$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: 1Yu2MOgq4q91Nz0y2V0ccIl017lcfUWBNKX3x+qiu2M= Subject key identifier: 3A:F2:2F:31:CC:9B:93:0F:7F:63:24:95:0E:91:36:EE:B4:45:A4:83 Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 58 Signing time: Mon 03 Nov 2025 07:08:57 +0000 Manifest this update: Mon 03 Nov 2025 07:08:57 +0000 Manifest next update: Mon 10 Nov 2025 07:08:57 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: aGs+NKPexuosRMJugJEw1RypRJJg/igZb56QDLnncDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Nov 3 07:08:57 2025 GMT Not After : Nov 10 07:08:57 2025 GMT Subject: CN=69085509-1a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:99:7d:2b:e4:37:b1:a6:30:52:7a:18:bc: fe:50:02:0d:c5:67:90:e2:37:85:8d:0d:d3:e6:15: 6c:ff:58:c0:3c:b7:00:52:5c:5f:13:34:5b:dc:40: 1c:25:17:38:f8:a5:bb:71:03:07:b5:43:a9:67:79: 89:4c:dc:00:6b:57:83:ec:fd:b5:92:44:36:9a:cf: 13:b9:68:c1:2f:17:2f:58:7b:5b:4d:03:ca:5e:dd: df:a0:7e:41:ca:07:8b:82:2a:97:53:b2:69:84:4d: 3d:ff:aa:ad:c5:17:67:f6:35:e4:7a:f3:cd:b5:61: a1:c6:59:fd:64:7f:6c:89:f9:de:13:96:59:4d:30: e8:84:c4:a5:3b:2c:6d:04:c3:f7:c8:52:2c:9b:cf: 77:4a:41:f5:b2:8b:d5:e4:45:77:52:1b:27:09:17: b3:1b:87:23:af:72:37:e0:7e:48:75:44:e3:1b:cf: 19:d6:3d:a4:94:87:81:d1:6a:9f:25:eb:62:f1:86: fa:15:de:e7:67:83:a5:a2:24:fa:12:ec:c7:48:4d: a8:78:ea:da:d1:63:c9:f9:6f:4a:aa:e2:61:1d:c9: dc:6b:f1:e2:70:7a:78:f3:d8:2a:f6:40:0b:a1:0e: 5b:ae:4f:3f:81:9f:ef:e3:46:f2:66:52:81:c8:e2: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:2F:31:CC:9B:93:0F:7F:63:24:95:0E:91:36:EE:B4:45:A4:83 X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:86:97:b9:82:59:c6:85:28:1d:23:d0:8b:f9:8d:1e:cb:08: 9e:33:51:5b:ca:a0:1e:bf:36:7f:e7:55:e8:12:90:a4:95:84: 89:21:7b:d7:1a:5e:9c:04:91:cb:54:69:3d:3f:61:7f:5e:ea: 15:9c:66:35:1c:4b:d7:c5:c1:f1:ca:73:e6:58:6e:76:ef:e1: 15:60:24:e7:7c:82:70:fd:b2:4c:c8:47:2c:66:6d:84:9f:7e: 22:bf:2b:72:4e:d5:0a:34:56:ef:98:c4:3b:cf:0c:62:f6:14: e3:d5:6c:b2:55:ab:a9:77:c6:bc:56:0c:88:3f:7b:e0:a9:d9: 99:ad:1a:31:ef:1f:ef:eb:45:dd:2c:66:9f:77:ad:2b:4a:d2: 9f:0b:da:74:91:eb:b6:07:02:14:74:16:b0:20:f8:df:65:ca: 8f:ec:c2:62:10:a1:3f:3e:eb:7c:08:e9:f3:4a:65:2d:7e:0e: 72:50:41:97:02:24:8d:50:cc:1e:36:85:b0:ba:03:fa:e3:a5: 75:66:5e:dd:1a:89:e0:4c:c7:ed:26:a8:61:95:22:c9:13:be: 93:a3:b8:47:05:2e:d6:0e:e1:8d:9e:b2:fb:3a:3c:78:89:96: a9:a3:a2:fa:82:eb:f5:16:8a:d7:8e:e5:16:de:58:32:23:9f: 4b:87:dd:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTExMDMwNzA4NTdaFw0yNTExMTAwNzA4NTdaMBgxFjAUBgNV BAMTDTY5MDg1NTA5LTFhN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCosZl9K+Q3saYwUnoYvP5QAg3FZ5DiN4WNDdPmFWz/WMA8twBSXF8TNFvcQBwl Fzj4pbtxAwe1Q6lneYlM3ABrV4Ps/bWSRDaazxO5aMEvFy9Ye1tNA8pe3d+gfkHK B4uCKpdTsmmETT3/qq3FF2f2NeR68821YaHGWf1kf2yJ+d4TlllNMOiExKU7LG0E w/fIUiybz3dKQfWyi9XkRXdSGycJF7MbhyOvcjfgfkh1ROMbzxnWPaSUh4HRap8l 62LxhvoV3udng6WiJPoS7MdITah46trRY8n5b0qq4mEdydxr8eJwenjz2Cr2QAuh DluuTz+Bn+/jRvJmUoHI4kdfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOvIvMcyb kw9/YySVDpE27rRFpIMwHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmGl7mCWcaFKB0j0Iv5jR7LCJ4zUVvKoB6/Nn/nVegSkKSVhIkhe9ca XpwEkctUaT0/YX9e6hWcZjUcS9fFwfHKc+ZYbnbv4RVgJOd8gnD9skzIRyxmbYSf fiK/K3JO1Qo0Vu+YxDvPDGL2FOPVbLJVq6l3xrxWDIg/e+Cp2ZmtGjHvH+/rRd0s Zp93rStK0p8L2nSR67YHAhR0FrAg+N9lyo/swmIQoT8+63wI6fNKZS1+DnJQQZcC JI1QzB42hbC6A/rjpXVmXt0aieBMx+0mqGGVIskTvpOjuEcFLtYO4Y2esvs6PHiJ lqmjovqC6/UWiteO5RbeWDIjn0uH3XQ= -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:42 2025 by rpki-client