$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft File: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json) Hash identifier: zI5aJdZTR1otrkBXjikaPApKCHsoOKItcsNvGjS+3mc= Subject key identifier: BC:93:3B:DF:B8:2D:BD:FB:2A:8D:D8:99:0C:C9:59:57:69:1A:AB:57 Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 Certificate issuer: /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft Manifest number: 10BE Signing time: Sat 18 Oct 2025 18:57:54 +0000 Manifest this update: Sat 18 Oct 2025 18:57:54 +0000 Manifest next update: Sat 25 Oct 2025 18:57:54 +0000 Files and hashes: 1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: 3a2r8WL2BewS/v4bsVyWIWGIvCGAXZzdWKrg19sprLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Validity Not Before: Oct 18 18:57:54 2025 GMT Not After : Oct 25 18:57:54 2025 GMT Subject: CN=68f3e332-a038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:9e:db:24:8c:88:e5:ef:9f:2f:1e:59:c0: db:37:4c:93:8c:d6:0d:29:36:2b:65:74:ef:4a:39: c0:bf:cb:40:ea:f7:f7:06:1a:d0:06:64:91:8a:ff: 80:31:7f:1c:f2:ef:93:af:04:1a:ce:40:0e:8b:77: b5:50:06:b9:10:be:13:fd:c6:3c:b2:ee:65:a3:40: 7f:b2:d9:5a:26:ef:7d:c7:25:6b:3f:32:ca:0e:3e: 31:7e:db:a8:fe:c5:65:ea:13:36:6c:6f:47:7c:7a: 64:19:00:28:fa:6e:58:d2:0f:4b:50:43:32:3f:23: bd:1a:34:ce:f0:e4:35:5a:98:a2:29:01:e2:11:23: 74:67:68:d3:33:fd:cd:35:42:a3:7d:e3:c7:3a:08: 9d:66:92:9e:d4:16:e8:2e:76:83:5e:52:e8:14:f6: 1f:de:7a:5c:d1:55:27:90:1b:2f:40:b2:34:62:3e: 4d:02:47:cf:fb:1c:aa:95:9e:6f:e6:d9:98:0b:ac: 7d:9d:6f:bf:ed:81:2e:10:17:f9:91:8b:df:7a:9a: f4:13:8e:24:eb:18:bf:d3:d5:86:2c:08:fe:04:53: 7e:ab:2a:1c:fa:49:3d:2d:49:a5:50:71:c2:ed:61: 97:61:99:cc:66:8e:5a:51:13:ae:76:82:b2:86:a0: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:93:3B:DF:B8:2D:BD:FB:2A:8D:D8:99:0C:C9:59:57:69:1A:AB:57 X509v3 Authority Key Identifier: keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b8:1e:34:db:1e:0d:7a:e0:ba:53:76:fa:e8:3d:0b:ac:86: 01:79:77:5c:3b:8e:e5:72:53:22:9a:86:5e:ba:cf:dd:35:d3: 4e:b1:43:27:c1:a6:63:ea:0e:98:df:5b:2a:f8:56:59:e5:66: cc:4f:0e:90:7d:4a:47:a8:a4:59:7d:87:80:5a:b6:b7:66:92: 27:49:ef:04:69:24:2e:b1:51:95:ee:27:b7:fb:cb:62:da:4a: 69:79:5d:6c:88:b4:17:f4:32:91:d3:fc:bb:aa:2c:44:f4:69: 22:57:fb:22:31:b8:70:37:38:28:b2:f4:f9:26:df:6f:f3:e3: 6b:f6:7a:0a:c4:76:4e:6e:22:1d:1a:6c:74:d4:e8:5c:ed:db: 52:4d:2e:6d:76:4e:35:d3:b5:a0:63:d6:c3:05:dd:a6:e3:88: 24:ca:29:a2:a4:f8:cc:c6:93:09:78:f7:94:a0:9a:e1:da:22: 56:11:6b:9f:89:52:1f:1e:20:df:87:66:e0:f0:17:bb:95:5b: 52:ec:e1:2a:89:0c:d3:b3:54:43:07:28:59:a4:11:a8:5a:e7: 6f:a3:ed:e5:67:86:f3:74:8d:11:26:8f:1f:8c:36:ec:6c:d0: e3:82:12:dd:8c:b1:4f:49:63:bf:20:de:27:cc:aa:65:3b:36: 0c:ce:a5:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKDI0REFBN0E5QkFDNjU0OEQ4QUM2Q0QxMDU4MUM0QjdC RkQwNzY0NjUwHhcNMjUxMDE4MTg1NzU0WhcNMjUxMDI1MTg1NzU0WjAYMRYwFAYD VQQDEw02OGYzZTMzMi1hMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzWe2ySMiOXvny8eWcDbN0yTjNYNKTYrZXTvSjnAv8tA6vf3BhrQBmSRiv+A MX8c8u+TrwQazkAOi3e1UAa5EL4T/cY8su5lo0B/stlaJu99xyVrPzLKDj4xftuo /sVl6hM2bG9HfHpkGQAo+m5Y0g9LUEMyPyO9GjTO8OQ1WpiiKQHiESN0Z2jTM/3N NUKjfePHOgidZpKe1BboLnaDXlLoFPYf3npc0VUnkBsvQLI0Yj5NAkfP+xyqlZ5v 5tmYC6x9nW+/7YEuEBf5kYvfepr0E44k6xi/09WGLAj+BFN+qyoc+kk9LUmlUHHC 7WGXYZnMZo5aUROudoKyhqA6wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyTO9+4 Lb37Ko3YmQzJWVdpGqtXMB8GA1UdIwQYMBaAFCTap6m6xlSNisbNEFgcS3v9B2Rl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJMkt4czBRV0J4TGVfMEha R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcW5xYnJHVkkyS3hzMFFXQnhMZV8wSFpHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJ Mkt4czBRV0J4TGVfMEhaR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAluB402x4NeuC6U3b66D0LrIYBeXdcO47lclMimoZeus/dNdNOsUMn waZj6g6Y31sq+FZZ5WbMTw6QfUpHqKRZfYeAWra3ZpInSe8EaSQusVGV7ie3+8ti 2kppeV1siLQX9DKR0/y7qixE9GkiV/siMbhwNzgosvT5Jt9v8+Nr9noKxHZObiId Gmx01Ohc7dtSTS5tdk4107WgY9bDBd2m44gkyimipPjMxpMJePeUoJrh2iJWEWuf iVIfHiDfh2bg8Be7lVtS7OEqiQzTs1RDByhZpBGoWudvo+3lZ4bzdI0RJo8fjDbs bNDjghLdjLFPSWO/IN4nzKplOzYMzqX0 -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:16 2025 by rpki-client