$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: nEMSkb8n12ImPJPlaOVucFcB6qBTroD+tY543BRKO6Y= Subject key identifier: 12:B4:59:D2:39:D1:51:F8:6A:E4:02:29:6C:5E:1D:93:F3:4D:36:93 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 10AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 10A5 Signing time: Tue 04 Nov 2025 17:25:32 +0000 Manifest this update: Tue 04 Nov 2025 17:25:31 +0000 Manifest next update: Tue 11 Nov 2025 17:25:31 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: 2XaCdBLMVVoO9BZJQRLsr6jK7I74SMzSILgvntaxyTg=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Nov 4 17:25:31 2025 GMT Not After : Nov 11 17:25:31 2025 GMT Subject: CN=690a370c-8db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:68:f5:ca:7e:79:54:73:35:fe:2c:ab:36: 8f:b2:4b:90:fe:60:54:31:fe:a3:25:f5:e8:52:69: e2:b4:5d:14:c2:04:97:5b:13:59:ab:7d:c7:5b:99: e6:1f:d3:16:56:4e:c6:66:c9:4c:15:c2:86:fe:13: 20:c8:40:82:c4:ef:6e:78:e5:f6:94:a6:a6:eb:92: b3:71:f9:62:95:d6:fb:8f:f5:4c:45:b5:79:3d:4d: 27:9a:d9:e3:75:9b:19:aa:f6:ab:46:71:4e:a2:63: 88:76:0f:d3:51:59:d5:70:d1:62:2c:59:62:e4:59: 1e:da:70:6a:85:c9:7b:49:60:de:bb:42:0d:4f:44: 3d:5a:8c:68:3c:a2:c8:c1:30:57:f9:bd:bb:bf:89: e0:97:9f:8f:4c:6a:15:cf:3c:84:cc:55:85:38:86: 2e:a8:ba:6e:81:11:b2:67:b8:f6:df:41:28:1b:66: b7:6b:55:0c:20:8b:85:90:d3:90:f5:b7:50:7e:23: 8a:6c:8d:15:e4:b2:27:7a:d0:c0:4b:b6:b2:35:9c: c6:cf:7b:42:b5:3a:30:30:21:c7:8e:2b:c5:c5:b3: db:54:8d:e1:e2:5f:5c:65:b4:54:13:61:15:06:69: 63:5d:2f:f6:2c:58:e0:54:99:b4:d9:0f:c5:26:91: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B4:59:D2:39:D1:51:F8:6A:E4:02:29:6C:5E:1D:93:F3:4D:36:93 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2c:27:aa:fa:b8:02:f2:87:4a:5a:97:be:0c:87:30:67:8a: 91:7f:89:91:77:45:01:05:c5:4a:a6:93:8e:88:5e:df:dc:7f: 57:33:64:16:2e:f4:97:66:c2:15:c7:0d:85:ea:02:7e:cd:e9: 33:76:a0:1e:c2:c7:af:36:eb:a9:6e:f1:86:e2:78:c5:9f:7a: b3:ca:fc:15:8e:bc:5e:5f:0d:d1:40:7c:b6:10:68:f2:7c:bb: ca:41:62:0d:78:1a:f2:db:88:45:7e:4a:f8:e0:0a:8b:a6:db: e1:84:f5:7f:e1:14:e7:bb:c2:e4:f6:b5:95:43:f9:72:60:41: 4f:e6:92:19:22:df:4c:5e:21:98:c2:e6:f7:f1:26:28:98:05: 91:55:40:94:b2:78:76:7d:53:dc:eb:10:a0:33:27:c9:02:7e: bb:7a:c7:fa:87:fe:78:2e:da:2e:6a:92:e7:fe:79:9e:fc:3e: ed:ca:4f:70:e9:6a:4d:25:7b:79:4b:63:17:c9:79:5f:dd:f7: c5:cd:93:52:df:94:5f:cf:15:5c:3c:91:77:15:be:b9:d7:06: 9a:09:ef:c4:73:dc:7e:ec:90:6d:f7:8c:d1:17:f8:ba:e6:a4: ac:03:50:31:2a:f9:a6:4b:a1:f2:b6:58:2c:87:47:a5:47:e2: d5:78:79:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUxMTA0MTcyNTMxWhcNMjUxMTExMTcyNTMxWjAYMRYwFAYD VQQDEw02OTBhMzcwYy04ZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVdo9cp+eVRzNf4sqzaPskuQ/mBUMf6jJfXoUmnitF0UwgSXWxNZq33HW5nm H9MWVk7GZslMFcKG/hMgyECCxO9ueOX2lKam65Kzcflildb7j/VMRbV5PU0nmtnj dZsZqvarRnFOomOIdg/TUVnVcNFiLFli5Fke2nBqhcl7SWDeu0INT0Q9WoxoPKLI wTBX+b27v4ngl5+PTGoVzzyEzFWFOIYuqLpugRGyZ7j230EoG2a3a1UMIIuFkNOQ 9bdQfiOKbI0V5LInetDAS7ayNZzGz3tCtTowMCHHjivFxbPbVI3h4l9cZbRUE2EV BmljXS/2LFjgVJm02Q/FJpHttwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBK0WdI5 0VH4auQCKWxeHZPzTTaTMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDLCeq+rgC8odKWpe+DIcwZ4qRf4mRd0UBBcVKppOOiF7f3H9XM2QW LvSXZsIVxw2F6gJ+zekzdqAewsevNuupbvGG4njFn3qzyvwVjrxeXw3RQHy2EGjy fLvKQWINeBry24hFfkr44AqLptvhhPV/4RTnu8Lk9rWVQ/lyYEFP5pIZIt9MXiGY wub38SYomAWRVUCUsnh2fVPc6xCgMyfJAn67esf6h/54LtouapLn/nme/D7tyk9w 6WpNJXt5S2MXyXlf3ffFzZNS35RfzxVcPJF3Fb651waaCe/Ec9x+7JBt94zRF/i6 5qSsA1AxKvmmS6Hytlgsh0elR+LVeHla -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:00 2025 by rpki-client