$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: i9CvkTYiVaD/qls4g1MmfkPpk7hASQEvWzVMEQQyAmM= Subject key identifier: 0B:5F:8E:C3:20:95:3A:1B:7C:CB:02:E0:75:A8:5E:74:43:4D:FE:8E Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 1FDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1F8F Signing time: Sun 02 Nov 2025 16:02:04 +0000 Manifest this update: Sun 02 Nov 2025 16:02:04 +0000 Manifest next update: Sun 09 Nov 2025 16:02:04 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: kgf1ZZasBcW4ppOBZK+uAtiUbXpv320YlgFEWF7grPw=) 2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ruc/xUwDnNEwkE2/jK0HE26pVyzAxl1jWbriA1MT2XI=) 3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: l81KZYm8B7McIqBnNG7M2LbcnjjotjoHq+OGQq2Xixo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8159 (0x1fdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Nov 2 16:02:04 2025 GMT Not After : Nov 9 16:02:04 2025 GMT Subject: CN=6907807c-3fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:d3:08:4c:f8:32:b9:75:b6:1c:96:3a:dc: a0:cf:8f:db:b1:89:36:0f:c6:d4:5c:54:9b:47:d9: f1:4d:80:b3:40:1f:47:99:01:f5:96:fc:ab:5f:2f: 9a:8b:f6:82:37:a8:98:1b:8a:2d:d3:d3:82:a2:d5: 1c:af:69:08:d1:f1:d1:b2:99:da:a5:f9:f9:9d:2b: 0c:f2:21:99:81:8c:4a:bc:7a:85:93:ac:b6:aa:cb: 21:c2:b0:6c:aa:fc:68:e4:e6:b0:7b:24:6c:57:f7: 24:79:0f:61:30:4b:64:96:f9:5d:94:ee:49:37:ec: 98:48:b3:77:1a:05:13:f8:ba:99:5b:e4:b1:56:e1: 35:21:d4:49:79:53:86:8b:c3:2b:eb:12:0a:35:f4: 8c:9e:b9:11:22:3a:bd:c1:6a:30:a7:10:e1:3a:db: 79:5d:46:fe:aa:21:58:d3:47:96:72:cf:a5:1f:20: e6:48:d3:76:2c:03:ca:da:6b:30:9d:5c:7b:1e:b0: ae:43:4f:e5:bd:f7:ff:1c:cd:c5:36:a0:2b:21:4a: 98:14:99:fe:9a:e5:e7:52:11:f5:95:23:d0:1e:50: d2:0a:71:6b:fa:df:2b:b9:b3:96:b3:67:d2:5a:c0: ef:91:ed:0a:41:ea:6d:bf:c3:a4:1b:5e:17:40:f1: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:8E:C3:20:95:3A:1B:7C:CB:02:E0:75:A8:5E:74:43:4D:FE:8E X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:af:c7:2c:4f:41:4d:18:80:2d:1a:ca:8c:fe:34:ec:b3:dc: 39:5c:c9:3d:e5:49:21:68:2b:cd:ee:3f:59:79:61:71:f6:c5: 0d:7c:06:40:41:60:97:16:4e:f6:aa:13:52:db:76:40:4d:e9: 60:ec:bf:9f:1c:9a:55:d2:f9:fc:63:d0:3a:c3:11:89:a8:55: 3c:47:f1:cf:53:a4:86:4d:a1:ed:b6:ff:ff:f7:8f:24:f5:97: 6d:a8:b3:18:af:dd:aa:4c:b8:c8:8b:68:21:00:61:b4:15:f3: 80:01:34:e0:cd:fe:77:5f:7d:eb:89:5c:87:87:ec:f9:c7:1e: 62:e9:58:ad:b9:c7:46:4c:4e:0b:82:1e:be:d2:cf:17:2e:61: 65:8e:18:60:72:ea:8f:84:7c:26:80:e5:81:83:4c:dd:8f:38: 65:93:cb:3f:d5:4a:26:f6:ae:1f:d7:4e:15:ed:99:73:2f:bc: 1f:d5:5e:65:36:37:90:10:fd:b3:22:0e:3e:e0:d4:49:b7:8f: 67:02:6e:01:82:78:dc:c5:66:29:ce:08:1d:3a:44:94:17:c9: 8f:38:9d:6a:0a:41:36:71:80:70:ab:6e:22:b1:bd:1a:b9:a2: 78:3c:08:05:09:6c:4d:1d:23:7f:79:32:97:48:64:55:38:14: 3c:3b:30:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjUxMTAyMTYwMjA0WhcNMjUxMTA5MTYwMjA0WjAYMRYwFAYD VQQDEw02OTA3ODA3Yy0zZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9XTCEz4Mrl1thyWOtygz4/bsYk2D8bUXFSbR9nxTYCzQB9HmQH1lvyrXy+a i/aCN6iYG4ot09OCotUcr2kI0fHRspnapfn5nSsM8iGZgYxKvHqFk6y2qsshwrBs qvxo5OaweyRsV/ckeQ9hMEtklvldlO5JN+yYSLN3GgUT+LqZW+SxVuE1IdRJeVOG i8Mr6xIKNfSMnrkRIjq9wWowpxDhOtt5XUb+qiFY00eWcs+lHyDmSNN2LAPK2msw nVx7HrCuQ0/lvff/HM3FNqArIUqYFJn+muXnUhH1lSPQHlDSCnFr+t8rubOWs2fS WsDvke0KQeptv8OkG14XQPF4mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtfjsMg lTobfMsC4HWoXnRDTf6OMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtr8csT0FNGIAtGsqM/jTss9w5XMk95UkhaCvN7j9ZeWFx9sUNfAZA QWCXFk72qhNS23ZATelg7L+fHJpV0vn8Y9A6wxGJqFU8R/HPU6SGTaHttv//948k 9ZdtqLMYr92qTLjIi2ghAGG0FfOAATTgzf53X33riVyHh+z5xx5i6VitucdGTE4L gh6+0s8XLmFljhhgcuqPhHwmgOWBg0zdjzhlk8s/1Uom9q4f104V7ZlzL7wf1V5l NjeQEP2zIg4+4NRJt49nAm4BgnjcxWYpzggdOkSUF8mPOJ1qCkE2cYBwq24isb0a uaJ4PAgFCWxNHSN/eTKXSGRVOBQ8OzD/ -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:10 2025 by rpki-client