$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: ExbbnfRb44ZZ4e6dO57ysgBwo5JAmacurNsL1YcKefY= Subject key identifier: F4:9F:05:57:8B:6B:D6:12:52:3A:A4:B5:70:FA:6E:08:1C:91:1D:70 Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 05DB Signing time: Sun 02 Nov 2025 22:59:57 +0000 Manifest this update: Sun 02 Nov 2025 22:59:56 +0000 Manifest next update: Sun 09 Nov 2025 22:59:56 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: jDifTls+AJnCdyKm0huWNDU2Ww8/5TmSK4Wx0wgxcvA=) 2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Nov 2 22:59:56 2025 GMT Not After : Nov 9 22:59:56 2025 GMT Subject: CN=6907e26c-d7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:2e:80:68:03:5e:a6:3d:c9:17:87:8e:9c: c7:45:b2:5b:9c:94:79:61:64:85:bf:91:42:56:d9: 0d:66:ab:8a:4e:8c:fc:d9:73:58:24:90:17:87:60: 6c:f5:34:70:92:f0:34:db:5d:52:2e:dd:8b:49:53: 06:7a:87:b0:bd:5c:ef:86:f5:c1:82:71:71:56:91: 31:e9:65:76:f8:e6:f9:d5:2a:e8:88:5e:d3:e2:1f: da:89:7a:57:aa:9f:a1:91:de:ae:99:11:ac:d3:46: 9c:47:ca:15:06:57:48:55:30:51:31:15:e0:ef:84: cd:69:81:6c:1d:ab:c7:ce:1e:5d:75:9c:4f:01:c6: c1:18:17:aa:5e:40:3e:90:6c:a7:82:06:db:46:fe: e1:2e:3b:24:52:ea:d5:8d:38:21:a1:e1:5a:88:2f: 20:e2:5a:73:40:c1:d5:39:b6:cf:58:87:40:96:cd: f5:0c:9e:64:a9:14:21:ea:f6:a7:b3:62:55:a3:c1: 4c:c6:de:4e:cc:22:8e:7e:4c:b5:8c:17:b1:12:84: de:6d:f5:92:cb:74:3b:52:83:3b:75:7c:78:2c:bf: d8:1d:06:df:4d:fd:37:03:b6:35:36:cc:39:d0:fc: a8:51:82:72:81:fd:5c:f2:eb:54:b5:9d:ec:1e:dd: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:05:57:8B:6B:D6:12:52:3A:A4:B5:70:FA:6E:08:1C:91:1D:70 X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5f:e5:9f:b7:77:ea:dc:3b:fa:9f:1d:e2:a3:a1:f9:52:92: 5e:6b:1c:50:83:95:67:17:84:f1:b9:5d:04:8f:a1:6e:f7:d3: 1e:99:b4:f2:e8:42:db:24:8d:80:88:3f:e5:8e:b7:cd:5b:67: 36:f4:dd:7d:96:3c:75:b4:4d:28:75:48:bf:72:60:1c:67:77: 60:f0:e3:6d:21:3c:7b:f1:8a:27:d7:24:64:87:13:b5:37:3a: 1d:1c:bd:dc:9a:3d:b5:75:bb:38:16:5b:c7:3e:fa:b1:99:d2: e1:86:72:f0:5c:e1:77:54:ee:8f:2b:24:77:ac:ee:b5:af:1f: 76:9c:08:b3:a3:49:1f:f2:b9:e5:e8:b3:67:7b:0e:2f:d9:2d: b7:81:85:bb:68:92:89:ae:a2:3b:77:2e:8e:a1:f8:c5:02:83: 4b:de:14:70:3d:af:98:2a:ca:ae:36:6a:b4:3d:0b:40:b5:5d: 91:c2:2a:a5:35:63:e9:37:81:43:d2:b9:35:a4:f0:d9:be:c2: 27:da:3d:23:d2:16:3a:b1:23:b0:2c:b5:ce:2e:76:de:e2:57: 02:aa:1e:56:f0:a9:7f:55:9c:0a:76:33:38:10:3a:70:11:cc: 24:88:a7:f5:62:93:a9:e6:30:20:51:f3:43:2f:e4:7c:68:d8: 80:45:64:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjUxMTAyMjI1OTU2WhcNMjUxMTA5MjI1OTU2WjAYMRYwFAYD VQQDEw02OTA3ZTI2Yy1kN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRcugGgDXqY9yReHjpzHRbJbnJR5YWSFv5FCVtkNZquKToz82XNYJJAXh2Bs 9TRwkvA0211SLt2LSVMGeoewvVzvhvXBgnFxVpEx6WV2+Ob51SroiF7T4h/aiXpX qp+hkd6umRGs00acR8oVBldIVTBRMRXg74TNaYFsHavHzh5ddZxPAcbBGBeqXkA+ kGynggbbRv7hLjskUurVjTghoeFaiC8g4lpzQMHVObbPWIdAls31DJ5kqRQh6van s2JVo8FMxt5OzCKOfky1jBexEoTebfWSy3Q7UoM7dXx4LL/YHQbfTf03A7Y1Nsw5 0PyoUYJygf1c8utUtZ3sHt0SAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSfBVeL a9YSUjqktXD6bggckR1wMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2X+Wft3fq3Dv6nx3io6H5UpJeaxxQg5VnF4TxuV0Ej6Fu99MembTy 6ELbJI2AiD/ljrfNW2c29N19ljx1tE0odUi/cmAcZ3dg8ONtITx78Yon1yRkhxO1 NzodHL3cmj21dbs4FlvHPvqxmdLhhnLwXOF3VO6PKyR3rO61rx92nAizo0kf8rnl 6LNnew4v2S23gYW7aJKJrqI7dy6OofjFAoNL3hRwPa+YKsquNmq0PQtAtV2Rwiql NWPpN4FD0rk1pPDZvsIn2j0j0hY6sSOwLLXOLnbe4lcCqh5W8Kl/VZwKdjM4EDpw EcwkiKf1YpOp5jAgUfNDL+R8aNiARWQP -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:33 2025 by rpki-client