$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: K8q+gqCvyqF95t5NmHkcjID7HibruCt1fjBnW0PHB0o= Subject key identifier: 68:E9:A2:A8:16:54:B1:81:C6:64:34:B6:D3:DF:BD:2D:0F:3B:C4:59 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: ED Signing time: Sun 19 Oct 2025 08:18:23 +0000 Manifest this update: Sun 19 Oct 2025 08:18:22 +0000 Manifest next update: Sun 26 Oct 2025 08:18:22 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: G2aDRb5oWyGoiLk0m33jJFt7vWl0pOIl8Ie75x7e8jk=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: Q8jUoDfTBKkYt+wlmI66aJ+35Q4MifbD8LinqGUg/KY=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: KoaV0URvtmzdHrqA1z33gHV+eShaD03rJhOUSMjsP9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Oct 19 08:18:22 2025 GMT Not After : Oct 26 08:18:22 2025 GMT Subject: CN=68f49ecf-aa5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:77:48:ad:e5:32:a6:9e:e7:45:6e:a4:c2: 83:fc:a3:3c:f9:60:be:b9:69:80:23:bd:b6:72:19: 25:20:0a:75:87:e3:a4:a5:bc:25:2b:50:a7:83:e5: d9:3d:b1:34:4c:67:91:0b:c6:3c:f6:fd:dd:14:8a: 57:0d:d4:98:81:76:41:b7:f0:c4:7c:47:33:7c:98: 99:c9:49:e7:8e:e7:7a:7f:36:94:b2:b7:32:0f:42: 04:5b:64:e7:08:3c:be:51:35:bd:f3:5e:1c:fb:38: ed:46:fa:62:75:b5:71:a9:9f:ae:81:09:51:5f:a8: 2b:bc:4f:20:10:86:f4:7c:d8:1d:7e:9f:76:a4:fc: c8:78:35:06:56:6f:e2:23:a5:99:c9:54:40:08:b6: dc:91:3a:b1:8b:fc:69:1d:7e:4d:99:a2:6e:e8:75: 89:5a:21:6b:7b:2f:ac:cc:b7:a4:88:f7:d2:7e:75: 51:a5:33:0b:aa:41:39:ab:a8:da:56:ef:1b:8e:49: 34:b4:1a:5d:0b:9b:6c:b7:49:61:29:eb:04:c7:1b: 9e:f6:c4:8c:c7:49:58:36:f5:7d:86:71:f4:87:69: 87:49:f4:7f:f3:af:66:f7:57:ca:e4:7f:fc:e2:60: a6:72:d9:ea:d2:c8:29:18:d3:16:ae:88:79:65:2c: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:A2:A8:16:54:B1:81:C6:64:34:B6:D3:DF:BD:2D:0F:3B:C4:59 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:85:d5:af:b3:71:7b:22:1e:2d:de:de:4d:ac:6f:5f:eb:a1: c6:3a:f3:cf:b8:95:df:75:1f:1f:bd:85:3c:68:c3:6d:64:5e: 34:a4:1d:54:4b:01:69:d2:92:e0:99:39:64:f7:5d:aa:62:72: 4a:0d:e8:06:94:d9:fb:04:64:05:dd:d5:10:c5:63:71:ed:05: c9:77:cd:0b:a4:02:42:2d:b4:c6:3d:ee:40:ee:2e:d4:9e:e8: c0:c6:82:f9:b6:c6:d1:b6:d7:65:9f:00:af:4d:3e:1b:a5:ce: fb:a3:3b:61:00:12:7c:de:19:1f:13:7a:cf:25:c6:f1:31:52: 56:f3:03:b1:59:ef:e5:b5:6d:75:e9:4b:fc:49:e7:4a:16:2f: 64:61:fd:4c:44:42:c6:bb:09:59:c2:67:e1:7d:ea:ae:e0:55: 9b:26:d4:90:90:d1:e7:4f:af:d4:38:cf:14:b5:3c:3e:39:6a: ff:d2:f5:69:61:4c:3e:58:49:ed:77:97:d5:39:c5:e2:22:18: 64:70:78:8b:e4:42:82:88:87:dd:bb:47:5e:a5:2d:e1:d7:30: c3:41:8f:01:c0:d7:73:be:41:bb:f3:d8:23:02:a0:42:92:0a: 3f:87:69:b7:b2:c4:f6:3c:2e:c9:86:f1:2d:2c:a7:6c:26:21: 38:ff:65:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUxMDE5MDgxODIyWhcNMjUxMDI2MDgxODIyWjAYMRYwFAYD VQQDEw02OGY0OWVjZi1hYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Mx3SK3lMqae50VupMKD/KM8+WC+uWmAI722chklIAp1h+OkpbwlK1Cng+XZ PbE0TGeRC8Y89v3dFIpXDdSYgXZBt/DEfEczfJiZyUnnjud6fzaUsrcyD0IEW2Tn CDy+UTW9814c+zjtRvpidbVxqZ+ugQlRX6grvE8gEIb0fNgdfp92pPzIeDUGVm/i I6WZyVRACLbckTqxi/xpHX5NmaJu6HWJWiFrey+szLekiPfSfnVRpTMLqkE5q6ja Vu8bjkk0tBpdC5tst0lhKesExxue9sSMx0lYNvV9hnH0h2mHSfR/869m91fK5H/8 4mCmctnq0sgpGNMWroh5ZSyz5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjpoqgW VLGBxmQ0ttPfvS0PO8RZMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwhdWvs3F7Ih4t3t5NrG9f66HGOvPPuJXfdR8fvYU8aMNtZF40pB1U SwFp0pLgmTlk912qYnJKDegGlNn7BGQF3dUQxWNx7QXJd80LpAJCLbTGPe5A7i7U nujAxoL5tsbRttdlnwCvTT4bpc77ozthABJ83hkfE3rPJcbxMVJW8wOxWe/ltW11 6Uv8SedKFi9kYf1MRELGuwlZwmfhfequ4FWbJtSQkNHnT6/UOM8UtTw+OWr/0vVp YUw+WEntd5fVOcXiIhhkcHiL5EKCiIfdu0depS3h1zDDQY8BwNdzvkG789gjAqBC kgo/h2m3ssT2PC7JhvEtLKdsJiE4/2Wq -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:45 2025 by rpki-client