$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json) Hash identifier: Kp2RGcMMbpMaQSqBHBmSktQYoccJGWYcdPa0gjiWxVA= Subject key identifier: FA:8A:75:30:19:66:81:2E:27:5C:19:BD:EA:8C:D6:E4:55:7A:CD:3E Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft Manifest number: 01C2 Signing time: Sun 19 Oct 2025 05:25:34 +0000 Manifest this update: Sun 19 Oct 2025 05:25:33 +0000 Manifest next update: Sun 26 Oct 2025 05:25:33 +0000 Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: xGAT23EBflOlCgmN4yp1wGhdqs4oaWfxvp7ptcPtHBU=) 2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: yNzSo18Zr+VZZ8+QcBD6VKrhKtuzioN93vYAY/qtNGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: Oct 19 05:25:33 2025 GMT Not After : Oct 26 05:25:33 2025 GMT Subject: CN=68f4764e-d668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:6c:28:06:ce:af:09:54:fc:5e:91:c6:bd: 9a:94:8b:00:d0:07:6f:94:b1:9e:9b:50:fe:47:a1: ca:89:20:13:c9:7c:bd:31:b0:fd:5c:83:08:f4:98: a9:98:f2:bf:fa:86:87:75:26:6e:3b:95:7d:23:9a: ae:7c:33:ab:4c:a6:91:ff:12:17:65:41:50:4c:ad: 43:9a:45:a5:e1:56:ab:6e:f0:4a:72:33:73:63:1b: 5f:20:ba:b6:48:96:67:20:c8:c2:03:84:8c:cc:7c: 41:58:46:c2:ed:18:1b:db:08:eb:45:0a:33:87:8b: 91:da:fc:a6:e4:dc:36:d1:28:08:c9:b9:b9:8b:7e: 87:0b:3a:8e:6b:f9:48:ef:e1:28:d9:0a:bf:7b:2a: 8e:55:8b:0b:bb:a7:8f:09:31:6a:bc:08:75:8d:f9: 46:00:66:70:74:1e:89:ba:15:9d:9d:14:98:97:89: 54:53:4b:8f:67:c3:27:c5:da:45:2e:ef:29:33:81: b0:ae:e2:44:91:d3:e6:d8:21:89:3f:96:57:54:44: 2b:cd:c3:29:93:fc:99:2f:45:a2:50:ce:14:1d:2b: 9a:e0:58:2c:ec:4f:74:48:9a:3f:dc:8b:9f:f1:c4: 82:f2:ae:0a:9a:d7:a9:ac:bb:de:1b:54:10:5c:b4: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8A:75:30:19:66:81:2E:27:5C:19:BD:EA:8C:D6:E4:55:7A:CD:3E X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c7:a4:3b:f7:cd:5a:78:2f:1a:43:bc:8b:de:c6:5e:2f:a2: ab:46:dd:68:70:4d:b4:e2:5b:c5:c4:4a:0c:8c:8e:99:07:2f: b0:22:5b:57:18:91:f9:c8:90:98:33:fe:a9:e3:03:be:49:6f: 6a:af:40:10:ac:db:ed:48:fa:f7:fc:14:15:68:65:a9:5e:d3: 5d:33:e8:14:a5:87:2f:62:31:fa:69:b4:5f:d6:e5:67:92:48: 44:1a:af:23:cc:c2:e6:49:67:25:17:44:7a:11:8f:fc:7b:43: 09:9d:63:28:20:97:60:c5:7e:f9:d8:18:ea:54:3a:15:fe:87: 01:50:a1:b5:64:a8:65:89:8f:8a:db:f8:63:2f:5e:91:65:b1: bd:7f:70:9b:9f:7e:97:81:08:25:e6:63:73:26:49:36:37:95: 0e:e3:92:6e:5d:71:0c:24:90:c2:78:ce:3f:39:9c:10:ea:a2: 7c:2a:1c:72:d6:4d:6c:ac:3f:ad:80:ff:6e:fe:fb:2c:7b:6e: be:16:bf:cd:f1:7d:aa:0e:da:e2:40:c9:e3:1e:99:72:8e:2c: f7:f0:03:4a:bb:c1:bb:71:ca:21:31:0c:6e:41:d3:77:11:dc: 09:36:15:81:9c:8f:b2:9e:ca:95:bb:ac:5b:79:7d:2a:da:22: 1d:80:3b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUxMDE5MDUyNTMzWhcNMjUxMDI2MDUyNTMzWjAYMRYwFAYD VQQDEw02OGY0NzY0ZS1kNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrZsKAbOrwlU/F6Rxr2alIsA0AdvlLGem1D+R6HKiSATyXy9MbD9XIMI9Jip mPK/+oaHdSZuO5V9I5qufDOrTKaR/xIXZUFQTK1DmkWl4VarbvBKcjNzYxtfILq2 SJZnIMjCA4SMzHxBWEbC7Rgb2wjrRQozh4uR2vym5Nw20SgIybm5i36HCzqOa/lI 7+Eo2Qq/eyqOVYsLu6ePCTFqvAh1jflGAGZwdB6JuhWdnRSYl4lUU0uPZ8MnxdpF Lu8pM4GwruJEkdPm2CGJP5ZXVEQrzcMpk/yZL0WiUM4UHSua4Fgs7E90SJo/3Iuf 8cSC8q4KmteprLveG1QQXLTcWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqKdTAZ ZoEuJ1wZveqM1uRVes0+MB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK b3laczRJT2xlY3JST2xnR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZx6Q7981aeC8aQ7yL3sZeL6KrRt1ocE204lvFxEoMjI6ZBy+wIltX GJH5yJCYM/6p4wO+SW9qr0AQrNvtSPr3/BQVaGWpXtNdM+gUpYcvYjH6abRf1uVn kkhEGq8jzMLmSWclF0R6EY/8e0MJnWMoIJdgxX752BjqVDoV/ocBUKG1ZKhliY+K 2/hjL16RZbG9f3Cbn36XgQgl5mNzJkk2N5UO45JuXXEMJJDCeM4/OZwQ6qJ8Khxy 1k1srD+tgP9u/vsse26+Fr/N8X2qDtriQMnjHplyjiz38ANKu8G7ccohMQxuQdN3 EdwJNhWBnI+ynsqVu6xbeX0q2iIdgDsC -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:44 2025 by rpki-client