$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: RsJOaa5jhL9xJTkas2iI6ACZOPAmWknGg517bBRFlyM= Subject key identifier: 1A:47:7A:CF:D4:CA:2A:76:60:53:AD:16:83:97:E2:F0:37:9A:8E:52 Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 64 Signing time: Mon 03 Nov 2025 07:03:04 +0000 Manifest this update: Mon 03 Nov 2025 07:03:03 +0000 Manifest next update: Mon 10 Nov 2025 07:03:03 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: wv3PKRUsGn8TVJ5gZ/6Z7Etr2pdZAgU/njVG1xu7Vrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Nov 3 07:03:03 2025 GMT Not After : Nov 10 07:03:03 2025 GMT Subject: CN=690853a7-c38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:23:19:26:56:22:56:3e:5f:85:81:01:54: 54:c9:53:eb:08:88:54:53:94:a9:df:37:4c:96:f2: c5:41:17:14:42:15:79:df:c3:e7:e8:b7:9a:e0:d8: ff:e1:93:56:4f:f4:e0:c8:b8:b5:a7:e5:00:c9:0e: 98:4b:ae:b2:49:62:09:fb:27:c0:79:35:94:58:04: b6:7f:3e:9d:7f:72:d6:c9:7e:b4:a2:9c:3b:37:5f: b2:c0:86:7c:37:92:83:2a:72:aa:76:62:ce:52:49: 03:22:f2:ed:06:99:f5:14:b9:91:b8:ec:0d:fe:bb: a1:28:24:c9:36:02:44:15:04:ef:dd:9b:86:ad:32: 9e:ae:f2:f0:d1:5b:2f:ed:e2:a9:ef:82:c1:93:3f: 0a:88:c3:13:e9:1b:60:8d:43:a2:27:ba:df:5b:56: 70:95:4d:88:2b:e7:7c:d5:f6:28:a6:f8:90:df:86: dc:43:bf:9b:43:cb:91:db:80:be:e6:e2:0f:28:6d: ab:6a:c5:99:a8:31:08:d9:52:a2:57:b5:d1:bb:8e: 09:6d:c8:61:24:ea:9f:7b:1f:dc:67:b9:80:c4:0a: 73:9f:f1:b8:52:dd:92:f5:63:54:5d:a9:d0:e2:72: 2c:cd:9a:85:44:f0:78:d2:df:f7:35:4c:5a:58:ce: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:47:7A:CF:D4:CA:2A:76:60:53:AD:16:83:97:E2:F0:37:9A:8E:52 X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:df:0a:b1:6a:b6:c1:37:9f:32:37:4c:c8:47:2f:b3:a7:c7: a0:a7:cf:69:6d:58:ca:08:db:dc:12:8b:9b:77:81:76:d3:23: cb:03:bb:ed:40:d7:04:bc:28:ab:ef:40:64:ee:7a:6d:97:5d: 95:33:84:74:9b:13:b6:73:15:c8:4f:37:df:86:32:36:a3:5e: eb:5c:3f:7b:44:b6:69:70:9a:62:82:1d:99:d2:64:af:23:79: 4f:4a:ce:f8:b9:6e:fc:9b:60:44:52:5f:d2:02:56:e6:ea:18: e7:c2:5c:f6:39:0c:39:5c:50:39:72:44:9d:11:2a:f5:53:0b: 67:bb:4d:0e:2a:e8:52:6f:7c:23:b0:d8:a4:d4:2f:99:22:21: e9:62:9a:58:0b:a8:d6:5b:9d:e4:8b:d1:22:47:82:77:bd:ac: ba:ce:19:fc:df:f4:a4:30:76:8f:eb:f1:ac:0b:52:a4:b1:a9: 21:aa:3c:05:76:89:db:48:60:35:9c:f7:b9:fb:5f:76:d0:61: 00:54:30:01:df:be:46:3e:ae:18:f6:c2:ea:85:f2:35:81:4a: 92:05:67:4d:48:55:9a:49:72:33:9e:fb:7d:a8:76:fa:cd:4f: 15:09:f4:26:df:79:1e:b9:c5:ea:5c:b5:89:08:74:b8:88:41: 9e:45:c1:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTExMDMwNzAzMDNaFw0yNTExMTAwNzAzMDNaMBgxFjAUBgNV BAMTDTY5MDg1M2E3LWMzOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC70yMZJlYiVj5fhYEBVFTJU+sIiFRTlKnfN0yW8sVBFxRCFXnfw+fot5rg2P/h k1ZP9ODIuLWn5QDJDphLrrJJYgn7J8B5NZRYBLZ/Pp1/ctbJfrSinDs3X7LAhnw3 koMqcqp2Ys5SSQMi8u0GmfUUuZG47A3+u6EoJMk2AkQVBO/dm4atMp6u8vDRWy/t 4qnvgsGTPwqIwxPpG2CNQ6Inut9bVnCVTYgr53zV9iim+JDfhtxDv5tDy5HbgL7m 4g8obatqxZmoMQjZUqJXtdG7jgltyGEk6p97H9xnuYDECnOf8bhS3ZL1Y1RdqdDi cizNmoVE8HjS3/c1TFpYzh3ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGkd6z9TK KnZgU60Wg5fi8DeajlIwHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3fCrFqtsE3nzI3TMhHL7Onx6Cnz2ltWMoI29wSi5t3gXbTI8sDu+1A 1wS8KKvvQGTuem2XXZUzhHSbE7ZzFchPN9+GMjajXutcP3tEtmlwmmKCHZnSZK8j eU9Kzvi5bvybYERSX9ICVubqGOfCXPY5DDlcUDlyRJ0RKvVTC2e7TQ4q6FJvfCOw 2KTUL5kiIelimlgLqNZbneSL0SJHgne9rLrOGfzf9KQwdo/r8awLUqSxqSGqPAV2 idtIYDWc97n7X3bQYQBUMAHfvkY+rhj2wuqF8jWBSpIFZ01IVZpJcjOe+32odvrN TxUJ9CbfeR65xepctYkIdLiIQZ5FwUA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:21:15 2025 by rpki-client