$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: nTuvVSdMqE/3IJThkXdJTfX+wRg09TC6c+arLbMFbMo= Subject key identifier: 37:C4:2D:D0:07:38:B7:89:FC:62:15:6D:3D:81:B8:BD:ED:BC:67:63 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 12D4 Signing time: Sat 18 Oct 2025 20:31:47 +0000 Manifest this update: Sat 18 Oct 2025 20:31:46 +0000 Manifest next update: Sat 25 Oct 2025 20:31:46 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: hg9ODpfvtmkEfVBVx/39tOizIR+1jVtkFZmtD5HqAZA=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Oct 18 20:31:46 2025 GMT Not After : Oct 25 20:31:46 2025 GMT Subject: CN=68f3f933-b3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:39:fc:89:8f:8a:39:ca:f2:97:6a:41:01: 1c:1a:8b:bd:6a:3b:59:af:a3:96:04:c2:d7:81:54: 14:63:a0:a0:8f:ec:d8:d6:f9:64:13:46:07:b6:83: 16:cd:29:fe:13:4f:dd:e4:97:ec:d7:ab:af:da:43: 14:9b:e1:79:f0:c9:af:ec:79:29:1c:9e:bd:33:d1: 96:c2:33:7d:2f:98:e9:a1:d5:1f:e3:98:dc:a0:29: f2:2d:fb:d1:28:a2:4b:52:93:83:5c:50:34:74:e8: 15:d6:6a:ed:08:12:33:f4:ab:86:59:26:9b:24:4a: 89:ee:65:e5:ef:07:85:ed:b0:a8:3c:b2:f4:01:84: 08:96:cd:5e:d9:c4:6b:37:a4:16:d8:65:9b:9d:9e: 15:e6:7d:0e:78:fa:e5:d3:1d:7a:c0:82:0e:03:b9: 8f:3d:07:67:58:df:ea:32:e4:95:98:0d:29:af:74: c5:e4:50:12:c7:35:f6:80:ca:de:68:22:b2:e6:32: 1a:bd:65:3b:35:ed:16:38:5f:56:de:bf:39:82:f7: 8e:f5:3c:a3:3b:4a:fd:8f:29:f7:0b:7d:01:62:54: ca:d3:8b:0b:58:cf:20:3f:76:31:97:6c:30:9f:67: da:d4:24:52:1d:c0:23:15:5e:4f:a9:18:ed:4d:a6: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:2D:D0:07:38:B7:89:FC:62:15:6D:3D:81:B8:BD:ED:BC:67:63 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e1:fc:34:2f:d3:73:53:f1:10:f8:f9:29:d3:fb:b8:11:f7: 26:8b:90:6f:b5:b2:fa:c3:d6:ca:2d:cf:67:e3:bc:08:c7:b5: 2c:9c:4e:f1:40:a1:17:ef:8d:1d:20:43:43:a4:ca:3b:40:4c: ec:40:dd:ce:20:a1:11:b2:8a:39:3e:22:87:3c:53:0d:d4:3e: 27:b6:26:fc:d3:b5:7f:01:7b:26:b1:19:7a:f8:ab:69:a4:20: 85:00:41:82:c3:c4:90:1f:0f:2a:60:20:95:c3:96:ad:96:f0: 7d:c7:2d:af:c1:22:c5:91:e6:e1:06:4f:e2:47:fc:09:7b:57: fc:c6:ec:51:5b:ab:04:39:a6:b3:c4:c2:b1:5f:d6:0f:4e:07: 3e:8e:a1:bb:ee:16:85:31:66:08:fe:7c:eb:23:45:50:9c:87: 8d:9a:63:d9:7a:61:d0:79:b2:e3:62:ca:21:2d:29:91:2b:c1: 6c:24:be:34:9c:5f:20:6d:73:51:b8:05:e3:04:47:bd:7e:0c: bf:ca:91:bc:e7:1b:81:77:f7:8b:3d:31:ca:4f:02:cd:f9:e0: 7a:74:3d:1e:e5:e1:f1:98:29:81:13:98:be:ba:b1:5f:ea:55: 4c:8a:b8:d3:7d:8b:3c:b4:0d:b5:f8:3d:4b:ce:35:11:b8:ed: 4b:fc:a9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUxMDE4MjAzMTQ2WhcNMjUxMDI1MjAzMTQ2WjAYMRYwFAYD VQQDEw02OGYzZjkzMy1iM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWg5/ImPijnK8pdqQQEcGou9ajtZr6OWBMLXgVQUY6Cgj+zY1vlkE0YHtoMW zSn+E0/d5Jfs16uv2kMUm+F58Mmv7HkpHJ69M9GWwjN9L5jpodUf45jcoCnyLfvR KKJLUpODXFA0dOgV1mrtCBIz9KuGWSabJEqJ7mXl7weF7bCoPLL0AYQIls1e2cRr N6QW2GWbnZ4V5n0OePrl0x16wIIOA7mPPQdnWN/qMuSVmA0pr3TF5FASxzX2gMre aCKy5jIavWU7Ne0WOF9W3r85gveO9TyjO0r9jyn3C30BYlTK04sLWM8gP3Yxl2ww n2fa1CRSHcAjFV5PqRjtTaZj7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfELdAH OLeJ/GIVbT2BuL3tvGdjMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm4fw0L9NzU/EQ+Pkp0/u4Efcmi5BvtbL6w9bKLc9n47wIx7UsnE7x QKEX740dIENDpMo7QEzsQN3OIKERsoo5PiKHPFMN1D4ntib807V/AXsmsRl6+Ktp pCCFAEGCw8SQHw8qYCCVw5atlvB9xy2vwSLFkebhBk/iR/wJe1f8xuxRW6sEOaaz xMKxX9YPTgc+jqG77haFMWYI/nzrI0VQnIeNmmPZemHQebLjYsohLSmRK8FsJL40 nF8gbXNRuAXjBEe9fgy/ypG85xuBd/eLPTHKTwLN+eB6dD0e5eHxmCmBE5i+urFf 6lVMirjTfYs8tA21+D1LzjURuO1L/KmN -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:34 2025 by rpki-client