$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: XDoMfejtN529pjgp/TNNAGJrNfWk4RXhpbI9RUAC5x8= Subject key identifier: D5:78:87:67:4C:A1:D0:E9:41:86:C8:16:16:1D:B9:6F:2D:F0:B5:AC Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 0153 Signing time: Wed 05 Nov 2025 04:22:41 +0000 Manifest this update: Wed 05 Nov 2025 04:22:41 +0000 Manifest next update: Wed 12 Nov 2025 04:22:41 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: GJyaV7S6zz/RB+mFMsDNZ9+r+/L+CfCpZkrANKI2x14=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Nov 5 04:22:41 2025 GMT Not After : Nov 12 04:22:41 2025 GMT Subject: CN=690ad111-8924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:9c:ab:27:04:c2:dc:b9:ee:0d:9e:30:43: 74:c1:53:11:76:b0:d2:f8:26:42:52:53:10:19:c4: 5e:75:2e:64:3f:ff:ee:dd:8b:25:91:3d:06:90:8a: f1:74:6a:6d:b2:61:0f:29:db:80:96:0d:ca:4e:e4: f0:05:0f:e4:35:aa:1c:0a:8c:86:6a:2c:45:20:df: 08:f8:cb:03:56:e4:2a:ea:88:96:5d:f5:e5:ea:d3: 39:fa:73:7c:7f:5f:72:c6:fe:9e:19:14:c6:05:84: ad:d1:a2:6b:36:f9:0e:d2:84:8f:dd:26:6a:a3:7a: ac:04:2b:ca:53:23:73:12:02:ec:22:1f:dc:f5:48: d1:1a:6b:0e:26:6d:57:f9:99:f2:9c:55:66:3a:60: d6:5a:e8:82:94:72:a4:cd:78:ed:ca:db:a7:e9:57: 81:5a:6b:76:24:70:14:7d:03:14:e5:05:3d:72:9d: 3a:09:90:dc:8a:27:2c:58:3c:1a:a1:a7:c2:6e:20: 02:ce:c1:de:32:b9:0b:1e:56:cd:0c:96:38:fb:d5: de:f5:c6:f4:5e:34:83:5a:2f:e5:4b:2e:4e:f6:01: ea:38:35:71:6f:b4:26:b7:f7:24:96:ad:ea:59:9d: a9:41:b2:16:84:b2:ad:f3:8e:88:e8:f6:3f:c7:55: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:78:87:67:4C:A1:D0:E9:41:86:C8:16:16:1D:B9:6F:2D:F0:B5:AC X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:03:7b:4c:f6:ac:7c:b5:8e:e0:58:5f:fb:93:75:10:4d:3a: 92:05:7c:f6:85:c1:ab:f5:9d:2c:5c:2e:5f:52:42:d7:58:fa: 06:ce:0a:db:93:1d:55:a6:b6:79:79:10:ea:d5:c0:60:09:d6: 8e:8c:16:5f:55:19:3f:9e:ca:92:92:6a:35:6c:53:7b:0c:11: 2e:14:ae:e3:85:71:3f:e9:e4:c5:50:ee:11:6e:69:da:e6:7c: c1:87:55:7a:98:0e:33:a0:f1:d0:c6:32:4b:ad:da:0c:ac:a7: d9:37:7c:f1:5f:0b:fe:68:f0:57:93:1e:90:7e:87:aa:8d:52: f8:e8:32:8f:a6:9d:2e:6a:06:74:cf:e4:27:36:aa:8f:02:65: 74:fb:38:61:7f:fd:3a:65:6d:0f:40:c8:14:97:e4:aa:37:59: 21:e8:db:5c:c7:8e:17:6e:30:21:14:05:73:6f:2e:89:99:92: 87:13:6f:a2:6c:fe:68:45:ce:83:e9:2d:d0:94:b1:11:b0:4c: a1:b0:37:0f:ed:70:09:f3:fa:c2:34:e2:4c:8d:f2:88:59:7a: 69:41:93:9a:b3:bd:ac:f2:49:94:d8:f5:a9:fb:0a:e0:95:59: a8:17:f8:c0:25:79:95:18:23:f9:68:a7:83:af:79:b2:37:e0: d1:4a:33:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUxMTA1MDQyMjQxWhcNMjUxMTEyMDQyMjQxWjAYMRYwFAYD VQQDEw02OTBhZDExMS04OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN6cqycEwty57g2eMEN0wVMRdrDS+CZCUlMQGcRedS5kP//u3YslkT0GkIrx dGptsmEPKduAlg3KTuTwBQ/kNaocCoyGaixFIN8I+MsDVuQq6oiWXfXl6tM5+nN8 f19yxv6eGRTGBYSt0aJrNvkO0oSP3SZqo3qsBCvKUyNzEgLsIh/c9UjRGmsOJm1X +ZnynFVmOmDWWuiClHKkzXjtytun6VeBWmt2JHAUfQMU5QU9cp06CZDciicsWDwa oafCbiACzsHeMrkLHlbNDJY4+9Xe9cb0XjSDWi/lSy5O9gHqODVxb7Qmt/cklq3q WZ2pQbIWhLKt846I6PY/x1VdMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV4h2dM odDpQYbIFhYduW8t8LWsMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrA3tM9qx8tY7gWF/7k3UQTTqSBXz2hcGr9Z0sXC5fUkLXWPoGzgrb kx1VprZ5eRDq1cBgCdaOjBZfVRk/nsqSkmo1bFN7DBEuFK7jhXE/6eTFUO4Rbmna 5nzBh1V6mA4zoPHQxjJLrdoMrKfZN3zxXwv+aPBXkx6QfoeqjVL46DKPpp0uagZ0 z+QnNqqPAmV0+zhhf/06ZW0PQMgUl+SqN1kh6Ntcx44XbjAhFAVzby6JmZKHE2+i bP5oRc6D6S3QlLERsEyhsDcP7XAJ8/rCNOJMjfKIWXppQZOas72s8kmU2PWp+wrg lVmoF/jAJXmVGCP5aKeDr3myN+DRSjNT -----END CERTIFICATE-----Generated at Wed Nov 5 16:58:06 2025 by rpki-client