$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json) Hash identifier: bL/5zqxmeBu7GkttviXcMPZ0akyFkmq1SF2kt6+f+UA= Subject key identifier: 5D:2A:1C:63:09:2C:88:AD:19:BD:DF:32:25:B7:F7:86:A1:57:59:70 Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 253D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft Manifest number: 2527 Signing time: Sat 18 Oct 2025 15:59:23 +0000 Manifest this update: Sat 18 Oct 2025 15:59:23 +0000 Manifest next update: Sat 25 Oct 2025 15:59:23 +0000 Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: KSkeh77cuSl+LinV+faaZ/gef7L1vKYvc3EvGIgjON8=) 2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: N5Vn59/DXOfi3X7rqOdzQLvOw6/oh8X23e/dgbXYsyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9533 (0x253d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: Oct 18 15:59:23 2025 GMT Not After : Oct 25 15:59:23 2025 GMT Subject: CN=68f3b95b-f724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:eb:8c:bc:ee:81:c7:d8:ab:2c:4b:7e:98: 00:b7:44:43:39:83:40:68:c3:99:72:2d:cc:4c:b9: 72:f3:6c:81:61:06:eb:6d:87:ac:7c:de:4c:c3:2a: 12:03:6b:d8:1a:40:b2:55:db:a7:20:fc:96:e8:81: ec:6a:e4:8a:82:80:af:f8:fa:46:ac:f6:4a:bb:6c: e9:05:1f:4d:12:7f:f9:b7:f7:77:b0:60:66:b2:b8: 49:97:ec:78:4b:aa:52:1a:e2:4f:72:06:2c:e5:f7: d4:00:f3:3b:f7:30:ca:58:a9:cc:f9:af:7f:fa:62: a1:64:87:97:9c:31:9a:11:6d:e3:08:92:44:6e:b4: 69:96:d7:fb:c5:fe:bb:9b:5b:67:9c:e7:06:6b:72: 2c:cd:29:01:16:d7:59:2d:70:fb:82:8c:7c:4f:74: 1e:bb:ae:ed:ac:31:08:00:75:51:0d:bc:85:6e:88: a6:3e:14:13:3a:e6:6f:02:aa:8b:e4:f7:be:5f:a8: ae:ed:5c:5d:59:cc:99:a1:4b:14:ef:57:5e:d7:01: 7b:aa:f2:c9:d8:a3:14:8a:87:aa:fd:15:6e:ff:ac: d1:c0:b0:ad:e9:72:de:16:82:f7:37:77:1b:79:20: 72:23:bc:3d:6d:e5:1f:7d:a9:5e:36:e9:de:e7:68: d5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2A:1C:63:09:2C:88:AD:19:BD:DF:32:25:B7:F7:86:A1:57:59:70 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:74:6a:6c:3b:6c:c1:88:a6:0d:24:d7:1b:b2:57:a1:5e:b9: 54:64:04:ad:c2:37:09:6f:9a:0b:75:63:67:c3:7d:09:94:88: 8f:d3:fc:df:c8:d5:7a:a0:1b:7e:83:0f:a6:e8:0f:27:68:4f: 5c:e2:47:ed:ef:6e:d1:8e:7c:df:3f:64:a0:cb:05:70:6f:80: ee:bb:b6:1f:b4:25:c3:57:d8:77:18:84:d3:8f:87:81:88:a2: 90:1a:1a:c3:e7:67:7b:03:bc:c3:05:1a:61:bf:cd:6c:99:32: 30:82:41:38:b1:25:f0:f6:70:69:af:03:28:52:7b:98:80:e9: 38:3d:f0:17:f0:e3:df:e0:36:1f:3d:79:69:0c:82:c0:25:2b: b5:74:9b:31:fa:0c:01:5a:0b:f9:0c:79:11:8d:33:c3:cd:e0: 92:06:3b:bb:b8:8c:10:0e:22:a4:6a:5f:f7:04:39:2a:d4:e5: 9f:5e:97:64:74:3b:3a:e9:8a:7e:fb:2b:3e:ec:7a:72:c6:55: c9:bd:bf:a3:98:ef:75:9d:9e:45:c4:ad:2e:5d:89:22:2f:25: cf:ec:1f:04:9f:16:6c:bc:6f:a0:9a:e0:21:0c:bf:fd:3d:a4: 6b:53:f0:9f:14:0c:6d:20:4f:46:eb:f0:73:19:c0:7b:3f:ca: 08:e4:88:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjUxMDE4MTU1OTIzWhcNMjUxMDI1MTU1OTIzWjAYMRYwFAYD VQQDEw02OGYzYjk1Yi1mNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSTrjLzugcfYqyxLfpgAt0RDOYNAaMOZci3MTLly82yBYQbrbYesfN5MwyoS A2vYGkCyVdunIPyW6IHsauSKgoCv+PpGrPZKu2zpBR9NEn/5t/d3sGBmsrhJl+x4 S6pSGuJPcgYs5ffUAPM79zDKWKnM+a9/+mKhZIeXnDGaEW3jCJJEbrRpltf7xf67 m1tnnOcGa3IszSkBFtdZLXD7gox8T3Qeu67trDEIAHVRDbyFboimPhQTOuZvAqqL 5Pe+X6iu7VxdWcyZoUsU71de1wF7qvLJ2KMUioeq/RVu/6zRwLCt6XLeFoL3N3cb eSByI7w9beUffaleNune52jVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0qHGMJ LIitGb3fMiW394ahV1lwMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V VkhJRHZRVVdqTU5rblZaTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUdGpsO2zBiKYNJNcbslehXrlUZAStwjcJb5oLdWNnw30JlIiP0/zf yNV6oBt+gw+m6A8naE9c4kft727RjnzfP2SgywVwb4Duu7YftCXDV9h3GITTj4eB iKKQGhrD52d7A7zDBRphv81smTIwgkE4sSXw9nBprwMoUnuYgOk4PfAX8OPf4DYf PXlpDILAJSu1dJsx+gwBWgv5DHkRjTPDzeCSBju7uIwQDiKkal/3BDkq1OWfXpdk dDs66Yp++ys+7HpyxlXJvb+jmO91nZ5FxK0uXYkiLyXP7B8EnxZsvG+gmuAhDL/9 PaRrU/CfFAxtIE9G6/BzGcB7P8oI5IjU -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:12 2025 by rpki-client