$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: 6i2pQKs+8ix6BOOSDYe/xAjCgDvUssDPEplc8S1bL+M= Subject key identifier: 43:ED:21:34:2F:31:79:90:42:81:23:17:6D:73:CE:ED:1D:F8:7B:8D Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 0687 Signing time: Sun 02 Nov 2025 22:25:02 +0000 Manifest this update: Sun 02 Nov 2025 22:25:02 +0000 Manifest next update: Sun 09 Nov 2025 22:25:02 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: SbkeDBezm2SFpXBn47XVKol0XPp9L6eRHsjEBFGYz3g=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: Nov 2 22:25:02 2025 GMT Not After : Nov 9 22:25:02 2025 GMT Subject: CN=6907da3e-01de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:11:5d:a6:14:35:84:98:dd:ba:56:c9:ae:0a: 62:a4:e5:8c:e5:c4:42:de:21:d0:a0:f5:e0:57:df: da:39:bb:41:14:7c:08:15:16:dd:a7:7d:56:45:64: 90:24:64:6f:38:6f:9d:e4:b9:41:fb:45:b7:be:d1: 48:dc:8d:d3:bb:5f:b3:2c:32:57:4e:14:2b:20:74: f8:d6:4b:73:29:88:4f:26:5a:6a:a5:17:b0:be:30: 67:0b:8e:59:2f:2a:04:eb:64:c1:37:a7:e5:32:d2: 22:ed:c7:7f:7f:cf:36:6f:85:cd:20:d7:7f:29:d9: 9f:f5:27:83:a1:e9:4f:33:ad:22:35:17:9f:7c:87: f4:0d:11:91:e9:de:80:b9:a2:00:13:95:95:b0:3f: fe:53:2a:89:49:bb:78:81:16:2a:80:4e:86:10:53: d7:b0:3c:d6:01:2e:b7:5b:89:a9:f9:24:d8:73:bb: b9:42:f0:29:c5:bc:21:0a:90:76:af:aa:1a:b7:b8: 1c:32:aa:f5:e7:77:21:7a:65:0d:42:69:c6:db:c8: b0:58:7b:d3:4a:7e:dd:aa:24:14:62:01:2f:4b:fc: 35:82:9a:a7:12:d9:3e:46:c5:8d:41:89:05:aa:33: 62:86:57:da:f3:8c:0b:a8:ce:ea:a0:de:9a:f9:1a: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:ED:21:34:2F:31:79:90:42:81:23:17:6D:73:CE:ED:1D:F8:7B:8D X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:0a:31:ff:08:9d:fb:44:d2:da:13:4f:d6:5c:88:32:57:5e: 60:f5:30:81:76:29:f5:fd:53:ba:47:d7:3a:fb:d2:e1:75:87: d7:8d:57:f4:36:b5:5f:cc:22:de:2e:9d:8f:77:b1:7a:14:79: b6:19:18:e1:2e:59:e4:f0:ff:36:1a:35:2a:33:87:f2:5f:9c: a1:53:78:f8:45:87:e0:3a:f4:60:02:86:d7:4c:a7:f9:2c:58: f0:2f:a3:4e:35:c6:e5:7a:3f:03:a4:c4:44:0b:d3:11:2a:d7: 0d:79:77:11:50:c2:a7:90:69:84:57:d6:cf:2b:94:49:5a:e4: 5a:86:cb:9c:ba:ce:6a:ce:0c:d0:82:19:8f:51:d4:e4:1b:83: 5a:fa:23:b6:1e:9d:ac:7c:24:b8:bc:1b:75:74:78:3c:65:f9: 7f:04:b1:6d:c6:8c:98:64:1f:96:0d:95:3b:3f:ba:ce:a1:da: d7:c9:cd:10:c6:ba:fb:e0:5b:d8:6e:49:22:b6:d6:ab:7a:1c: d8:cb:a6:3d:3b:2b:07:b9:c9:de:1c:26:d2:b8:b8:de:dc:60: ea:7c:a0:16:5c:29:22:91:e9:f8:e2:16:dd:30:7a:ed:43:b9: 37:20:4f:aa:a3:a9:11:c0:ad:2f:1c:54:17:37:64:8d:12:97: 25:bb:ac:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUxMTAyMjIyNTAyWhcNMjUxMTA5MjIyNTAyWjAYMRYwFAYD VQQDEw02OTA3ZGEzZS0wMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBFdphQ1hJjdulbJrgpipOWM5cRC3iHQoPXgV9/aObtBFHwIFRbdp31WRWSQ JGRvOG+d5LlB+0W3vtFI3I3Tu1+zLDJXThQrIHT41ktzKYhPJlpqpRewvjBnC45Z LyoE62TBN6flMtIi7cd/f882b4XNINd/Kdmf9SeDoelPM60iNReffIf0DRGR6d6A uaIAE5WVsD/+UyqJSbt4gRYqgE6GEFPXsDzWAS63W4mp+STYc7u5QvApxbwhCpB2 r6oat7gcMqr153chemUNQmnG28iwWHvTSn7dqiQUYgEvS/w1gpqnEtk+RsWNQYkF qjNihlfa84wLqM7qoN6a+RqVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPtITQv MXmQQoEjF21zzu0d+HuNMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCCjH/CJ37RNLaE0/WXIgyV15g9TCBdin1/VO6R9c6+9LhdYfXjVf0 NrVfzCLeLp2Pd7F6FHm2GRjhLlnk8P82GjUqM4fyX5yhU3j4RYfgOvRgAobXTKf5 LFjwL6NONcblej8DpMREC9MRKtcNeXcRUMKnkGmEV9bPK5RJWuRahsucus5qzgzQ ghmPUdTkG4Na+iO2Hp2sfCS4vBt1dHg8Zfl/BLFtxoyYZB+WDZU7P7rOodrXyc0Q xrr74FvYbkkittarehzYy6Y9OysHucneHCbSuLje3GDqfKAWXCkiken44hbdMHrt Q7k3IE+qo6kRwK0vHFQXN2SNEpclu6zK -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:37 2025 by rpki-client