$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft File: JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json) Hash identifier: kJ4u7+HWH3L7RJpx7kzOOHKkYFJwn6R4wpDwja+n484= Subject key identifier: B9:8F:9F:1C:D9:3F:56:7F:B6:2C:B6:C6:28:2E:0E:DB:55:91:FF:A5 Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 Certificate issuer: /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft Manifest number: 0691 Signing time: Sat 18 Oct 2025 23:52:26 +0000 Manifest this update: Sat 18 Oct 2025 23:52:25 +0000 Manifest next update: Sat 25 Oct 2025 23:52:25 +0000 Files and hashes: 1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: U5XksboitJ0Fh/3zZf0A/pADcq1dYhDuzi6bvwYSRlY=) 2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00E, serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Validity Not Before: Oct 18 23:52:25 2025 GMT Not After : Oct 25 23:52:25 2025 GMT Subject: CN=68f4283a-e15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:62:02:72:fb:ae:80:3c:1c:ac:b9:05:2b: 3a:13:88:b8:9d:cb:48:06:ca:0e:9c:eb:de:12:fd: 18:a2:b9:26:51:7c:24:66:ac:49:37:30:86:29:cc: b4:47:05:a5:15:54:39:5f:c0:75:7a:1a:d6:a1:c8: ee:7b:d4:5a:9f:2f:5c:06:bc:bc:f8:cc:a2:b8:e9: c2:2c:eb:46:f4:bf:e9:d7:94:11:a0:98:09:ef:b3: fa:30:b2:d6:c4:d3:43:c7:b7:8b:e6:7d:98:c9:60: d8:48:57:66:70:5e:64:bb:6b:0b:6f:cc:41:4f:a2: 88:6a:61:b5:3c:04:3a:d3:d7:b1:06:66:89:c4:e6: fc:4c:40:4f:9a:25:57:c4:e2:1d:ab:f6:99:4b:f2: 58:ec:e7:90:f3:b3:24:9e:11:bc:3a:6a:21:1f:bb: d7:ba:da:fc:09:48:39:89:2b:14:9b:47:89:f7:5b: 60:68:02:0c:c6:f3:b2:b8:10:3f:d1:ab:cd:e6:2a: 1c:aa:83:eb:31:48:2a:19:d8:35:85:48:33:58:15: 34:d3:e9:de:07:86:10:fc:ea:cd:c0:11:70:32:df: 17:96:7c:3f:ef:d1:cb:ca:97:41:7e:41:4d:bd:b1: f4:2a:52:8f:85:0c:31:44:6b:dc:9b:64:aa:d8:1d: 9e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8F:9F:1C:D9:3F:56:7F:B6:2C:B6:C6:28:2E:0E:DB:55:91:FF:A5 X509v3 Authority Key Identifier: keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:65:98:07:d7:12:76:07:18:53:ed:ae:23:03:b2:b3:6e:2f: 62:9c:fb:de:17:52:54:c6:28:56:97:66:61:36:19:a8:89:1e: 45:cf:3e:56:60:41:0b:72:48:c1:b1:13:59:82:af:d1:ef:a2: af:f1:63:d2:00:d6:9b:1c:4b:5b:ca:2e:e1:98:bf:0f:d5:7f: 37:b7:76:83:4b:4a:a0:20:08:26:72:a2:90:fc:24:a3:ea:9a: 4a:01:66:d9:24:dd:34:a4:54:9e:55:f0:3f:2f:db:3a:38:b3: 0b:df:52:a9:42:4e:69:92:e4:b1:9d:86:0b:d0:62:6d:b9:50: da:a7:a3:ba:78:63:cf:ec:1e:11:fa:0b:75:68:bb:74:27:a0: 27:cb:c1:11:a7:66:b2:51:cf:25:4b:45:79:12:93:9c:0c:b0: f4:d9:79:ab:91:a1:50:41:e2:93:cb:82:cd:8a:76:1a:b2:50: 93:9b:5d:f8:17:8d:fb:46:f5:b6:46:1a:85:b3:cc:15:93:58: 23:ed:f3:d9:41:8c:c4:e5:ff:da:82:1a:46:c1:20:0d:94:46: 5c:02:26:46:58:49:38:90:f2:88:41:b2:2f:92:b3:ea:5a:55: 63:8d:0b:0e:78:7c:fb:42:44:35:bb:d0:0e:08:06:26:26:d1: 9d:a0:4c:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEUxMTAvBgNVBAUTKDI2QThDODRDMjBEMDJBN0ZDNEFFRURFMTU1QzBCMzFC MDhFRTdCNjcwHhcNMjUxMDE4MjM1MjI1WhcNMjUxMDI1MjM1MjI1WjAYMRYwFAYD VQQDEw02OGY0MjgzYS1lMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1d1iAnL7roA8HKy5BSs6E4i4nctIBsoOnOveEv0YorkmUXwkZqxJNzCGKcy0 RwWlFVQ5X8B1ehrWocjue9Rany9cBry8+MyiuOnCLOtG9L/p15QRoJgJ77P6MLLW xNNDx7eL5n2YyWDYSFdmcF5ku2sLb8xBT6KIamG1PAQ609exBmaJxOb8TEBPmiVX xOIdq/aZS/JY7OeQ87MknhG8OmohH7vXutr8CUg5iSsUm0eJ91tgaAIMxvOyuBA/ 0avN5iocqoPrMUgqGdg1hUgzWBU00+neB4YQ/OrNwBFwMt8Xlnw/79HLypdBfkFN vbH0KlKPhQwxRGvcm2Sq2B2eUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmPnxzZ P1Z/tiy2xiguDttVkf+lMB8GA1UdIwQYMBaAFCaoyEwg0Cp/xK7t4VXAsxsI7ntn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRS9DNkI1N0M4RThD OTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtuX0VydTNoVmNDekd3anVl MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pxaklUQ0RRS25fRXJ1M2hWY0N6R3dqdWUyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRS9DNkI1N0M4RThDOTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtu X0VydTNoVmNDekd3anVlMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzZZgH1xJ2BxhT7a4jA7Kzbi9inPveF1JUxihWl2ZhNhmoiR5Fzz5W YEELckjBsRNZgq/R76Kv8WPSANabHEtbyi7hmL8P1X83t3aDS0qgIAgmcqKQ/CSj 6ppKAWbZJN00pFSeVfA/L9s6OLML31KpQk5pkuSxnYYL0GJtuVDap6O6eGPP7B4R +gt1aLt0J6Any8ERp2ayUc8lS0V5EpOcDLD02XmrkaFQQeKTy4LNinYaslCTm134 F437RvW2RhqFs8wVk1gj7fPZQYzE5f/aghpGwSANlEZcAiZGWEk4kPKIQbIvkrPq WlVjjQsOeHz7QkQ1u9AOCAYmJtGdoEzk -----END CERTIFICATE-----Generated at Mon Oct 20 04:21:07 2025 by rpki-client