKTx9/qTAUkaMcKB8SG7709FeRUdp8DSjXtXpx q88ffd3TEhPi8tKZ/Rs3yxP0pWssOU+umdeT8UtK5tgwbLtLnd3B8znE3qahMTJw CY3t3rMorG4wTQPuOaZrgMOg5R1s8VrSMKRPL79WL59W/Hs/b0q89pYN930ieo0g 2owLlqOEVr9u3dOd+1CPUT9MZ1wWOJzBCkwnwjw8K3EfMBqg5na+ZYNaJlvP5lw1 RiVDLTMaSz8l7E2C/klRMYHQwP1dhbgiW/pUeXmqryaOvFl8CVDfbKpIE9bthna4 KC6544xsq6rc0azLQ6OZx/JMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2uPKhn p8+kvEL/xPogA8qgjxEoMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5 WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi8zMjg4QzMxMkEyRTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9w Yjl6ZXNqV214SU8yc3R5WG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgipJFYwqKaIveD+Qh2kbpBwvnbVbhHBlCZ6iBxBmiMGz0axS2Ef9l HAav9p56A7ZSWoiebxjJl5AS9mFSUUUH1pccH2CPrbWVu8pKuPftAhWndOPQdyNM CnPQ2rN8/ixR05s5Lqe9+eTEIvlG90nTP+E9/v2qjmGw6WTZ3ykOQT8KnUKwEhlI GJN2ByIJB8MIkI6G5QaecyhuaOTiCJYJZs5rl/6Xha6+Nq+qyMqZobGcvT8HmiCv nJuOxu5mWjZID1gHERELeevIkoaYh8+GUoBjKZNrJOo2kA9UW8ME0LrVFMYBy7Nx 9Bc23pkvXvMrJJ1pNxyeks34itMy2pHI -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:20 2025 by rpki-client