$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: /L6AxEhw/Q9AcD3s/+HOdJ9ICiDKdZ07X2RKu0RZP5c= Subject key identifier: 01:30:C1:0B:EA:9B:26:98:05:51:99:6F:86:FA:74:18:46:54:F7:87 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 014B Signing time: Sun 19 Oct 2025 07:03:44 +0000 Manifest this update: Sun 19 Oct 2025 07:03:44 +0000 Manifest next update: Sun 26 Oct 2025 07:03:44 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: 9t4CvR6ZX0RCKyeIPHJYtOScY/D/amFDUsnXFG80DSA=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Oct 19 07:03:44 2025 GMT Not After : Oct 26 07:03:44 2025 GMT Subject: CN=68f48d50-ec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:35:64:a3:57:9a:50:63:8b:40:9a:fb:bc: 7f:bf:42:66:00:cc:0c:44:d9:61:0a:d1:d1:f3:3c: c8:39:db:45:50:23:da:70:d8:f4:64:05:3b:34:a0: f7:13:bc:79:56:1f:82:d2:c4:26:69:64:8f:5c:4f: 3b:fb:7c:04:30:98:22:07:ce:c5:3e:d3:f2:af:43: 15:e5:a9:22:eb:f0:bf:74:61:97:38:65:5f:69:a8: ee:c5:0e:fd:73:3e:aa:b5:00:8c:61:d8:e6:23:1c: ee:80:1c:c2:3a:dc:e1:49:b0:4c:86:1d:6d:c0:88: 99:4e:45:b7:db:fd:15:77:5e:eb:f0:f6:12:70:1e: 64:8f:1f:9c:6c:08:06:c2:48:80:d9:23:40:b4:d1: b9:20:ff:41:2b:e8:87:08:f1:c7:ed:a8:ad:81:0f: 1e:eb:3f:20:64:31:4b:d5:45:16:d1:f5:63:66:3c: e1:6e:e3:1e:95:d7:9b:12:05:82:7c:8b:2b:a8:73: 33:54:51:bc:12:f6:3a:3e:bf:99:a0:2e:4f:64:b1: 86:00:ad:d6:75:3e:8c:17:63:26:79:7e:f2:e4:02: a1:a4:59:05:30:aa:93:b1:8f:31:1f:9b:a7:c5:5e: 14:aa:18:e8:26:e3:2f:bf:57:ac:9e:6a:f1:49:df: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:C1:0B:EA:9B:26:98:05:51:99:6F:86:FA:74:18:46:54:F7:87 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9b:14:41:28:19:d0:fa:01:65:8a:34:60:86:52:30:7a:e1: 42:40:b0:ba:0b:e6:83:55:0f:83:fc:76:a9:61:93:11:16:db: b4:13:cf:a3:f7:a0:33:25:96:99:4e:ab:7a:85:96:06:47:d2: 69:e2:73:1f:17:ee:d7:bd:20:55:df:c7:dc:c1:c5:9d:64:c8: 0a:3a:da:10:8b:87:4d:37:d3:9d:ad:27:49:59:3f:75:68:4c: 00:6d:ba:09:74:e9:a4:37:75:cf:12:ee:d9:da:80:78:93:31: b4:05:12:21:28:d7:bb:77:d0:ed:69:ab:da:56:94:97:42:6b: bd:73:61:35:74:98:82:b4:3e:ee:5f:21:71:a8:28:4c:63:87: cc:2a:db:e3:6b:72:ae:95:49:6c:e2:59:43:fe:9b:92:0c:7a: 6e:58:68:4e:b0:c5:98:8a:8b:45:1a:46:7e:9d:e4:e3:d9:b1: c9:9d:21:05:f3:dc:f1:b3:04:b3:ea:b7:b7:18:6e:5d:1c:93: 55:e7:5f:a2:0a:51:71:0f:e5:ca:fd:36:62:65:24:b1:08:b8: 82:9a:c0:56:36:96:74:cf:a8:34:99:74:be:c5:9c:6c:2b:af: 5c:d9:72:8c:b8:a3:eb:96:31:d7:af:18:af:b3:4b:d5:cd:26: 9d:84:1f:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUxMDE5MDcwMzQ0WhcNMjUxMDI2MDcwMzQ0WjAYMRYwFAYD VQQDEw02OGY0OGQ1MC1lYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlQ1ZKNXmlBji0Ca+7x/v0JmAMwMRNlhCtHR8zzIOdtFUCPacNj0ZAU7NKD3 E7x5Vh+C0sQmaWSPXE87+3wEMJgiB87FPtPyr0MV5aki6/C/dGGXOGVfaajuxQ79 cz6qtQCMYdjmIxzugBzCOtzhSbBMhh1twIiZTkW32/0Vd17r8PYScB5kjx+cbAgG wkiA2SNAtNG5IP9BK+iHCPHH7aitgQ8e6z8gZDFL1UUW0fVjZjzhbuMeldebEgWC fIsrqHMzVFG8EvY6Pr+ZoC5PZLGGAK3WdT6MF2MmeX7y5AKhpFkFMKqTsY8xH5un xV4UqhjoJuMvv1esnmrxSd+OkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEwwQvq myaYBVGZb4b6dBhGVPeHMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBemxRBKBnQ+gFlijRghlIweuFCQLC6C+aDVQ+D/HapYZMRFtu0E8+j 96AzJZaZTqt6hZYGR9Jp4nMfF+7XvSBV38fcwcWdZMgKOtoQi4dNN9OdrSdJWT91 aEwAbboJdOmkN3XPEu7Z2oB4kzG0BRIhKNe7d9DtaavaVpSXQmu9c2E1dJiCtD7u XyFxqChMY4fMKtvja3KulUls4llD/puSDHpuWGhOsMWYiotFGkZ+neTj2bHJnSEF 89zxswSz6re3GG5dHJNV51+iClFxD+XK/TZiZSSxCLiCmsBWNpZ0z6g0mXS+xZxs K69c2XKMuKPrljHXrxivs0vVzSadhB87 -----END CERTIFICATE-----Generated at Tue Oct 21 01:36:00 2025 by rpki-client