$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json) Hash identifier: dAApJa8M+TEBVmj8hzLwXWt8XHqhmO/vfwWuY+nfyKk= Subject key identifier: A9:37:4F:06:42:5B:38:31:09:2D:0C:D4:BE:EF:B5:C7:95:F2:94:5E Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft Manifest number: AC Signing time: Mon 03 Nov 2025 06:08:58 +0000 Manifest this update: Mon 03 Nov 2025 06:08:58 +0000 Manifest next update: Mon 10 Nov 2025 06:08:58 +0000 Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: TUsUqvBtj8mo1itSZldCziivs9rwD5eaflzJWeYjjr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Validity Not Before: Nov 3 06:08:58 2025 GMT Not After : Nov 10 06:08:58 2025 GMT Subject: CN=690846fa-a19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:cc:c2:cc:11:1a:5d:a2:7d:ab:88:6c:4e: e8:cd:1a:f7:16:22:d6:fb:f3:b4:36:64:e1:f7:20: d7:70:43:4e:68:11:6a:ea:a3:9d:fa:d3:a2:e6:6e: 03:cd:f9:d7:40:6d:e0:63:36:96:ea:e1:db:16:cf: 43:67:84:32:60:d8:3c:37:d9:1e:19:21:f4:3a:b4: 24:3f:74:90:5d:09:2f:3b:9c:9a:7e:44:61:d3:de: b3:bb:46:00:26:e0:67:88:4f:8f:aa:34:33:fd:1b: 50:7c:f7:55:49:f9:48:fa:fc:09:f4:8d:32:3d:94: 53:56:3f:ff:51:ce:c7:60:3b:b5:51:7f:69:be:49: 98:c7:16:56:eb:3c:fb:c3:0d:d1:cd:d1:d8:09:bd: 7f:e9:a2:b9:16:88:6f:10:df:9a:bf:83:37:01:7b: 1d:8c:59:c2:5b:e7:67:1c:50:6b:c6:68:64:ae:76: 70:d1:32:15:8b:35:8e:85:a6:fb:28:60:75:08:09: 60:1f:f2:56:88:a2:61:3a:65:87:c5:24:de:81:a4: b8:29:e8:dd:a8:91:ab:7b:bb:67:c7:64:33:44:97: 78:e8:5d:d2:ef:7a:30:2e:96:95:0d:c9:3e:52:90: e2:1e:47:e8:9f:2f:39:91:60:f1:06:79:96:b9:ea: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:37:4F:06:42:5B:38:31:09:2D:0C:D4:BE:EF:B5:C7:95:F2:94:5E X509v3 Authority Key Identifier: keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d3:75:46:69:fd:ec:4c:2e:d5:91:1c:03:b0:1a:6a:86:4d: 4c:9e:cf:f2:2b:5e:7f:f8:3a:f0:42:28:e0:a9:71:37:f2:e4: a6:68:4f:31:e8:c6:76:54:58:a5:5f:8a:5d:23:31:24:80:d8: b5:a2:45:81:3d:96:3f:9c:8e:90:bc:62:05:5b:28:0c:8e:2e: 90:1c:87:f4:e2:c2:d4:7f:20:2c:b3:a0:ab:cd:3b:57:0c:a2: e8:80:5f:35:a9:c3:09:5e:1c:84:eb:8f:39:37:32:5b:ca:cc: 41:50:31:50:4c:87:f2:54:f1:ab:c4:17:d5:9d:ed:45:e1:4d: 63:72:92:ef:95:24:5c:3a:4e:8d:5e:9d:76:92:63:85:a2:7e: 25:63:74:8b:51:a8:64:72:92:76:c7:75:1e:23:c7:45:16:6b: 8f:92:d9:73:7d:15:e4:34:46:99:14:45:0d:0d:49:11:fc:80: 7e:69:c3:94:cf:22:63:ff:46:b2:f3:95:61:29:4a:20:8c:cf: 2c:05:00:3d:95:36:39:18:89:66:7d:22:20:d5:f0:72:45:89: 78:d5:de:1b:c4:cf:59:5e:51:59:8f:23:1d:52:11:94:d2:4a: 7c:60:e2:3b:77:4e:9a:25:52:a8:3b:f5:75:39:8f:d4:25:cb: eb:30:6f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzNjMxMTAvBgNVBAUTKDhFMUNDMURCRkFCRDQwQjY0MTRDMjNFM0RGRDg5MTQ1 NTI3REYzMjEwHhcNMjUxMTAzMDYwODU4WhcNMjUxMTEwMDYwODU4WjAYMRYwFAYD VQQDEw02OTA4NDZmYS1hMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoS/MwswRGl2ifauIbE7ozRr3FiLW+/O0NmTh9yDXcENOaBFq6qOd+tOi5m4D zfnXQG3gYzaW6uHbFs9DZ4QyYNg8N9keGSH0OrQkP3SQXQkvO5yafkRh096zu0YA JuBniE+PqjQz/RtQfPdVSflI+vwJ9I0yPZRTVj//Uc7HYDu1UX9pvkmYxxZW6zz7 ww3RzdHYCb1/6aK5FohvEN+av4M3AXsdjFnCW+dnHFBrxmhkrnZw0TIVizWOhab7 KGB1CAlgH/JWiKJhOmWHxSTegaS4KejdqJGre7tnx2QzRJd46F3S73owLpaVDck+ UpDiHkfony85kWDxBnmWueozMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk3TwZC WzgxCS0M1L7vtceV8pReMB8GA1UdIwQYMBaAFI4cwdv6vUC2QUwj49/YkUVSffMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CRDg2M0Q3MkFG QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFMWkJUQ1BqMzlpUlJWSjk4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM2My9CRDg2M0Q3MkFGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFM WkJUQ1BqMzlpUlJWSjk4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/03VGaf3sTC7VkRwDsBpqhk1Mns/yK15/+DrwQijgqXE38uSmaE8x 6MZ2VFilX4pdIzEkgNi1okWBPZY/nI6QvGIFWygMji6QHIf04sLUfyAss6CrzTtX DKLogF81qcMJXhyE6485NzJbysxBUDFQTIfyVPGrxBfVne1F4U1jcpLvlSRcOk6N Xp12kmOFon4lY3SLUahkcpJ2x3UeI8dFFmuPktlzfRXkNEaZFEUNDUkR/IB+acOU zyJj/0ay85VhKUogjM8sBQA9lTY5GIlmfSIg1fByRYl41d4bxM9ZXlFZjyMdUhGU 0kp8YOI7d06aJVKoO/V1OY/UJcvrMG+Z -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:06 2025 by rpki-client