$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json) Hash identifier: PTn+Z5QThQTKNnG64PDmuacbPP+gTMycLLsKRlxuYi4= Subject key identifier: 48:23:89:36:32:AE:1F:22:93:70:18:9D:1E:57:23:0F:DA:79:E6:53 Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft Manifest number: 0429 Signing time: Mon 03 Nov 2025 00:17:17 +0000 Manifest this update: Mon 03 Nov 2025 00:17:16 +0000 Manifest next update: Mon 10 Nov 2025 00:17:16 +0000 Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: sH3n5xasugtqm7YlhpXUWkvkCY1zAnGy+0d014avKBM=) 2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: aEYNM6Phn31D8FyeIqNiot79wvPM4Ab/EZ23BGQS/EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Validity Not Before: Nov 3 00:17:16 2025 GMT Not After : Nov 10 00:17:16 2025 GMT Subject: CN=6907f48d-5d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:54:d4:a5:b5:ea:fa:d8:5b:57:91:1a:4e: 3f:6d:bb:f4:49:8d:9d:bf:b1:cc:ce:0b:c5:92:ca: 70:f9:33:15:2c:10:d0:c4:a6:c6:d4:71:c9:f1:33: c6:dd:41:df:ed:9f:66:d0:82:69:31:58:0c:8a:3f: fa:60:f1:bc:d4:91:81:e5:e6:0d:ee:4f:64:f9:0f: 10:4d:f2:00:11:83:be:71:1f:8a:30:ab:8b:3c:22: 77:d7:65:86:3d:8b:23:37:38:45:14:0d:98:35:c0: c5:02:fc:9a:e1:25:5b:4c:ad:98:4d:58:88:42:96: c1:36:10:51:c9:91:26:c9:33:c3:69:04:86:85:f2: da:b3:c5:76:0c:37:5e:1f:d1:8b:5f:91:c4:e3:63: 39:95:f5:b9:40:b9:ed:9b:74:48:35:84:05:ad:7d: 0f:74:8e:5e:e3:fa:c3:43:52:75:04:68:d0:ee:3c: d6:01:73:3b:21:05:e7:a3:e7:94:fa:f5:a6:13:f9: 6f:37:78:e7:2b:a9:26:c9:6a:8d:2a:14:8f:8d:9a: 50:a5:00:a8:bb:74:16:0f:39:ce:52:f4:b1:15:ed: 61:67:95:af:2e:90:a8:5b:92:41:d6:12:ce:31:5c: d9:e2:45:09:86:ea:19:48:a2:cc:34:51:ba:8a:73: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:23:89:36:32:AE:1F:22:93:70:18:9D:1E:57:23:0F:DA:79:E6:53 X509v3 Authority Key Identifier: keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:97:e7:6f:25:b3:66:66:8a:6e:2d:bf:4b:29:e4:0c:1b:3c: 01:f9:99:87:93:0b:46:d6:96:42:9e:eb:96:c9:45:db:4f:89: d2:8d:1a:b4:4a:61:3a:64:8c:ae:a9:51:b7:6d:84:5c:09:00: 8b:9e:f7:64:bf:62:f8:02:66:5f:dd:32:23:73:e1:59:7e:b8: c0:87:bb:28:a5:ac:7c:c5:9c:9a:6c:3c:4c:d3:84:89:f3:ca: 62:35:d6:d7:9b:1a:bc:b3:da:b1:46:d0:63:03:06:4a:1e:cd: b3:80:64:94:af:39:fb:31:1c:50:63:7c:76:48:70:be:1f:51: 5c:f0:bf:85:c2:8b:36:82:93:5e:5d:fe:f1:bb:58:47:b8:01: b3:fe:03:dd:af:1d:12:b9:49:92:89:f5:ca:36:d1:ba:bc:28: 09:a4:a1:99:8b:fa:13:73:54:79:ff:36:86:b8:a0:3d:c3:50: d3:fd:d5:66:a6:50:4c:01:c3:d2:46:f4:61:b7:8a:8a:76:86: fb:dd:74:95:c0:2f:81:25:3b:e8:ee:2e:2a:11:4a:43:2e:3e: 83:12:f8:a3:6f:01:5a:1e:4a:f9:11:f2:bf:d0:c8:6b:11:74: 4c:7f:6f:02:80:82:1a:0d:cb:3e:87:b4:01:9c:b8:25:a6:1a: d5:15:72:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5 RTQ4MDY2NEQwHhcNMjUxMTAzMDAxNzE2WhcNMjUxMTEwMDAxNzE2WjAYMRYwFAYD VQQDEw02OTA3ZjQ4ZC01ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVRU1KW16vrYW1eRGk4/bbv0SY2dv7HMzgvFkspw+TMVLBDQxKbG1HHJ8TPG 3UHf7Z9m0IJpMVgMij/6YPG81JGB5eYN7k9k+Q8QTfIAEYO+cR+KMKuLPCJ312WG PYsjNzhFFA2YNcDFAvya4SVbTK2YTViIQpbBNhBRyZEmyTPDaQSGhfLas8V2DDde H9GLX5HE42M5lfW5QLntm3RINYQFrX0PdI5e4/rDQ1J1BGjQ7jzWAXM7IQXno+eU +vWmE/lvN3jnK6kmyWqNKhSPjZpQpQCou3QWDznOUvSxFe1hZ5WvLpCoW5JB1hLO MVzZ4kUJhuoZSKLMNFG6inO3gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgjiTYy rh8ik3AYnR5XIw/aeeZTMB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs ZzlTYmxIRzgzQWFlU0FaazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDl+dvJbNmZopuLb9LKeQMGzwB+ZmHkwtG1pZCnuuWyUXbT4nSjRq0 SmE6ZIyuqVG3bYRcCQCLnvdkv2L4AmZf3TIjc+FZfrjAh7sopax8xZyabDxM04SJ 88piNdbXmxq8s9qxRtBjAwZKHs2zgGSUrzn7MRxQY3x2SHC+H1Fc8L+Fwos2gpNe Xf7xu1hHuAGz/gPdrx0SuUmSifXKNtG6vCgJpKGZi/oTc1R5/zaGuKA9w1DT/dVm plBMAcPSRvRht4qKdob73XSVwC+BJTvo7i4qEUpDLj6DEvijbwFaHkr5EfK/0Mhr EXRMf28CgIIaDcs+h7QBnLglphrVFXLT -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:19 2025 by rpki-client