$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: gUH4lL9hoToUYOrfNKZqhHRmIbjmv+RJ0Zf4zCGheU8= Subject key identifier: C9:8B:FB:3B:95:2A:6C:BA:9B:B6:86:4C:1B:04:08:AB:D9:40:FF:3A Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0CAE Signing time: Sun 02 Nov 2025 18:12:23 +0000 Manifest this update: Sun 02 Nov 2025 18:12:23 +0000 Manifest next update: Sun 09 Nov 2025 18:12:23 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: 8cCWKMVQ3pT+34mw+u77joyDOtdW3SjK3c86tPixA0A=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Nov 2 18:12:23 2025 GMT Not After : Nov 9 18:12:23 2025 GMT Subject: CN=69079f07-5aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:d3:a5:ae:f1:5f:83:68:94:e3:e4:b0:cf: 74:1c:48:14:c7:7d:bf:be:9a:e1:6b:ca:a5:2e:ca: f9:65:fe:24:b2:8c:c7:7a:b2:32:66:de:45:c8:c8: a4:95:a4:19:c9:7e:fb:d8:e1:d2:81:20:b3:ea:6c: 9c:8c:85:11:bd:08:d0:a4:20:6f:29:3d:77:76:9d: 86:7b:07:46:e0:97:41:0a:6d:77:ba:e8:c7:d1:b1: 1b:b6:1b:fe:14:c9:c4:fb:fa:6e:94:d9:9f:56:c5: 75:b0:f6:4f:5c:5c:2b:24:13:dd:8c:29:99:92:a9: 9b:52:a5:52:0b:e9:18:24:a2:a5:ce:d4:9d:37:4b: 94:d9:df:bf:25:6d:44:2b:e9:dd:72:a9:46:ab:15: c9:f9:61:7d:10:04:32:e4:9b:96:c5:e5:50:11:33: 04:ab:c5:98:6c:f6:df:5d:84:e9:42:ce:d3:06:c2: 07:c4:40:a8:76:01:e1:3e:7b:f2:86:d4:78:aa:0b: ad:39:8c:88:ae:d1:4b:de:4a:e8:29:00:e6:41:5e: a4:0a:20:04:5b:07:3f:c8:8c:7e:bc:1b:b1:b9:85: ec:f1:fe:fd:72:6f:59:12:2a:a8:80:8b:11:6e:ab: 48:ce:98:a3:89:42:6c:0f:9b:d2:8d:03:62:42:2e: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8B:FB:3B:95:2A:6C:BA:9B:B6:86:4C:1B:04:08:AB:D9:40:FF:3A X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:4f:f9:cf:99:6f:f7:fc:81:07:b2:35:9f:32:22:d3:07:8a: 7d:6b:73:ad:62:db:2d:fb:d6:49:cb:07:91:dc:b6:d6:08:21: 57:f8:b6:b1:2a:2e:a6:17:e3:fb:8c:24:85:dd:99:3d:a5:7d: b7:74:54:d4:13:9e:0a:f1:85:8d:ea:f0:71:49:70:e2:38:a8: dd:bc:85:0c:54:c0:6f:27:cb:f6:ea:f7:ec:1b:d9:5d:d4:7c: b6:11:30:6c:bf:d4:f9:86:4f:66:14:f9:98:61:da:37:ef:e0: a6:e3:49:ad:a4:06:92:bc:76:75:43:ec:d3:22:19:d2:c0:1d: 6b:54:81:e3:6a:1f:d5:23:ca:e7:44:09:2d:50:f2:73:d8:27: 48:42:1e:27:88:7d:ac:e4:6e:cc:54:13:b9:5a:27:15:26:a5: e2:a1:3f:ed:9f:b3:9c:3f:b4:2a:dd:26:6b:8e:51:5a:90:7d: db:21:b2:c1:70:69:db:67:a1:a5:14:33:e1:77:f1:4d:cb:54: 3f:2b:44:26:bb:49:45:42:c4:31:bc:fa:7b:4c:97:d1:f6:88: 18:4c:b4:2a:49:23:73:f0:93:b6:d4:ad:1a:d4:75:b9:2a:6a: ea:f3:d8:5f:31:d1:dc:e2:90:1c:16:ee:88:cd:71:74:26:f3: b6:4a:2d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUxMTAyMTgxMjIzWhcNMjUxMTA5MTgxMjIzWjAYMRYwFAYD VQQDEw02OTA3OWYwNy01YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQnTpa7xX4NolOPksM90HEgUx32/vprha8qlLsr5Zf4ksozHerIyZt5FyMik laQZyX772OHSgSCz6mycjIURvQjQpCBvKT13dp2GewdG4JdBCm13uujH0bEbthv+ FMnE+/pulNmfVsV1sPZPXFwrJBPdjCmZkqmbUqVSC+kYJKKlztSdN0uU2d+/JW1E K+ndcqlGqxXJ+WF9EAQy5JuWxeVQETMEq8WYbPbfXYTpQs7TBsIHxECodgHhPnvy htR4qgutOYyIrtFL3kroKQDmQV6kCiAEWwc/yIx+vBuxuYXs8f79cm9ZEiqogIsR bqtIzpijiUJsD5vSjQNiQi6elQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmL+zuV Kmy6m7aGTBsECKvZQP86MB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0T/nPmW/3/IEHsjWfMiLTB4p9a3OtYtst+9ZJyweR3LbWCCFX+Lax Ki6mF+P7jCSF3Zk9pX23dFTUE54K8YWN6vBxSXDiOKjdvIUMVMBvJ8v26vfsG9ld 1Hy2ETBsv9T5hk9mFPmYYdo37+Cm40mtpAaSvHZ1Q+zTIhnSwB1rVIHjah/VI8rn RAktUPJz2CdIQh4niH2s5G7MVBO5WicVJqXioT/tn7OcP7Qq3SZrjlFakH3bIbLB cGnbZ6GlFDPhd/FNy1Q/K0Qmu0lFQsQxvPp7TJfR9ogYTLQqSSNz8JO21K0a1HW5 Kmrq89hfMdHc4pAcFu6IzXF0JvO2Si1X -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:06 2025 by rpki-client