$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: VryVZmvIQAE55xYZzl3m+kd7iRuTI8y+rKFV1OyiLSI= Subject key identifier: 05:C1:3F:8C:B0:B0:4F:4A:76:AF:C2:86:BE:4E:DA:BF:C0:9A:B4:27 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 09B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 09A0 Signing time: Sun 02 Nov 2025 20:00:19 +0000 Manifest this update: Sun 02 Nov 2025 20:00:19 +0000 Manifest next update: Sun 09 Nov 2025 20:00:19 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: mDW88Pt1wgGscxeONCblMpsvpqyl0sITurU04aCWdrE=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: G50IgyVtJtFjbRe7GXXuAS+YYFAlwWX6MNmoWMFn7H8=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: UDel8k9RgGctC+s9ZLuCO5lpL1soQPWhGXE8LLODT5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2485 (0x9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Nov 2 20:00:19 2025 GMT Not After : Nov 9 20:00:19 2025 GMT Subject: CN=6907b853-a9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:eb:a6:c9:61:7c:b2:a3:61:67:00:7a:6a: 66:8e:4f:6c:b7:44:f1:21:9c:81:4d:b2:6f:93:ca: 5c:e4:28:61:98:7c:e5:e2:ea:54:0c:52:4e:71:25: 9c:f3:f0:b3:69:b4:1f:db:98:40:a9:b2:17:30:ba: c5:89:f4:c6:42:9d:85:d9:24:22:f2:a3:49:54:67: fa:f5:22:a3:7e:ac:a8:5a:e2:7b:73:65:fb:56:ae: 09:d1:f3:fd:6c:d4:db:fb:76:a0:08:0e:b2:06:52: d1:eb:a2:25:46:33:42:05:93:00:3a:fe:a6:6b:f5: e3:00:8f:5c:39:fc:8b:20:41:6d:8a:b7:45:bd:64: d9:c1:8a:1c:8a:8c:f0:df:50:be:5d:d4:9b:ed:d2: 25:b1:dd:6c:04:6a:04:ac:b9:c8:26:52:cd:2b:98: aa:ac:51:09:0b:5e:81:f2:4f:69:ce:db:c7:75:3f: 7a:b1:4d:0b:6f:e2:7e:ce:96:e4:4c:cf:21:d5:9e: 26:63:3c:36:b7:e3:7e:68:fd:85:55:cc:6c:a8:5d: 6b:6d:32:09:53:82:e8:b3:aa:82:ac:aa:f4:e8:ab: 68:53:ab:4f:e6:08:35:5f:15:4e:29:02:ef:ab:a9: 0f:88:cc:f6:d8:3a:20:44:f2:25:c5:e3:3f:2a:a0: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C1:3F:8C:B0:B0:4F:4A:76:AF:C2:86:BE:4E:DA:BF:C0:9A:B4:27 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:12:89:37:1a:3f:2b:a3:c5:21:3e:ae:f3:af:56:7c:c3:69: e8:da:6d:25:3c:74:54:09:b9:92:21:31:06:6b:05:82:96:0d: cb:1b:9c:4e:62:16:78:31:6c:5d:ee:03:3e:cd:33:bc:d7:f5: 77:29:a8:b4:d3:6c:10:a9:3c:07:21:c0:c5:0d:32:8f:d9:e0: 54:b0:d7:52:de:fa:e3:c0:63:60:13:93:32:75:9a:33:a4:18: d9:ff:19:ed:8b:16:19:c7:15:12:ef:09:19:6d:2d:d2:ab:1d: 0b:ae:5f:e7:c6:93:f7:68:e3:b3:f9:02:fb:b4:98:0e:7c:41: 5a:23:07:0e:a2:3d:71:8d:35:d0:0a:1a:1b:7b:fd:aa:03:21: 9d:c4:ae:35:bc:12:d4:7d:e6:cc:3c:d6:ff:16:04:d6:24:37: 12:83:1e:95:65:39:36:bb:f5:6a:93:bf:d2:bb:a7:72:07:f5: ce:c6:2a:d0:6a:a4:c5:08:63:2a:24:ce:fb:79:ca:88:c2:ce: 7c:96:9f:e0:af:a2:7a:2f:df:9b:41:20:a8:9c:a4:e3:96:68: 05:91:d0:9d:df:d5:a1:64:6f:b9:94:e6:16:1d:ad:5e:10:0e: 88:ef:f0:3f:ae:75:ae:af:5a:40:99:42:b8:ba:8e:29:d9:18: 0f:35:6d:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUxMTAyMjAwMDE5WhcNMjUxMTA5MjAwMDE5WjAYMRYwFAYD VQQDEw02OTA3Yjg1My1hOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptvrpslhfLKjYWcAempmjk9st0TxIZyBTbJvk8pc5ChhmHzl4upUDFJOcSWc 8/CzabQf25hAqbIXMLrFifTGQp2F2SQi8qNJVGf69SKjfqyoWuJ7c2X7Vq4J0fP9 bNTb+3agCA6yBlLR66IlRjNCBZMAOv6ma/XjAI9cOfyLIEFtirdFvWTZwYociozw 31C+XdSb7dIlsd1sBGoErLnIJlLNK5iqrFEJC16B8k9pztvHdT96sU0Lb+J+zpbk TM8h1Z4mYzw2t+N+aP2FVcxsqF1rbTIJU4Los6qCrKr06KtoU6tP5gg1XxVOKQLv q6kPiMz22DogRPIlxeM/KqCopQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXBP4yw sE9Kdq/Chr5O2r/AmrQnMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Eok3Gj8ro8UhPq7zr1Z8w2no2m0lPHRUCbmSITEGawWClg3LG5xO YhZ4MWxd7gM+zTO81/V3Kai002wQqTwHIcDFDTKP2eBUsNdS3vrjwGNgE5MydZoz pBjZ/xntixYZxxUS7wkZbS3Sqx0Lrl/nxpP3aOOz+QL7tJgOfEFaIwcOoj1xjTXQ Chobe/2qAyGdxK41vBLUfebMPNb/FgTWJDcSgx6VZTk2u/Vqk7/Su6dyB/XOxirQ aqTFCGMqJM77ecqIws58lp/gr6J6L9+bQSConKTjlmgFkdCd39WhZG+5lOYWHa1e EA6I7/A/rnWur1pAmUK4uo4p2RgPNW3i -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:31 2025 by rpki-client