$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: f+qawRdVBOkJkshzMXqZ3QCamSlM6sS7dvJ83mODfnQ= Subject key identifier: B1:DF:3D:1A:10:A3:E0:33:0B:D8:D0:03:96:FC:E9:0E:0C:00:72:51 Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 131D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 130F Signing time: Sun 02 Nov 2025 17:01:16 +0000 Manifest this update: Sun 02 Nov 2025 17:01:15 +0000 Manifest next update: Sun 09 Nov 2025 17:01:15 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: QIWXo9gPWi9GDF9XAwE6SPmE04wdo2KMIUUDDv7tM5M=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 6hOTp4SmpuhM6odO1i0HOQXN93az6Qa4OUEoe22Ijvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4893 (0x131d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Nov 2 17:01:15 2025 GMT Not After : Nov 9 17:01:15 2025 GMT Subject: CN=69078e5c-5b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:33:91:5d:93:88:07:25:74:2a:ce:d4:f9:6e: 20:4e:e8:ab:83:17:a0:2f:45:64:cc:8a:ed:e1:af: 24:aa:bd:4b:50:90:0c:d4:15:6a:52:6d:0c:49:6b: 57:fa:82:a3:ea:30:f6:d2:51:0b:83:d3:4b:76:f5: 36:bf:de:f6:ce:f0:18:9e:53:03:d7:4d:e7:54:92: 30:d9:14:c6:aa:c3:23:67:96:cc:4d:b8:9b:6a:ae: a7:f3:b7:8d:06:35:f8:f0:d1:b4:bb:f3:96:67:79: f7:13:5f:02:2b:11:d3:bb:35:12:3f:93:fe:30:95: c6:1e:24:2c:79:01:93:c5:fb:68:ef:ae:45:31:0f: 25:c4:35:87:24:2e:e6:10:e2:f1:e2:3b:5c:c9:1e: cb:bc:89:a3:a8:33:b5:80:b7:a4:5a:40:bb:5d:c8: f2:cd:e8:3e:22:93:06:57:2b:16:0b:eb:fd:59:3e: e1:48:26:df:93:81:cc:a8:b8:78:9e:87:e5:7f:e1: 6c:54:e0:ff:03:19:6b:9f:89:9c:92:82:4f:71:f5: 02:34:90:aa:db:5c:3b:3a:47:45:fe:b8:93:e8:89: cc:63:71:59:a8:f1:cd:71:e6:44:b1:1f:22:a8:c3: 49:3f:71:39:e3:69:86:ec:da:5e:06:d6:f0:73:43: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DF:3D:1A:10:A3:E0:33:0B:D8:D0:03:96:FC:E9:0E:0C:00:72:51 X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:25:ff:cc:01:f4:e0:a7:25:14:28:1f:14:21:3e:31:57:ef: f6:f6:f0:a4:fd:be:31:cc:e0:46:3b:1f:e0:11:91:e3:28:e2: fe:b7:28:b1:55:dd:7a:bb:de:a2:f2:0f:f2:5c:01:ea:3b:20: fc:56:5a:cb:49:ca:ea:c3:f3:9d:ad:a4:02:f0:f7:ff:64:c4: 6b:c1:a9:11:64:50:b3:ea:8d:25:2f:b0:de:4b:2e:06:0c:f0: ba:b3:d4:26:2b:10:3c:71:65:fa:c4:9f:ac:5b:7d:63:f6:41: 1f:20:19:75:98:d3:14:cc:db:d8:23:22:46:d4:04:7f:36:72: b3:7b:91:a4:7e:13:e4:e3:ea:19:72:f6:cb:72:4a:9b:07:7f: 16:fa:98:ad:10:b9:a0:c8:74:02:a3:3f:f0:e9:9c:6c:9b:c1: 63:81:26:1a:36:a9:57:ff:ce:53:3c:70:3b:bd:9e:0c:32:86: d6:82:dd:45:bd:ce:d0:39:12:1f:02:0c:e8:df:a7:c2:7d:d0: 62:94:c5:0b:9e:37:64:30:da:6d:df:22:5b:6e:2c:89:3f:79: ba:9a:ee:99:cd:d9:ee:4c:59:a8:69:ee:c9:7c:e1:a2:99:84: a4:8d:6f:35:90:62:65:22:93:1d:21:61:5e:24:b6:2e:35:76: 1b:0f:db:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUxMTAyMTcwMTE1WhcNMjUxMTA5MTcwMTE1WjAYMRYwFAYD VQQDEw02OTA3OGU1Yy01YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TORXZOIByV0Ks7U+W4gTuirgxegL0VkzIrt4a8kqr1LUJAM1BVqUm0MSWtX +oKj6jD20lELg9NLdvU2v972zvAYnlMD103nVJIw2RTGqsMjZ5bMTbibaq6n87eN BjX48NG0u/OWZ3n3E18CKxHTuzUSP5P+MJXGHiQseQGTxfto765FMQ8lxDWHJC7m EOLx4jtcyR7LvImjqDO1gLekWkC7Xcjyzeg+IpMGVysWC+v9WT7hSCbfk4HMqLh4 noflf+FsVOD/Axlrn4mckoJPcfUCNJCq21w7OkdF/riT6InMY3FZqPHNceZEsR8i qMNJP3E542mG7NpeBtbwc0PTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHfPRoQ o+AzC9jQA5b86Q4MAHJRMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcJf/MAfTgpyUUKB8UIT4xV+/29vCk/b4xzOBGOx/gEZHjKOL+tyix Vd16u96i8g/yXAHqOyD8VlrLScrqw/OdraQC8Pf/ZMRrwakRZFCz6o0lL7DeSy4G DPC6s9QmKxA8cWX6xJ+sW31j9kEfIBl1mNMUzNvYIyJG1AR/NnKze5GkfhPk4+oZ cvbLckqbB38W+pitELmgyHQCoz/w6Zxsm8FjgSYaNqlX/85TPHA7vZ4MMobWgt1F vc7QORIfAgzo36fCfdBilMULnjdkMNpt3yJbbiyJP3m6mu6ZzdnuTFmoae7JfOGi mYSkjW81kGJlIpMdIWFeJLYuNXYbD9sR -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:17 2025 by rpki-client