$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: h5YxVaZ8h6xSZTTzllUUMF/l74CB2WOxN6LFYp+voDU= Subject key identifier: 2F:4B:27:9F:70:53:3C:41:EA:83:21:ED:51:CA:91:42:A0:DD:FC:05 Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 59 Signing time: Sun 19 Oct 2025 10:33:49 +0000 Manifest this update: Sun 19 Oct 2025 10:33:49 +0000 Manifest next update: Sun 26 Oct 2025 10:33:48 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: haxmtgIGxT2antllQHSkyYbkfsjwi/+YFRIZZXCWiPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Oct 19 10:33:49 2025 GMT Not After : Oct 26 10:33:48 2025 GMT Subject: CN=68f4be8d-e875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:bd:11:9f:38:eb:70:8e:28:ef:ae:bd:16: 34:6c:97:05:88:e4:90:fe:32:b8:42:06:da:f6:60: f2:6e:a5:c8:30:1c:ed:41:09:ee:02:b6:75:a8:39: 14:48:12:bf:1c:3d:33:5f:90:99:98:0b:8c:3b:fe: de:41:77:09:50:a2:5c:c0:02:a4:a6:51:dc:46:af: a3:e6:71:c6:d2:f0:c8:81:82:99:a3:1c:d9:f0:b1: 4b:25:a8:76:48:6f:ed:41:fe:5c:b1:82:49:9a:71: ce:4b:15:f9:b1:06:c4:61:67:c9:e0:8b:18:9f:b0: 2a:79:b7:99:db:e6:7d:fa:68:74:d5:47:09:fc:f9: f7:d9:0f:27:9f:6b:d6:45:19:a4:5d:d1:79:49:7a: 23:96:d7:a0:dc:bc:80:3f:9b:d8:3d:46:1c:a0:c4: 26:05:2f:7d:24:83:4f:3d:e4:e0:dd:fa:a6:11:b0: 18:d0:78:00:c6:40:18:48:09:a8:b1:19:8a:f4:14: a8:32:37:fc:43:b3:9d:33:b2:e3:19:8e:51:20:a5: 98:de:0c:e0:39:8a:07:8a:56:07:f2:5b:5c:44:d1: 09:3d:77:da:e9:be:a9:36:b4:3f:e3:6e:2c:eb:7e: a4:cc:ca:3f:57:22:f5:0b:07:65:26:2b:c8:3e:26: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4B:27:9F:70:53:3C:41:EA:83:21:ED:51:CA:91:42:A0:DD:FC:05 X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:71:b9:0b:0e:95:d9:7e:6b:46:41:cd:f8:46:32:06:79:a3: e5:91:5b:bf:90:a3:34:c4:12:79:71:95:94:fb:cd:0b:da:fc: a9:23:eb:0d:f5:b7:d0:e0:23:4a:87:f8:2d:ad:98:17:12:d7: c2:29:ba:b5:5e:80:91:28:25:1d:f4:f0:22:8e:59:8a:f4:6b: b3:85:26:ec:d0:f6:6f:a7:0c:37:23:41:f2:eb:ce:d4:04:00: cc:4b:d7:68:ba:a1:24:a3:7e:0c:e9:f7:d9:9b:84:94:57:f4: a0:2b:ce:7e:59:70:53:ba:94:17:10:0d:3f:e6:64:68:78:e4: 45:f8:b4:35:a6:fc:12:b5:ae:b5:f6:94:ef:a0:67:9a:ac:aa: 78:88:a5:76:51:df:d4:d1:53:8a:42:02:0e:d4:1c:28:61:22: b6:15:92:2e:36:02:c5:d7:33:7c:17:3b:ac:df:5c:36:cf:c9: 9e:8a:0e:aa:88:98:70:dc:d6:bc:d1:d4:b8:ba:2b:00:62:16: a5:44:8e:68:05:20:80:3e:3e:81:e1:e3:12:4a:47:a7:1f:df: 61:7b:1c:a8:89:e5:ee:3b:d6:14:59:2c:d4:c6:71:1a:8b:5f: dd:d5:ad:37:a6:e6:49:32:c4:2f:e6:cd:9a:0a:f6:12:69:9f: 4a:03:7b:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTEwMTkxMDMzNDlaFw0yNTEwMjYxMDMzNDhaMBgxFjAUBgNV BAMTDTY4ZjRiZThkLWU4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdhL0RnzjrcI4o7669FjRslwWI5JD+MrhCBtr2YPJupcgwHO1BCe4CtnWoORRI Er8cPTNfkJmYC4w7/t5BdwlQolzAAqSmUdxGr6PmccbS8MiBgpmjHNnwsUslqHZI b+1B/lyxgkmacc5LFfmxBsRhZ8ngixifsCp5t5nb5n36aHTVRwn8+ffZDyefa9ZF GaRd0XlJeiOW16DcvIA/m9g9RhygxCYFL30kg0895ODd+qYRsBjQeADGQBhICaix GYr0FKgyN/xDs50zsuMZjlEgpZjeDOA5igeKVgfyW1xE0Qk9d9rpvqk2tD/jbizr fqTMyj9XIvULB2UmK8g+JjRNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL0snn3BT PEHqgyHtUcqRQqDd/AUwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZxuQsOldl+a0ZBzfhGMgZ5o+WRW7+QozTEEnlxlZT7zQva/Kkj6w31 t9DgI0qH+C2tmBcS18IpurVegJEoJR308CKOWYr0a7OFJuzQ9m+nDDcjQfLrztQE AMxL12i6oSSjfgzp99mbhJRX9KArzn5ZcFO6lBcQDT/mZGh45EX4tDWm/BK1rrX2 lO+gZ5qsqniIpXZR39TRU4pCAg7UHChhIrYVki42AsXXM3wXO6zfXDbPyZ6KDqqI mHDc1rzR1Li6KwBiFqVEjmgFIIA+PoHh4xJKR6cf32F7HKiJ5e471hRZLNTGcRqL X93VrTem5kkyxC/mzZoK9hJpn0oDe8g= -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:53 2025 by rpki-client