$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json) Hash identifier: 5oNyrDZQqa1849qh2Btc3HqS/9foUJk0b4oLETEBSM0= Subject key identifier: 69:A6:EC:AE:1C:E0:5D:6D:FA:CD:E4:D9:2E:6F:9C:6D:B5:10:96:C9 Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 2546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft Manifest number: 2530 Signing time: Tue 04 Nov 2025 15:49:53 +0000 Manifest this update: Tue 04 Nov 2025 15:49:53 +0000 Manifest next update: Tue 11 Nov 2025 15:49:53 +0000 Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: h++UnwfxTQ2fUBJPlzvzd8p1z//iqonX43V/PIi+7+4=) 2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: N5Vn59/DXOfi3X7rqOdzQLvOw6/oh8X23e/dgbXYsyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9542 (0x2546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: Nov 4 15:49:53 2025 GMT Not After : Nov 11 15:49:53 2025 GMT Subject: CN=690a20a1-cce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:c7:5a:f2:8b:67:26:d4:c2:ab:40:6c:c1: 97:fe:b8:c5:5f:43:8e:ec:bb:7a:49:e7:9e:db:cd: d3:ad:8f:f0:e3:ce:48:21:e4:d1:b5:1d:5f:82:da: 86:a4:6b:74:54:bc:1d:c1:ec:f7:3d:9e:89:27:3d: 21:24:97:66:57:fa:07:2c:af:ae:47:a6:09:ef:d9: 68:e6:30:44:ba:f5:e1:0a:46:af:b6:88:ab:f1:82: 68:f2:ea:ce:a7:4b:6d:3e:38:d5:df:c0:20:bd:8c: 07:ae:9e:b9:cd:5e:16:6c:62:3c:6d:fb:08:43:f0: d0:5e:8f:a9:02:4a:0d:ef:b5:84:a6:10:93:c7:a1: 02:ed:a2:55:4a:64:99:61:9e:f2:e5:16:22:46:b7: a6:02:b6:0a:4c:20:88:87:35:09:9e:a1:82:89:c2: d7:a5:74:6f:f9:59:fe:78:f5:31:2d:ed:5d:fc:13: d3:50:f5:9d:76:c8:ce:bb:fa:2f:74:8f:44:90:33: 47:2e:42:07:77:ed:97:3a:bd:7c:78:7e:f0:6b:04: 78:7b:9a:3f:f9:74:f2:eb:3e:9e:38:ba:f2:1b:92: 6a:2e:86:2d:49:6a:bc:d0:c5:27:30:51:2a:f5:ee: 66:24:0e:dc:c3:a1:8c:b6:78:c3:a2:b4:81:4e:97: cb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A6:EC:AE:1C:E0:5D:6D:FA:CD:E4:D9:2E:6F:9C:6D:B5:10:96:C9 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:43:05:ae:bc:85:da:64:3d:31:86:37:4c:18:8c:15:dc:aa: d2:43:18:3e:76:83:55:38:2f:08:9d:b4:8f:74:0c:be:d4:e4: 8b:90:52:c4:c6:4a:b2:e9:87:af:a1:a0:55:98:e9:7c:24:3a: b8:2b:64:85:ad:80:59:7a:ee:12:3e:54:7f:0e:00:ae:f3:c1: 80:e3:f3:48:a2:64:7e:56:de:0f:71:9d:a5:25:1e:59:88:3a: 7a:90:c9:2f:4a:12:09:ed:f4:33:64:1b:7a:5d:0a:97:4d:0c: ac:97:7a:2a:b3:3b:50:42:5f:35:e5:6f:64:44:9e:7d:82:2e: 13:64:61:04:60:81:7f:97:22:84:48:59:6e:43:35:58:0c:af: 39:fc:e3:ce:64:78:a1:b4:99:37:02:56:e8:1f:d2:96:85:5f: b8:ce:13:25:a7:65:fd:a9:f7:66:ea:25:b6:e3:31:97:a5:9d: 79:48:e3:80:8a:d3:1a:d1:c3:b0:7a:d9:a8:8f:be:7a:5e:a9: a4:7c:0d:9c:5e:e9:f1:a7:0d:fe:a0:ff:c1:94:90:0f:1f:30: 93:6e:89:8b:34:37:56:7a:54:b6:ed:16:d0:0c:c3:30:40:2f: 3b:7f:09:86:6c:34:38:5b:ae:53:ab:1d:16:d3:70:1d:e4:f0: f7:39:73:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjUxMTA0MTU0OTUzWhcNMjUxMTExMTU0OTUzWjAYMRYwFAYD VQQDEw02OTBhMjBhMS1jY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/XHWvKLZybUwqtAbMGX/rjFX0OO7Lt6Seee283TrY/w485IIeTRtR1fgtqG pGt0VLwdwez3PZ6JJz0hJJdmV/oHLK+uR6YJ79lo5jBEuvXhCkavtoir8YJo8urO p0ttPjjV38AgvYwHrp65zV4WbGI8bfsIQ/DQXo+pAkoN77WEphCTx6EC7aJVSmSZ YZ7y5RYiRremArYKTCCIhzUJnqGCicLXpXRv+Vn+ePUxLe1d/BPTUPWddsjOu/ov dI9EkDNHLkIHd+2XOr18eH7wawR4e5o/+XTy6z6eOLryG5JqLoYtSWq80MUnMFEq 9e5mJA7cw6GMtnjDorSBTpfLmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmm7K4c 4F1t+s3k2S5vnG21EJbJMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V VkhJRHZRVVdqTU5rblZaTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7QwWuvIXaZD0xhjdMGIwV3KrSQxg+doNVOC8InbSPdAy+1OSLkFLE xkqy6YevoaBVmOl8JDq4K2SFrYBZeu4SPlR/DgCu88GA4/NIomR+Vt4PcZ2lJR5Z iDp6kMkvShIJ7fQzZBt6XQqXTQysl3oqsztQQl815W9kRJ59gi4TZGEEYIF/lyKE SFluQzVYDK85/OPOZHihtJk3AlboH9KWhV+4zhMlp2X9qfdm6iW24zGXpZ15SOOA itMa0cOwetmoj756XqmkfA2cXunxpw3+oP/BlJAPHzCTbomLNDdWelS27RbQDMMw QC87fwmGbDQ4W65Tqx0W03Ad5PD3OXMZ -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:10 2025 by rpki-client