$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json) Hash identifier: i6iTj9cLcwDxu91YzUoya0VRYogNvleiVchDb0T8YCM= Subject key identifier: A0:64:6E:81:52:D5:D7:56:55:00:E8:9A:1C:9C:2C:4D:05:04:2C:53 Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft Manifest number: 094F Signing time: Sun 02 Nov 2025 20:07:39 +0000 Manifest this update: Sun 02 Nov 2025 20:07:38 +0000 Manifest next update: Sun 09 Nov 2025 20:07:38 +0000 Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: Ms0bF9NPCz5JMeCX1y+bSgy49nu++dWFVkUmp/1hTiI=) 2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: hBbziGq3cc8hGTM4JIZcIJ31hPsOyUFUIPkanCNnaOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: Nov 2 20:07:38 2025 GMT Not After : Nov 9 20:07:38 2025 GMT Subject: CN=6907ba0b-4e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:d8:bc:c0:aa:7e:8c:cd:55:44:25:dc:2d: 64:2e:ff:f8:05:a7:ab:ef:82:ea:e5:1a:bf:62:cd: e4:18:ea:f1:e5:23:5d:c3:a3:a1:53:9a:1f:b8:b3: 6a:b2:00:0c:e5:a4:81:2a:bb:b1:ab:6d:2d:e2:83: de:38:95:26:a4:a8:67:83:44:4b:2c:e4:0e:a0:77: 31:cb:78:57:2f:43:fe:04:cd:84:f9:70:0f:9d:b8: 41:93:93:37:1d:32:e8:b7:f5:0d:ec:5b:9f:22:bb: 14:a6:9e:9f:1b:44:dd:60:d9:e9:6e:a8:56:e7:0d: a5:e8:d4:ea:c0:af:9e:08:51:ec:a2:c0:01:45:4a: 34:eb:b1:b1:09:eb:ae:9d:05:cd:ed:80:a1:8a:bc: f7:e8:90:9c:44:63:0e:41:6f:81:77:d0:d4:dc:e5: af:2d:35:23:e2:ef:c4:fd:b9:5f:90:37:f0:0a:5d: 58:34:a1:82:6a:56:56:bd:80:98:55:8e:f1:84:41: c7:d5:2e:4c:83:ce:f7:e4:4c:60:57:da:04:c4:69: 7c:7c:df:c4:49:bf:b6:c8:ec:e9:f1:7a:ee:ab:48: d0:b4:55:2b:76:f6:6e:9d:8e:4d:b9:80:4c:d7:65: b8:7a:eb:11:72:53:5c:da:f8:8d:39:ca:f8:85:c8: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:6E:81:52:D5:D7:56:55:00:E8:9A:1C:9C:2C:4D:05:04:2C:53 X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f3:c3:b1:f4:52:63:fb:5e:0e:47:2b:60:6e:ab:84:66:68: f4:fa:2a:0f:a9:29:3f:a1:6d:ae:d3:e3:18:af:39:a9:fc:ff: 06:b9:91:0e:2f:68:90:f3:40:67:a6:9d:d0:14:0b:64:cd:14: 11:df:ef:98:0c:9b:62:e3:e9:be:fa:0b:df:fa:fb:07:c1:36: cb:99:16:da:e8:43:1b:72:56:a2:93:35:94:67:fb:43:76:95: cb:7d:a7:fd:c5:68:1d:30:06:31:4e:e1:cb:d2:d9:47:8e:dd: 7e:df:21:9d:93:17:0f:d8:88:2d:65:55:90:9a:e2:71:c6:05: 0f:02:52:74:98:7b:6c:2c:37:33:81:45:09:12:60:41:40:87: 34:1e:62:e5:fe:c1:5c:aa:a4:83:ab:5c:d2:45:26:31:3f:bf: 46:68:d6:8b:3f:bb:9d:ee:83:7b:41:03:83:76:f4:d6:c3:03: 82:6e:62:bf:e3:25:43:e9:f8:66:a1:d3:af:1e:91:b6:3b:64: 25:81:2a:7e:28:fa:28:2d:b3:05:14:5b:33:48:df:ab:6c:11: 03:ef:cd:8b:31:a7:d8:0e:6a:c4:67:b7:7c:11:5f:12:b5:fa: aa:27:e3:cd:d1:19:32:ec:0d:f3:2f:58:07:9f:25:65:2a:9a: 7a:da:18:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjUxMTAyMjAwNzM4WhcNMjUxMTA5MjAwNzM4WjAYMRYwFAYD VQQDEw02OTA3YmEwYi00ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rnYvMCqfozNVUQl3C1kLv/4Baer74Lq5Rq/Ys3kGOrx5SNdw6OhU5ofuLNq sgAM5aSBKruxq20t4oPeOJUmpKhng0RLLOQOoHcxy3hXL0P+BM2E+XAPnbhBk5M3 HTLot/UN7FufIrsUpp6fG0TdYNnpbqhW5w2l6NTqwK+eCFHsosABRUo067GxCeuu nQXN7YChirz36JCcRGMOQW+Bd9DU3OWvLTUj4u/E/blfkDfwCl1YNKGCalZWvYCY VY7xhEHH1S5Mg8735ExgV9oExGl8fN/ESb+2yOzp8Xruq0jQtFUrdvZunY5NuYBM 12W4eusRclNc2viNOcr4hcg6EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBkboFS 1ddWVQDomhycLE0FBCxTMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYxMS84RUEyNDc1QUE5RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4 TV8tOHB3ejM5cXI3QXoxM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ88Ox9FJj+14ORytgbquEZmj0+ioPqSk/oW2u0+MYrzmp/P8GuZEO L2iQ80Bnpp3QFAtkzRQR3++YDJti4+m++gvf+vsHwTbLmRba6EMbclaikzWUZ/tD dpXLfaf9xWgdMAYxTuHL0tlHjt1+3yGdkxcP2IgtZVWQmuJxxgUPAlJ0mHtsLDcz gUUJEmBBQIc0HmLl/sFcqqSDq1zSRSYxP79GaNaLP7ud7oN7QQODdvTWwwOCbmK/ 4yVD6fhmodOvHpG2O2QlgSp+KPooLbMFFFszSN+rbBED782LMafYDmrEZ7d8EV8S tfqqJ+PN0Rky7A3zL1gHnyVlKpp62hh5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:50 2025 by rpki-client