$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft File: JqEcV_UL86H3onhKHUlNXomDYc0.mft (raw, json) Hash identifier: 7Q6v15QCYn3y1r9bDFo2nitlGIDF4bmOnwhM5Wj4vIU= Subject key identifier: DF:86:0A:2E:E9:74:81:6C:B1:03:BB:38:0F:C1:9F:C6:41:93:45:51 Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD Certificate issuer: /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft Manifest number: 3B Signing time: Sun 19 Oct 2025 10:57:59 +0000 Manifest this update: Sun 19 Oct 2025 10:57:58 +0000 Manifest next update: Sun 26 Oct 2025 10:57:58 +0000 Files and hashes: 1: JqEcV_UL86H3onhKHUlNXomDYc0.crl (hash: T9PDnpMMmmuqMenUXYAKGwz44XbyHc4eLhmVmFk+frM=) 2: 0CEE97B4563411F09FBF271BC4F9AE02.roa (hash: +5nsa0L3pEvZ7rt0LONhGmy6TtSxJKovU9i/lVSRT84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Validity Not Before: Oct 19 10:57:58 2025 GMT Not After : Oct 26 10:57:58 2025 GMT Subject: CN=68f4c436-5758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:ea:c4:f4:db:d3:34:87:43:f1:be:2c:57: 61:df:cb:5b:09:1c:c6:05:7c:55:6b:41:b7:14:25: 58:7c:e5:80:7a:8d:10:01:c6:05:95:59:53:1c:a9: ed:4a:95:41:cc:f5:08:a9:d9:d2:f7:85:2f:72:2a: 08:d8:68:54:da:ac:96:bd:33:93:be:37:7e:47:c0: d6:6f:a4:9f:d6:fe:40:92:32:45:5b:c6:a4:8b:e7: f6:27:fc:9e:1c:71:96:f1:50:e2:0b:f8:16:d0:09: 42:5b:ff:1e:32:e8:a2:b8:44:c4:6d:b2:52:08:cf: 35:ff:b5:7c:99:41:77:ab:2e:15:6a:c0:db:7b:94: 25:c8:c7:6c:17:b4:ef:3f:c6:18:40:46:84:89:02: 3f:75:25:b2:fb:4a:2d:db:3d:1c:d2:91:09:94:d4: 3a:34:b0:88:db:d9:16:23:37:eb:7b:33:c2:b3:d7: a6:02:ab:a2:df:3b:a5:a9:a9:ae:48:21:16:fa:05: be:42:3c:fc:06:3c:4b:64:75:bc:23:37:05:c9:f7: 39:9f:6e:23:6c:84:23:41:59:05:07:62:0f:b5:06: 91:57:49:42:85:99:7e:8e:2e:17:98:12:31:cb:f3: 4a:12:19:d7:84:fd:b2:0b:bb:61:03:a0:29:08:31: 9c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:86:0A:2E:E9:74:81:6C:B1:03:BB:38:0F:C1:9F:C6:41:93:45:51 X509v3 Authority Key Identifier: keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:00:e3:ad:1c:30:0d:da:7e:58:5e:a1:eb:bc:85:29:3f:39: db:1e:0c:46:7c:2d:8e:ff:33:a3:32:ee:db:ef:2e:72:6b:b4: 05:95:bd:c2:50:b4:56:cd:c6:f8:aa:db:84:74:d1:97:21:b2: 3e:a4:f3:54:fd:ae:39:90:46:33:be:81:3a:19:13:e2:0c:93: dd:4d:8b:a8:2a:ea:f1:2d:85:fa:9a:ee:f3:00:3d:68:de:d9: 18:f7:17:7e:96:b1:2c:c2:4b:c6:07:7a:6b:f1:f7:22:93:7d: 10:26:b3:28:21:86:30:78:1c:e5:b9:ec:9e:53:53:82:0a:63: 3f:b5:e1:da:cb:04:96:44:c9:bd:82:d4:40:2e:1b:72:da:34: db:56:70:dc:fe:7e:29:53:3b:63:e3:f1:c1:9a:6e:eb:f2:82: 9d:07:6a:1f:09:2e:6d:50:95:3e:61:eb:7b:dc:33:f4:45:d2: be:53:80:d2:3a:79:e5:72:26:4d:d3:fb:6a:75:e2:6f:64:ae: ff:9d:09:cf:c9:9f:e3:9e:09:b5:f4:04:60:ad:b4:88:48:47: e4:bd:f9:fb:c3:3e:91:f8:89:12:fe:ea:be:40:95:93:3c:2d: 59:47:e6:4d:e8:ab:7e:e8:f6:8d:c4:ea:d8:08:ba:2c:9f:8f: aa:64:3d:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoMjZBMTFDNTdGNTBCRjNBMUY3QTI3ODRBMUQ0OTRENUU4 OTgzNjFDRDAeFw0yNTEwMTkxMDU3NThaFw0yNTEwMjYxMDU3NThaMBgxFjAUBgNV BAMTDTY4ZjRjNDM2LTU3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0W+rE9NvTNIdD8b4sV2Hfy1sJHMYFfFVrQbcUJVh85YB6jRABxgWVWVMcqe1K lUHM9Qip2dL3hS9yKgjYaFTarJa9M5O+N35HwNZvpJ/W/kCSMkVbxqSL5/Yn/J4c cZbxUOIL+BbQCUJb/x4y6KK4RMRtslIIzzX/tXyZQXerLhVqwNt7lCXIx2wXtO8/ xhhARoSJAj91JbL7Si3bPRzSkQmU1Do0sIjb2RYjN+t7M8Kz16YCq6LfO6Wpqa5I IRb6Bb5CPPwGPEtkdbwjNwXJ9zmfbiNshCNBWQUHYg+1BpFXSUKFmX6OLheYEjHL 80oSGdeE/bILu2EDoCkIMZxtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU34YKLul0 gWyxA7s4D8GfxkGTRVEwHwYDVR0jBBgwFoAUJqEcV/UL86H3onhKHUlNXomDYc0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0VCMEY3NThFNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZIM29uaEtIVWxOWG9tRFlj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnFFY1ZfVUw4Nkgzb25oS0hVbE5Yb21EWWMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0VCMEY3NThFNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZI M29uaEtIVWxOWG9tRFljMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsA460cMA3aflheoeu8hSk/OdseDEZ8LY7/M6My7tvvLnJrtAWVvcJQ tFbNxviq24R00Zchsj6k81T9rjmQRjO+gToZE+IMk91Ni6gq6vEthfqa7vMAPWje 2Rj3F36WsSzCS8YHemvx9yKTfRAmsyghhjB4HOW57J5TU4IKYz+14drLBJZEyb2C 1EAuG3LaNNtWcNz+filTO2Pj8cGabuvygp0Hah8JLm1QlT5h63vcM/RF0r5TgNI6 eeVyJk3T+2p14m9krv+dCc/Jn+OeCbX0BGCttIhIR+S9+fvDPpH4iRL+6r5AlZM8 LVlH5k3oq37o9o3E6tgIuiyfj6pkPT4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:32 2025 by rpki-client