$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: agOEWpSvpjJtv7S3q9eNg6lK4OmK274l+GOATXchw5Q= Subject key identifier: 50:83:73:88:3E:F0:EE:3E:70:95:C1:3B:85:A9:20:83:DA:8F:5D:2B Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: F3 Signing time: Sat 01 Nov 2025 05:39:06 +0000 Manifest this update: Sat 01 Nov 2025 05:39:06 +0000 Manifest next update: Sat 08 Nov 2025 05:39:06 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: Nh6RK8WIhqnZbQIJggRWw0gGgfFGgcEVEY1HVXfnMlc=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: Q8jUoDfTBKkYt+wlmI66aJ+35Q4MifbD8LinqGUg/KY=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: KoaV0URvtmzdHrqA1z33gHV+eShaD03rJhOUSMjsP9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 05:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Nov 1 05:39:06 2025 GMT Not After : Nov 8 05:39:06 2025 GMT Subject: CN=69059cfa-73db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:fa:48:df:f5:d1:aa:f6:e6:89:c1:c9:c9: 77:1c:90:eb:14:a9:e6:d6:b1:a4:66:1d:9f:13:a5: a8:a6:a4:73:3d:17:0d:d9:8e:86:2e:80:59:84:aa: 0f:d3:2a:fb:e6:19:f9:40:49:6f:e5:1d:72:83:54: 3a:62:44:eb:0e:36:cf:0c:9c:dd:21:ae:ce:9e:1d: 03:ec:85:d2:d3:11:4f:5d:fa:e3:8e:d7:06:8d:5a: 33:8a:c1:bb:9e:c5:77:9a:59:b0:f7:0d:af:30:e0: bb:0d:b2:ff:37:cf:48:cb:17:cd:08:d3:fd:2d:22: cd:f9:b7:b3:dc:6e:ab:e7:59:5c:19:57:ba:0b:bf: 1c:ff:6c:5d:58:0c:f4:6a:84:82:7f:ef:6b:b5:f2: 62:34:3a:ed:7a:5a:47:6c:42:78:97:a2:fe:37:c0: ab:a3:43:27:27:f7:44:4e:e3:a3:00:e1:1d:03:3a: 72:42:37:38:c9:12:fa:60:e5:2b:dd:7a:83:23:7d: d6:be:c6:6e:c2:f5:1f:8e:96:09:38:ef:0b:f2:fe: 3f:ea:fa:e9:1f:70:2a:b7:b5:84:b0:0d:65:bf:d7: 3f:3a:e8:1e:75:9a:43:a8:f8:f8:f6:9f:ef:a4:b9: 54:87:e1:42:f3:99:af:9f:0a:39:4e:b3:6c:de:c1: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:83:73:88:3E:F0:EE:3E:70:95:C1:3B:85:A9:20:83:DA:8F:5D:2B X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f7:ab:31:1f:ad:ec:a5:49:0b:9e:cc:db:7a:3e:1b:11:11: ed:c3:0e:6d:ba:b3:65:42:f3:5c:9d:20:34:92:82:65:10:a4: 5e:12:ec:9c:79:c4:e8:5a:0f:35:77:60:0b:6a:33:e3:f4:b8: 26:f4:6d:fb:9d:86:9f:6c:b6:e3:f4:7b:ca:56:7f:38:39:80: 37:44:7d:3b:96:ab:e6:d3:dd:c5:48:96:73:a0:f5:99:78:b5: 39:ba:d9:29:f4:07:db:62:20:ad:5c:9a:26:46:1c:c8:2b:d5: 86:ca:bd:f8:f1:3b:db:57:ce:e1:73:3a:40:e9:8f:e7:e5:63: 23:5c:30:82:c0:52:51:20:e4:6f:2a:47:7c:39:57:f8:aa:8f: 47:fd:54:27:1b:1f:17:f3:a6:90:6b:04:0d:31:6c:1a:e0:ad: d0:14:7c:9a:7e:80:b5:c2:4f:12:21:9c:d1:9f:30:d3:e0:72: 7d:83:9b:4c:1f:eb:3d:a7:5e:e3:b4:8a:66:de:fe:71:49:d4: dc:c0:ed:57:77:03:01:c3:42:8d:dc:77:15:e2:23:ca:b5:e3: 04:f2:1a:53:71:20:9b:ac:71:03:8b:33:b5:1b:fc:6c:de:ed: 6e:aa:80:68:57:95:71:6f:0f:00:2b:60:f0:83:e5:3d:5c:73: 20:d8:f4:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUxMTAxMDUzOTA2WhcNMjUxMTA4MDUzOTA2WjAYMRYwFAYD VQQDEw02OTA1OWNmYS03M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAne/6SN/10ar25onBycl3HJDrFKnm1rGkZh2fE6WopqRzPRcN2Y6GLoBZhKoP 0yr75hn5QElv5R1yg1Q6YkTrDjbPDJzdIa7Onh0D7IXS0xFPXfrjjtcGjVozisG7 nsV3mlmw9w2vMOC7DbL/N89IyxfNCNP9LSLN+bez3G6r51lcGVe6C78c/2xdWAz0 aoSCf+9rtfJiNDrtelpHbEJ4l6L+N8Cro0MnJ/dETuOjAOEdAzpyQjc4yRL6YOUr 3XqDI33WvsZuwvUfjpYJOO8L8v4/6vrpH3Aqt7WEsA1lv9c/OugedZpDqPj49p/v pLlUh+FC85mvnwo5TrNs3sHNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCDc4g+ 8O4+cJXBO4WpIIPaj10rMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB96sxH63spUkLnszbej4bERHtww5turNlQvNcnSA0koJlEKReEuyc ecToWg81d2ALajPj9Lgm9G37nYafbLbj9HvKVn84OYA3RH07lqvm093FSJZzoPWZ eLU5utkp9AfbYiCtXJomRhzIK9WGyr348TvbV87hczpA6Y/n5WMjXDCCwFJRIORv Kkd8OVf4qo9H/VQnGx8X86aQawQNMWwa4K3QFHyafoC1wk8SIZzRnzDT4HJ9g5tM H+s9p17jtIpm3v5xSdTcwO1XdwMBw0KN3HcV4iPKteME8hpTcSCbrHEDizO1G/xs 3u1uqoBoV5Vxbw8AK2Dwg+U9XHMg2PSD -----END CERTIFICATE-----Generated at Sun Nov 2 05:35:12 2025 by rpki-client