$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json) Hash identifier: 3atQaYl/snn4HA3lzaxBoMA75VLdfyoSwJ94cvCcLCk= Subject key identifier: 3D:C6:8C:39:58:34:32:91:4B:67:09:00:06:5D:DB:F0:D3:56:2D:D6 Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft Manifest number: 34 Signing time: Mon 03 Nov 2025 07:35:59 +0000 Manifest this update: Mon 03 Nov 2025 07:35:58 +0000 Manifest next update: Mon 10 Nov 2025 07:35:58 +0000 Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: Ed30YydoRpdSBc/gc9fvQyR7O75sJIpY2wZrXVLZlEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Validity Not Before: Nov 3 07:35:58 2025 GMT Not After : Nov 10 07:35:58 2025 GMT Subject: CN=69085b5e-f932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:99:67:06:ed:7b:8f:42:0f:01:a1:41:c4: c2:d8:d8:fd:78:fb:0f:65:4d:d5:a4:a1:cd:fb:55: c4:24:9b:da:dd:32:ce:47:9b:ce:d5:04:43:13:dc: 77:20:09:df:11:23:ce:2a:d1:15:09:a6:41:3a:52: 2c:2f:fd:ae:a8:02:b3:5c:5d:22:a2:ff:f9:10:34: 84:30:17:c7:7c:08:3c:51:56:18:cc:5d:84:03:a0: df:43:fe:4b:0f:7d:35:44:c5:7a:57:88:1f:f1:da: 5a:32:87:cf:1a:92:ef:e1:c1:41:47:7e:6f:f0:bb: 66:7e:53:8b:4e:f4:de:d2:6a:24:f2:0c:82:14:34: 3f:72:89:df:f8:eb:95:ad:b5:35:46:b8:3c:e8:12: 33:68:d4:07:1c:ec:59:11:2b:f6:e4:78:74:eb:7b: a4:fe:bf:1c:d7:82:14:b7:07:41:69:b1:c8:e0:d5: 85:c5:87:5a:4b:4f:20:83:d3:59:95:31:02:8d:1e: 18:88:64:a1:8c:40:31:08:d6:d3:a6:fe:26:03:88: a9:49:40:82:4c:62:b5:16:d9:f1:d8:02:c6:5d:42: d7:bf:7b:11:ef:71:43:ca:80:94:38:73:22:72:5a: 0e:5b:0d:32:2a:53:24:e2:8a:91:f0:0e:88:da:41: 51:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C6:8C:39:58:34:32:91:4B:67:09:00:06:5D:DB:F0:D3:56:2D:D6 X509v3 Authority Key Identifier: keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8f:95:41:99:a6:5f:63:a3:a7:2c:e3:65:7f:9c:77:61:55: 2c:77:ad:92:b6:6e:d0:5c:8d:bb:13:cb:a1:16:e8:bc:59:4e: 96:57:78:4c:6f:13:2f:78:7b:1e:a8:d7:63:39:0e:a7:ae:9d: da:aa:49:3e:65:07:71:92:52:47:ba:01:92:dc:91:2f:6a:2d: b4:25:5d:65:fe:1a:00:65:0f:3d:28:ee:2c:3b:df:c7:ea:3c: d7:e6:5c:25:2d:31:3e:da:16:40:30:2c:1e:f4:a5:2e:98:f9: 55:4c:ee:00:c3:c9:72:e0:de:1a:b3:8a:eb:70:58:00:b7:cf: 38:ff:6c:ad:52:24:87:e3:a1:54:8e:93:30:14:68:22:ac:cf: 9b:08:f0:bc:1f:c0:7c:4b:6e:9f:66:db:26:56:56:8a:7b:1e: 44:0d:ba:92:69:8c:4d:58:c6:1b:8f:1d:2f:24:a4:74:6d:a8: 8d:bf:76:47:41:71:f8:e5:e5:9d:e0:8b:bf:11:da:7b:40:a4: 35:14:7b:fb:f2:14:aa:99:f9:b0:e6:05:7f:8c:41:26:95:4b: 5e:16:ca:59:a8:a9:3f:8e:7b:be:41:01:ff:79:0b:29:ec:10: 32:85:0f:0a:be:ed:fd:e6:b7:68:d1:31:f6:1e:50:33:4c:55: de:b9:e7:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMjVBMTk3NTgxNkNEOUU4OUYzRDZFQTZBNzYzMDIyNDNC RUMzNDVFRTAeFw0yNTExMDMwNzM1NThaFw0yNTExMTAwNzM1NThaMBgxFjAUBgNV BAMTDTY5MDg1YjVlLWY5MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsH5lnBu17j0IPAaFBxMLY2P14+w9lTdWkoc37VcQkm9rdMs5Hm87VBEMT3Hcg Cd8RI84q0RUJpkE6Uiwv/a6oArNcXSKi//kQNIQwF8d8CDxRVhjMXYQDoN9D/ksP fTVExXpXiB/x2loyh88aku/hwUFHfm/wu2Z+U4tO9N7SaiTyDIIUND9yid/465Wt tTVGuDzoEjNo1Acc7FkRK/bkeHTre6T+vxzXghS3B0Fpscjg1YXFh1pLTyCD01mV MQKNHhiIZKGMQDEI1tOm/iYDiKlJQIJMYrUW2fHYAsZdQte/exHvcUPKgJQ4cyJy Wg5bDTIqUyTiipHwDojaQVGxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPcaMOVg0 MpFLZwkABl3b8NNWLdYwHwYDVR0jBBgwFoAUJaGXWBbNnonz1upqdjAiQ77DRe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzRGNkQ2RjYwNkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFHWFdCYk5ub256MXVwcWRqQWlRNzdEUmU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzRGNkQ2RjYwNkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9u ejF1cHFkakFpUTc3RFJlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+PlUGZpl9jo6cs42V/nHdhVSx3rZK2btBcjbsTy6EW6LxZTpZXeExv Ey94ex6o12M5DqeundqqST5lB3GSUke6AZLckS9qLbQlXWX+GgBlDz0o7iw738fq PNfmXCUtMT7aFkAwLB70pS6Y+VVM7gDDyXLg3hqziutwWAC3zzj/bK1SJIfjoVSO kzAUaCKsz5sI8LwfwHxLbp9m2yZWVop7HkQNupJpjE1YxhuPHS8kpHRtqI2/dkdB cfjl5Z3gi78R2ntApDUUe/vyFKqZ+bDmBX+MQSaVS14WylmoqT+Oe75BAf95Cyns EDKFDwq+7f3mt2jRMfYeUDNMVd655xw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:33 2025 by rpki-client