$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: Ye7EJ7m9zSe0pRKm6Qw9fKuP5hDAVdeZd8z8SKK3pIU= Subject key identifier: 17:6A:27:1A:E7:96:ED:31:66:5B:87:60:BE:B8:7C:C3:52:3A:D8:05 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 0157 Signing time: Mon 03 Nov 2025 04:18:37 +0000 Manifest this update: Mon 03 Nov 2025 04:18:36 +0000 Manifest next update: Mon 10 Nov 2025 04:18:36 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: EFd5Rum5UDuUKmo05AjqiiG5JKWP8LdQH1STgwlZkyI=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: 9jHu3pObxxfWdzGy7pK2inH03eaLWHZ7GI2Hxp0P/hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Nov 3 04:18:36 2025 GMT Not After : Nov 10 04:18:36 2025 GMT Subject: CN=69082d1c-6760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:52:15:b8:2b:0c:0f:e6:52:7c:53:ea:52: d1:ee:ce:15:ee:02:c0:ff:cf:00:fa:c7:8b:75:de: fd:bf:9b:c9:c9:30:19:67:a6:61:98:79:b7:1d:2e: 88:18:d8:0e:ee:ba:9a:d0:13:dd:35:45:f8:37:6f: 4b:73:3c:85:ba:03:9c:60:40:90:2c:42:61:e8:ed: 78:17:08:b0:24:1f:45:51:0d:9f:87:cf:7d:78:40: b6:35:43:45:c9:84:e4:03:88:83:6e:4b:ca:c0:a5: 2f:c3:e6:fd:a4:42:36:91:3c:b2:3c:6e:70:25:64: f1:d4:0f:64:90:54:18:21:c1:d5:fa:c7:30:2f:eb: 86:db:54:ab:e4:80:89:22:5a:78:87:02:55:81:34: 40:2a:9f:e2:68:d7:b2:b3:30:9d:12:14:30:e3:d5: 1c:b1:c5:a0:b8:0d:0d:66:de:6c:05:d5:79:7a:e0: a2:76:1e:99:40:9e:84:79:14:db:a1:54:48:0c:5f: 99:e5:58:5d:e0:f7:03:63:92:14:9a:b4:34:58:ec: b8:9a:db:8d:c1:e4:ab:de:27:25:68:6e:9f:ff:1e: 91:9b:a2:2b:35:f2:34:e0:24:3b:61:4c:16:04:f8: 4a:bf:2a:21:52:12:4e:63:26:95:83:12:f2:d2:f8: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6A:27:1A:E7:96:ED:31:66:5B:87:60:BE:B8:7C:C3:52:3A:D8:05 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5f:c9:4d:58:ae:5f:50:96:78:03:14:e2:f7:c0:46:f2:0b: 41:0a:5c:1d:51:56:08:39:7c:0a:be:77:df:8b:59:b8:1c:61: 36:e0:c8:16:35:23:b6:10:48:25:6c:58:3f:8e:8d:e9:90:0b: 14:65:f5:30:a9:18:30:fa:01:c4:fe:1f:67:3f:56:68:91:e2: 21:f0:e5:48:14:2e:df:96:92:1e:69:02:85:8d:20:c3:43:3d: f3:8f:32:71:5f:20:63:4e:90:32:f7:45:d2:5b:8a:79:08:85: e2:cd:cb:d2:bc:e9:0b:c9:fd:9c:45:ca:13:02:b5:ec:3b:1a: 67:de:7b:9c:85:84:28:0c:03:f4:69:c0:b0:fa:36:80:0b:96: c7:39:f7:f1:ae:0b:50:da:06:5c:14:2f:9b:b3:3a:9f:f7:73: cf:26:8c:8f:66:b3:d7:b4:90:99:75:40:8e:7f:9a:3f:56:a4: 84:e5:a5:15:3a:aa:fd:8d:a2:28:ae:5d:2b:8b:9d:cc:3a:86: 18:00:a4:19:3f:99:c1:e2:41:65:0b:59:bb:f1:ed:bb:0a:e9: 7f:4e:fa:b1:a2:b6:b7:12:79:9f:94:6a:1c:f6:be:d9:c5:e4: 66:2c:8d:f9:03:d3:63:d5:ea:a4:71:43:e2:e0:bf:3a:21:4f: 1c:8d:85:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUxMTAzMDQxODM2WhcNMjUxMTEwMDQxODM2WjAYMRYwFAYD VQQDEw02OTA4MmQxYy02NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0FSFbgrDA/mUnxT6lLR7s4V7gLA/88A+seLdd79v5vJyTAZZ6ZhmHm3HS6I GNgO7rqa0BPdNUX4N29LczyFugOcYECQLEJh6O14FwiwJB9FUQ2fh899eEC2NUNF yYTkA4iDbkvKwKUvw+b9pEI2kTyyPG5wJWTx1A9kkFQYIcHV+scwL+uG21Sr5ICJ Ilp4hwJVgTRAKp/iaNeyszCdEhQw49UcscWguA0NZt5sBdV5euCidh6ZQJ6EeRTb oVRIDF+Z5Vhd4PcDY5IUmrQ0WOy4mtuNweSr3iclaG6f/x6Rm6IrNfI04CQ7YUwW BPhKvyohUhJOYyaVgxLy0vhQ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdqJxrn lu0xZluHYL64fMNSOtgFMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjX8lNWK5fUJZ4AxTi98BG8gtBClwdUVYIOXwKvnffi1m4HGE24MgW NSO2EEglbFg/jo3pkAsUZfUwqRgw+gHE/h9nP1ZokeIh8OVIFC7flpIeaQKFjSDD Qz3zjzJxXyBjTpAy90XSW4p5CIXizcvSvOkLyf2cRcoTArXsOxpn3nuchYQoDAP0 acCw+jaAC5bHOffxrgtQ2gZcFC+bszqf93PPJoyPZrPXtJCZdUCOf5o/VqSE5aUV Oqr9jaIorl0ri53MOoYYAKQZP5nB4kFlC1m78e27Cul/Tvqxora3EnmflGoc9r7Z xeRmLI35A9Nj1eqkcUPi4L86IU8cjYUt -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:22 2025 by rpki-client