$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft File: Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json) Hash identifier: qghQ/OtvxPI8MsE6qu3SJcYTDalL0BlG7eF9+qJNP6Q= Subject key identifier: 28:2D:87:8A:5A:61:27:E6:1A:E1:7B:BA:2A:96:85:21:ED:51:3C:8C Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 Certificate issuer: /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft Manifest number: 8B Signing time: Sun 19 Oct 2025 09:52:10 +0000 Manifest this update: Sun 19 Oct 2025 09:52:10 +0000 Manifest next update: Sun 26 Oct 2025 09:52:10 +0000 Files and hashes: 1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: A4865OUeTj/zcKJt4C8b5bhhPbhB11tAQkIwkzIW9d4=) 2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: q8qRZFfAVzgIauqz1ihRf+xBJuLgyAO5SwoBoXxRRHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413 Validity Not Before: Oct 19 09:52:10 2025 GMT Not After : Oct 26 09:52:10 2025 GMT Subject: CN=68f4b4ca-c0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:6d:86:fa:df:62:5f:64:5d:58:62:36:4d: 80:13:2a:54:4d:4a:c9:76:ec:42:91:c8:5e:87:82: 78:ce:4d:d3:ef:17:87:2a:a1:11:0f:50:14:55:72: a4:14:bb:71:0c:91:96:eb:c0:46:29:40:df:07:00: e3:33:e9:d7:72:77:68:f0:f0:49:80:99:8c:60:e6: 04:60:ac:17:ca:e7:e2:ff:6e:68:71:5a:d9:6c:96: 99:a6:4e:28:ed:93:e9:30:e6:b7:ea:84:70:3a:8c: ed:6c:81:bc:d0:88:a3:19:88:57:86:0c:25:de:d5: 3b:5f:d0:b2:7c:3f:37:c5:dc:72:a9:a1:5d:ba:01: 83:ba:21:0f:bd:60:5f:e8:3b:11:ca:14:af:5b:12: 06:26:a4:87:aa:44:1a:93:68:38:06:98:ba:dd:7c: d0:03:c1:be:51:aa:e0:b6:11:58:6f:a9:2c:28:87: 8c:0b:97:07:14:66:fe:87:65:de:99:57:d1:b1:78: 49:56:d0:e5:06:42:f2:e3:24:6c:de:69:89:5c:64: f7:14:c0:d5:3e:d7:37:b9:6e:6f:38:92:4f:43:41: 7d:81:14:16:bc:72:cb:b9:8d:30:7f:c2:d2:23:52: 05:39:93:59:b3:a3:e5:05:fb:42:ef:b8:14:fc:7a: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2D:87:8A:5A:61:27:E6:1A:E1:7B:BA:2A:96:85:21:ED:51:3C:8C X509v3 Authority Key Identifier: keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2b:21:0d:5d:36:72:90:a2:9a:48:82:60:e5:13:1b:b4:be: 62:1d:0e:cf:bc:7e:d3:1c:af:4f:c3:78:ab:aa:99:5f:74:25: dd:09:ca:07:70:6c:0b:53:c6:3a:06:cc:d8:64:ac:5f:12:c1: 15:da:0e:b5:de:59:4f:9b:ec:aa:42:38:43:03:3c:ca:cf:76: 69:92:e2:b1:77:6b:cf:43:f6:f7:1e:4f:5a:bd:e0:55:2f:05: ac:f2:40:7c:b3:22:1b:8d:3b:50:44:c4:3e:6b:95:2f:db:5a: 97:a1:65:54:4f:3f:47:a3:3b:be:bc:32:f9:b9:01:f0:4f:6a: aa:75:86:43:96:a5:39:1d:c1:6f:02:dd:5e:12:1a:39:bf:fb: 01:c8:56:58:53:6c:9a:71:b6:b1:34:db:d0:cf:f8:6f:09:ba: c1:00:eb:bb:96:52:41:21:2b:7b:c8:80:66:4b:92:cb:03:15: ff:da:09:f6:a7:de:8c:86:8c:d0:8f:16:e7:d7:d6:ea:f8:79: 9b:09:f7:6a:4f:71:fc:d0:a5:84:ae:cc:ac:de:a6:41:90:64: b5:27:f4:c0:79:44:56:ec:b0:73:38:45:3b:93:5e:88:d6:9b: f7:d0:57:21:5d:7d:6d:97:5a:82:13:a3:39:42:7f:f7:16:8a: 06:5b:2e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNFMkUxMTAvBgNVBAUTKDI1QUMzRTQ4RjJFNThFODhDNjA1NDQ3OThFQzY3MjQw NzZCNTM0MTMwHhcNMjUxMDE5MDk1MjEwWhcNMjUxMDI2MDk1MjEwWjAYMRYwFAYD VQQDEw02OGY0YjRjYS1jMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrhthvrfYl9kXVhiNk2AEypUTUrJduxCkcheh4J4zk3T7xeHKqERD1AUVXKk FLtxDJGW68BGKUDfBwDjM+nXcndo8PBJgJmMYOYEYKwXyufi/25ocVrZbJaZpk4o 7ZPpMOa36oRwOoztbIG80IijGYhXhgwl3tU7X9CyfD83xdxyqaFdugGDuiEPvWBf 6DsRyhSvWxIGJqSHqkQak2g4Bpi63XzQA8G+UargthFYb6ksKIeMC5cHFGb+h2Xe mVfRsXhJVtDlBkLy4yRs3mmJXGT3FMDVPtc3uW5vOJJPQ0F9gRQWvHLLuY0wf8LS I1IFOZNZs6PlBftC77gU/Hpd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgth4pa YSfmGuF7uiqWhSHtUTyMMB8GA1UdIwQYMBaAFCWsPkjy5Y6IxgVEeY7GckB2tTQT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0UyRS9GRkEzNUYwNERE OTgxMUVGQTlBRjQzNDZDNEY5QUUwMi9KYXctU1BMbGpvakdCVVI1anNaeVFIYTFO Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phdy1TUExsam9qR0JVUjVqc1p5UUhhMU5CTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0UyRS9GRkEzNUYwNEREOTgxMUVGQTlBRjQzNDZDNEY5QUUwMi9KYXctU1BMbGpv akdCVVI1anNaeVFIYTFOQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZKyENXTZykKKaSIJg5RMbtL5iHQ7PvH7THK9Pw3irqplfdCXdCcoH cGwLU8Y6BszYZKxfEsEV2g613llPm+yqQjhDAzzKz3ZpkuKxd2vPQ/b3Hk9aveBV LwWs8kB8syIbjTtQRMQ+a5Uv21qXoWVUTz9Hozu+vDL5uQHwT2qqdYZDlqU5HcFv At1eEho5v/sByFZYU2yacbaxNNvQz/hvCbrBAOu7llJBISt7yIBmS5LLAxX/2gn2 p96MhozQjxbn19bq+HmbCfdqT3H80KWErsys3qZBkGS1J/TAeURW7LBzOEU7k16I 1pv30FchXX1tl1qCE6M5Qn/3FooGWy7S -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:53 2025 by rpki-client