$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft File: JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json) Hash identifier: EYKgTrd+ODZkDHnlO92LmjM9LmVCv4gYEnzr5/hxhs0= Subject key identifier: 8C:33:8F:DA:D9:72:91:66:96:AA:7F:DE:9C:9E:47:08:CA:0E:82:06 Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10 Certificate issuer: /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft Manifest number: 27 Signing time: Sun 19 Oct 2025 11:16:09 +0000 Manifest this update: Sun 19 Oct 2025 11:16:08 +0000 Manifest next update: Sun 26 Oct 2025 11:16:08 +0000 Files and hashes: 1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: 65JRsvy6K8ppivX/nIC3dRbxDHWv6mGP8bGPQz42hc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10 Validity Not Before: Oct 19 11:16:08 2025 GMT Not After : Oct 26 11:16:08 2025 GMT Subject: CN=68f4c878-9f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:42:0d:02:62:4a:e4:0e:94:2c:9a:8c:8c:98: 0a:cf:e3:19:d2:4e:e5:2d:ae:b5:da:96:2a:2d:42: 74:35:c3:d0:b3:1f:4e:0f:c4:64:06:43:a4:da:ec: cf:22:5a:8e:6f:b1:c7:99:c9:df:58:fa:d5:ec:3b: bb:8e:6e:fc:36:0f:f1:b7:a8:94:2b:e1:ff:13:aa: e9:32:9d:91:ed:e9:c1:05:fd:23:81:a7:a0:04:54: 21:3d:7b:dd:2d:9a:b6:17:7f:5b:c3:94:23:2e:19: 0d:1a:c8:78:a4:c2:31:83:47:a7:1c:2b:9e:eb:ad: 75:3d:bd:60:5f:28:c0:2b:14:62:fb:22:33:22:20: 14:35:fe:63:82:ff:89:c6:8e:a1:60:20:25:3e:02: 07:4c:44:9e:5c:3b:de:10:0b:01:f2:7c:b0:eb:90: e5:ad:20:7f:eb:62:a5:02:90:8e:9b:c8:0f:17:56: bf:d0:c1:98:3f:a7:98:4e:28:d2:ec:f6:c4:af:5e: 1e:1f:0c:03:22:65:c0:e6:c6:8f:bf:f3:55:27:18: a3:92:05:38:08:e9:c3:95:08:d2:7f:a2:80:8a:b7: 3c:0c:f2:86:c9:0c:8f:b7:40:42:d1:ea:1e:f0:85: 81:e7:1e:84:55:87:2e:40:20:d8:45:97:c2:16:24: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:33:8F:DA:D9:72:91:66:96:AA:7F:DE:9C:9E:47:08:CA:0E:82:06 X509v3 Authority Key Identifier: keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:32:b5:98:86:79:61:03:c1:a3:23:2c:da:42:58:63:93:86: 27:f4:82:cd:2b:2e:64:0d:21:3c:2f:b1:78:77:1a:73:26:76: 1c:3c:1b:da:a6:ba:53:2f:5a:10:f0:34:57:75:dc:c3:26:5a: 13:51:4a:1e:50:50:af:f9:1a:96:e2:72:31:5e:64:3f:dd:a6: 73:4c:92:31:4e:90:64:e4:d9:be:9a:50:b3:9e:16:fa:ec:8d: d8:fe:4b:ee:e2:81:1b:44:04:53:37:cc:a1:22:65:4a:2c:e0: 04:8d:ec:fe:52:69:69:b6:11:7e:ea:35:e9:2b:75:2c:24:cb: c1:12:41:e5:aa:09:e5:e8:11:70:d6:81:2e:97:51:87:0b:45: 55:ab:98:f4:7a:18:37:81:e6:3a:36:97:79:43:8b:d0:17:1e: 1f:1e:d1:e8:af:00:01:50:e5:5d:34:56:c2:67:86:c5:27:2d: 8d:f6:b1:29:58:35:f0:e5:13:ca:03:37:89:a5:5c:47:83:79: 5a:e6:1d:73:d7:1c:78:97:f2:09:f6:72:c7:bc:e8:de:3d:f2: a5:4e:98:a0:e2:6d:5a:40:b4:63:aa:a8:eb:71:19:8d:79:a3: e3:df:e1:3e:4b:51:fa:e8:6b:5b:fe:0b:1a:ad:c7:27:ae:99: 91:86:a7:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0MzRjExMC8GA1UEBRMoMjQ2NDI1MDExOTlENkMxREU5NkZBM0ZGMkVCRTY3N0Iw RTAzMEQxMDAeFw0yNTEwMTkxMTE2MDhaFw0yNTEwMjYxMTE2MDhaMBgxFjAUBgNV BAMTDTY4ZjRjODc4LTlmNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkQg0CYkrkDpQsmoyMmArP4xnSTuUtrrXaliotQnQ1w9CzH04PxGQGQ6Ta7M8i Wo5vsceZyd9Y+tXsO7uObvw2D/G3qJQr4f8TqukynZHt6cEF/SOBp6AEVCE9e90t mrYXf1vDlCMuGQ0ayHikwjGDR6ccK57rrXU9vWBfKMArFGL7IjMiIBQ1/mOC/4nG jqFgICU+AgdMRJ5cO94QCwHyfLDrkOWtIH/rYqUCkI6byA8XVr/QwZg/p5hOKNLs 9sSvXh4fDAMiZcDmxo+/81UnGKOSBTgI6cOVCNJ/ooCKtzwM8obJDI+3QELR6h7w hYHnHoRVhy5AINhFl8IWJIRhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjDOP2tly kWaWqn/enJ5HCMoOggYwHwYDVR0jBBgwFoAUJGQlARmdbB3pb6P/Lr5new4DDRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0Q3Mzc0MzdFNzMz MzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIzcGI2UF9McjVuZXc0RERS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkdRbEFSbWRiQjNwYjZQX0xyNW5ldzRERFJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QzNGL0Q3Mzc0MzdFNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIz cGI2UF9McjVuZXc0RERSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACMytZiGeWEDwaMjLNpCWGOThif0gs0rLmQNITwvsXh3GnMmdhw8G9qm ulMvWhDwNFd13MMmWhNRSh5QUK/5GpbicjFeZD/dpnNMkjFOkGTk2b6aULOeFvrs jdj+S+7igRtEBFM3zKEiZUos4ASN7P5SaWm2EX7qNekrdSwky8ESQeWqCeXoEXDW gS6XUYcLRVWrmPR6GDeB5jo2l3lDi9AXHh8e0eivAAFQ5V00VsJnhsUnLY32sSlY NfDlE8oDN4mlXEeDeVrmHXPXHHiX8gn2cse86N498qVOmKDibVpAtGOqqOtxGY15 o+Pf4T5LUfroa1v+CxqtxyeumZGGp90= -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:45 2025 by rpki-client