$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: rtXXbpIeTJr+MnaPeU0hmqUURTDPiZdHvg2dNz9iH9U= Subject key identifier: 49:C4:2A:27:4D:5B:9B:A4:15:CB:62:66:CD:05:BA:57:08:9D:91:A8 Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 185B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 183E Signing time: Tue 04 Nov 2025 16:37:38 +0000 Manifest this update: Tue 04 Nov 2025 16:37:38 +0000 Manifest next update: Tue 11 Nov 2025 16:37:38 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: tvtde6Sf9IHo3EMoOM1XS/jRewLdgvJyiMCjI1DGC68=) 2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: kY7WrwiPhs1fDNCyRkQ41kcloEeYNo1b3npHenwsZo8=) 3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: vQNKqM+IPJTV8w/FcMbZHdV0h0wCR5wUymZdMLOlrMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6235 (0x185b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: Nov 4 16:37:38 2025 GMT Not After : Nov 11 16:37:38 2025 GMT Subject: CN=690a2bd2-bd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:43:35:e4:7c:b3:a6:09:8b:7e:91:9a:de: 04:ee:dd:f8:94:17:79:84:57:c1:f9:b3:24:c5:c4: dc:2b:83:b4:91:02:5d:2c:32:1a:9f:53:8f:2f:92: b3:31:fd:03:50:1a:9a:57:8d:12:a2:6d:cd:2e:7d: ab:05:19:7c:26:e2:44:90:9b:dd:a0:cc:9e:1f:3a: 5e:0c:e1:91:98:06:f3:ae:39:f6:bf:98:bd:e4:97: 49:40:1a:a5:04:c2:6d:f4:74:c8:8b:1a:da:4f:d2: 4b:7d:21:20:59:cf:cb:86:6c:1c:bb:80:1d:75:5a: 0d:d7:2d:0b:6b:63:99:a0:3c:ec:b6:49:84:e5:4c: 96:e9:14:01:95:44:ea:32:fa:87:c8:db:ff:50:a7: 7b:7f:f3:7f:f8:7c:23:74:4d:62:19:ac:dc:84:27: 11:16:c8:9d:e2:65:e8:99:68:e2:41:43:ff:2f:0d: b5:28:2b:aa:f1:f2:0d:93:a5:85:ce:48:61:a5:34: c1:2d:97:9a:78:2f:ba:2c:9e:38:d5:eb:24:75:ab: ef:af:e0:39:42:98:bd:35:a2:f1:17:6c:87:f7:22: 8c:b9:b7:34:8a:3b:d1:a7:f7:2f:ff:86:d2:12:f8: 98:08:56:c1:42:8a:0f:c0:89:b2:c8:7e:da:e9:9c: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:2A:27:4D:5B:9B:A4:15:CB:62:66:CD:05:BA:57:08:9D:91:A8 X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3e:7a:61:4f:8d:63:29:f5:80:d6:15:9e:d9:9a:93:16:cb: 23:c9:fb:f5:3d:9c:db:f8:f5:66:19:05:44:58:83:12:66:6c: 06:46:9d:13:d6:8f:44:e2:3d:89:23:41:3d:0a:33:c9:31:88: 51:2d:45:ca:c1:af:33:1e:b7:bc:db:7a:70:54:92:c9:44:a2: 70:fe:a5:d0:c0:15:07:f5:c2:f4:b5:9c:8d:ba:3d:b3:b1:ee: 0a:ae:6d:b0:aa:ad:24:fa:02:7e:f8:5c:8c:4f:02:53:3b:c0: 1d:3c:d7:72:4d:55:f9:49:1f:dc:4f:9d:d3:5c:e9:8d:8e:59: 64:89:76:30:38:22:92:2e:9f:c6:3c:fe:32:79:7b:c5:44:4b: 9f:2a:e4:d0:c9:95:cf:25:10:27:c0:c7:a5:2e:1b:6b:ff:df: 2c:7f:68:32:a2:76:ba:7a:e0:6f:ed:e3:1f:12:6e:b1:a7:a3: 57:1d:d7:b9:c4:19:bc:67:b4:35:30:db:ca:11:82:f6:86:2b: 15:2a:44:dd:14:5c:23:c2:81:2c:af:74:42:0e:7b:4d:fc:f2: 04:8b:1e:05:dc:6d:62:e9:9a:ae:f1:7c:11:fc:71:a9:05:d3: b5:5f:0e:75:85:6b:3b:6f:8e:04:80:50:ec:69:2c:68:bc:35: 43:04:fe:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjUxMTA0MTYzNzM4WhcNMjUxMTExMTYzNzM4WjAYMRYwFAYD VQQDEw02OTBhMmJkMi1iZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOpDNeR8s6YJi36Rmt4E7t34lBd5hFfB+bMkxcTcK4O0kQJdLDIan1OPL5Kz Mf0DUBqaV40Som3NLn2rBRl8JuJEkJvdoMyeHzpeDOGRmAbzrjn2v5i95JdJQBql BMJt9HTIixraT9JLfSEgWc/Lhmwcu4AddVoN1y0La2OZoDzstkmE5UyW6RQBlUTq MvqHyNv/UKd7f/N/+HwjdE1iGazchCcRFsid4mXomWjiQUP/Lw21KCuq8fINk6WF zkhhpTTBLZeaeC+6LJ441eskdavvr+A5Qpi9NaLxF2yH9yKMubc0ijvRp/cv/4bS EviYCFbBQooPwImyyH7a6ZzjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnEKidN W5ukFctiZs0FulcInZGoMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7PnphT41jKfWA1hWe2ZqTFssjyfv1PZzb+PVmGQVEWIMSZmwGRp0T 1o9E4j2JI0E9CjPJMYhRLUXKwa8zHre823pwVJLJRKJw/qXQwBUH9cL0tZyNuj2z se4Krm2wqq0k+gJ++FyMTwJTO8AdPNdyTVX5SR/cT53TXOmNjllkiXYwOCKSLp/G PP4yeXvFREufKuTQyZXPJRAnwMelLhtr/98sf2gyona6euBv7eMfEm6xp6NXHde5 xBm8Z7Q1MNvKEYL2hisVKkTdFFwjwoEsr3RCDntN/PIEix4F3G1i6Zqu8XwR/HGp BdO1Xw51hWs7b44EgFDsaSxovDVDBP6L -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:45 2025 by rpki-client