$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: Hbzk4X7tPgcVbwDYq6UyyLZul0b9QCJrDK22mJET8Ys= Subject key identifier: C8:8D:AF:92:BA:00:CB:29:6A:2C:F9:03:10:E2:04:5D:5D:FF:2F:6B Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 0859 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 12E4 Signing time: Sun 02 Nov 2025 19:31:00 +0000 Manifest this update: Sun 02 Nov 2025 19:31:00 +0000 Manifest next update: Sun 09 Nov 2025 19:31:00 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: S3Pjx8mUpVElNkl0UXBB8YQQ/lAsk3024r0GZAybsWA=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2137 (0x859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Nov 2 19:31:00 2025 GMT Not After : Nov 9 19:31:00 2025 GMT Subject: CN=6907b174-74c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:4f:f0:9a:92:39:1b:94:ee:d1:a4:9f:d5: 68:23:12:d9:97:15:ea:cd:41:cb:8a:0b:ac:5f:e5: 59:ea:0a:ba:55:97:cb:f0:3d:0b:a6:4f:d8:ce:76: cc:6b:b6:4c:41:dc:e3:d8:2e:e3:53:2b:6c:38:3c: ee:bc:9a:7b:d5:2c:75:c3:b0:e0:39:bb:d1:f1:eb: e6:07:7c:05:29:e3:72:44:80:c3:4c:8c:f4:64:2c: d1:89:2a:d7:de:4b:43:cf:bc:7b:7a:8a:a4:b5:a3: b7:ed:a7:04:44:cb:94:14:44:76:80:56:58:2b:db: f0:ef:41:05:e1:79:b2:1b:e2:4f:69:fe:cb:76:5a: 9b:13:12:e9:39:81:2b:07:6c:f9:c0:e5:dc:0d:df: 6a:a9:36:10:a0:f4:97:9c:83:85:4a:9c:9d:44:72: 58:2c:22:11:f9:17:b2:f0:fc:1f:b2:bf:1a:37:4c: 4c:9a:31:24:63:26:26:be:61:bc:a4:7c:18:c2:36: 1e:34:da:86:94:ba:af:4b:2c:3e:1a:0e:db:bd:9f: 16:40:67:e9:4c:24:8b:30:c0:58:c8:5a:4c:b1:3a: 1f:da:09:20:c9:1d:cb:24:f1:57:7d:74:40:6f:ac: 73:32:e8:d3:57:7e:b6:0b:44:f0:c2:b4:c3:27:9a: d4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8D:AF:92:BA:00:CB:29:6A:2C:F9:03:10:E2:04:5D:5D:FF:2F:6B X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ee:10:cd:ea:f1:31:35:bd:70:d5:37:06:dd:b6:45:33:98: 24:4a:f3:5e:92:db:bc:8d:e0:ad:af:e6:ba:0d:a7:02:61:2a: e6:0a:67:e9:ed:52:41:1f:f2:30:3b:33:62:d5:eb:69:cc:78: d5:5e:ce:25:3e:bc:3f:d6:7a:da:df:af:a9:b3:7a:33:07:92: db:fd:da:d7:e3:25:4e:b6:8e:cd:4a:7a:89:24:b3:e2:f6:68: c7:5a:c4:31:9b:6b:d0:e5:8f:de:c9:f4:69:32:1b:e6:f1:17: e4:17:f7:84:15:c9:e0:52:fc:b6:f2:8a:bd:40:19:9d:f7:fa: bc:c0:60:84:4a:d9:88:f6:7c:1b:48:c5:1b:1f:95:37:ca:41: ba:ad:b1:bf:50:a5:e5:31:bf:2a:83:9b:56:76:43:df:ab:9f: b3:b8:31:b8:5e:5a:75:05:50:08:32:72:56:d7:c4:6b:00:3b: d8:e9:37:40:82:16:e4:e4:3e:dc:2f:eb:e2:89:b4:8c:8b:61: 16:f0:f9:26:83:81:85:1b:86:8b:f9:6d:fa:0c:24:c3:fa:c4: d6:04:5d:75:58:73:09:d4:91:49:19:2f:37:f5:4d:df:85:74: fb:22:d0:3d:af:94:96:d1:41:0a:86:27:26:6c:ed:5c:40:6f: 7a:10:8e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUxMTAyMTkzMTAwWhcNMjUxMTA5MTkzMTAwWjAYMRYwFAYD VQQDEw02OTA3YjE3NC03NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oRP8JqSORuU7tGkn9VoIxLZlxXqzUHLigusX+VZ6gq6VZfL8D0Lpk/YznbM a7ZMQdzj2C7jUytsODzuvJp71Sx1w7DgObvR8evmB3wFKeNyRIDDTIz0ZCzRiSrX 3ktDz7x7eoqktaO37acERMuUFER2gFZYK9vw70EF4XmyG+JPaf7LdlqbExLpOYEr B2z5wOXcDd9qqTYQoPSXnIOFSpydRHJYLCIR+Rey8Pwfsr8aN0xMmjEkYyYmvmG8 pHwYwjYeNNqGlLqvSyw+Gg7bvZ8WQGfpTCSLMMBYyFpMsTof2gkgyR3LJPFXfXRA b6xzMujTV362C0TwwrTDJ5rU3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiNr5K6 AMspaiz5AxDiBF1d/y9rMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA67hDN6vExNb1w1TcG3bZFM5gkSvNektu8jeCtr+a6DacCYSrmCmfp 7VJBH/IwOzNi1etpzHjVXs4lPrw/1nra36+ps3ozB5Lb/drX4yVOto7NSnqJJLPi 9mjHWsQxm2vQ5Y/eyfRpMhvm8RfkF/eEFcngUvy28oq9QBmd9/q8wGCEStmI9nwb SMUbH5U3ykG6rbG/UKXlMb8qg5tWdkPfq5+zuDG4Xlp1BVAIMnJW18RrADvY6TdA ghbk5D7cL+viibSMi2EW8Pkmg4GFG4aL+W36DCTD+sTWBF11WHMJ1JFJGS839U3f hXT7ItA9r5SW0UEKhicmbO1cQG96EI42 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:45 2025 by rpki-client