$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft File: JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft (raw, json) Hash identifier: tD/ZI4AmyheoaswFT9akuI28RuqiHY2BYAIXsHvQUzY= Subject key identifier: B1:95:B6:71:3A:0D:49:E4:81:21:82:27:14:F0:23:54:B3:97:DD:A1 Authority key identifier: 25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 Certificate issuer: /CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft Manifest number: F9 Signing time: Sun 19 Oct 2025 08:03:59 +0000 Manifest this update: Sun 19 Oct 2025 08:03:58 +0000 Manifest next update: Sun 26 Oct 2025 08:03:58 +0000 Files and hashes: 1: JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl (hash: r17UCqtdW5DMNrnFBFSv8yzuyfBs74MUzPCP4TiP1lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Validity Not Before: Oct 19 08:03:58 2025 GMT Not After : Oct 26 08:03:58 2025 GMT Subject: CN=68f49b6f-73d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:25:7a:c4:b6:dc:f0:20:ed:74:86:62:a8: d8:6c:2c:05:ab:20:b3:d1:55:96:2e:f0:54:91:52: 7a:ba:ab:69:79:87:d7:ee:5b:8b:20:0d:7b:3a:82: 49:15:42:b7:dd:d4:36:92:f2:13:57:9e:c0:23:3f: b3:5f:5b:aa:ae:61:6b:d9:ad:1a:9e:20:ed:29:ae: 16:8e:d3:3c:13:40:f4:13:17:6d:85:94:ec:c8:75: d6:df:8b:df:6a:67:4b:83:f7:d9:9d:1b:e2:af:2e: 86:d5:52:c5:60:94:15:28:2c:1c:dd:df:b1:9c:5f: 92:58:61:f6:89:a7:6c:87:00:e4:82:95:00:f2:a7: a5:25:02:6d:54:72:1a:5c:a1:e5:11:35:16:a4:02: 64:54:75:b3:5b:ac:e0:ac:33:89:fd:70:6e:48:cf: eb:72:9b:d0:d1:0b:81:77:b3:ea:39:cb:d5:03:8b: f3:bf:ce:86:3b:98:33:30:7c:4b:0e:58:ca:d1:c8: 93:6f:d2:bb:8c:8e:88:d1:21:11:28:12:3f:74:08: 09:f1:b3:6b:16:62:ab:26:96:19:0e:63:32:d3:97: 54:ab:c4:11:4e:3a:a7:55:dd:b3:1d:98:dc:8b:4d: 7c:7d:bb:7d:6e:3a:ad:a6:6e:59:cd:9d:70:3d:18: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:95:B6:71:3A:0D:49:E4:81:21:82:27:14:F0:23:54:B3:97:DD:A1 X509v3 Authority Key Identifier: keyid:25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f2:f7:a1:8a:c7:1f:e3:d0:5c:f9:6c:eb:b0:0e:09:a0:ec: 7e:ec:9a:49:18:bb:2e:ed:01:4c:56:39:6c:8d:10:48:b9:2c: a7:f8:c9:2e:f8:6c:27:23:66:6a:1e:22:0b:86:b9:fa:93:bc: 2d:79:2f:69:72:cd:32:25:c0:9e:5f:15:10:25:93:23:d8:b9: 9b:dd:f5:ba:36:4a:da:10:b0:00:4b:4e:55:66:f8:55:ae:71: 59:00:97:cf:51:2f:7c:76:39:c2:80:93:8c:6a:0b:b7:f8:29: 75:75:16:e7:22:b4:30:1d:db:26:27:30:67:3e:20:dd:0c:6d: bf:b0:32:bc:b0:bf:4d:5b:f2:02:e6:48:a2:62:23:81:a9:f6: 2b:07:82:8f:9d:b0:76:74:5d:31:1e:c0:9c:ce:a6:7a:6d:ec: f7:ec:7c:3e:50:68:59:db:e2:07:eb:ee:82:8e:f0:21:04:72: f9:93:df:aa:b4:e7:41:f2:69:4f:f8:92:a0:7f:b6:37:71:8b: f5:34:5d:e9:f3:2a:28:23:2a:57:51:f7:8d:0a:ab:e8:eb:09: 87:dc:55:82:25:dc:48:70:d5:6c:5e:4d:bb:ef:3a:f2:3b:25: 26:09:bf:07:07:a8:49:66:01:02:08:31:f0:aa:26:c1:67:52: 03:7b:b8:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKDI1ODE3RjhBMDU5MTJFMkQ2QkQ1OUJFRjFGOTUxMzdF OTNEQzk5MzMwHhcNMjUxMDE5MDgwMzU4WhcNMjUxMDI2MDgwMzU4WjAYMRYwFAYD VQQDEw02OGY0OWI2Zi03M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07UlesS23PAg7XSGYqjYbCwFqyCz0VWWLvBUkVJ6uqtpeYfX7luLIA17OoJJ FUK33dQ2kvITV57AIz+zX1uqrmFr2a0aniDtKa4WjtM8E0D0ExdthZTsyHXW34vf amdLg/fZnRviry6G1VLFYJQVKCwc3d+xnF+SWGH2iadshwDkgpUA8qelJQJtVHIa XKHlETUWpAJkVHWzW6zgrDOJ/XBuSM/rcpvQ0QuBd7PqOcvVA4vzv86GO5gzMHxL DljK0ciTb9K7jI6I0SERKBI/dAgJ8bNrFmKrJpYZDmMy05dUq8QRTjqnVd2zHZjc i018fbt9bjqtpm5ZzZ1wPRhPHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGVtnE6 DUnkgSGCJxTwI1Szl92hMB8GA1UdIwQYMBaAFCWBf4oFkS4ta9Wb7x+VE36T3Jkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8xNDMyM0Q3NDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxpMXIxWnZ2SDVVVGZwUGNt VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZRl9pZ1dSTGkxcjFadnZINVVUZnBQY21UTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8xNDMyM0Q3NDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxp MXIxWnZ2SDVVVGZwUGNtVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn8vehiscf49Bc+WzrsA4JoOx+7JpJGLsu7QFMVjlsjRBIuSyn+Mku +GwnI2ZqHiILhrn6k7wteS9pcs0yJcCeXxUQJZMj2Lmb3fW6NkraELAAS05VZvhV rnFZAJfPUS98djnCgJOMagu3+Cl1dRbnIrQwHdsmJzBnPiDdDG2/sDK8sL9NW/IC 5kiiYiOBqfYrB4KPnbB2dF0xHsCczqZ6bez37Hw+UGhZ2+IH6+6CjvAhBHL5k9+q tOdB8mlP+JKgf7Y3cYv1NF3p8yooIypXUfeNCqvo6wmH3FWCJdxIcNVsXk277zry OyUmCb8HB6hJZgECCDHwqibBZ1IDe7jF -----END CERTIFICATE-----Generated at Mon Oct 20 07:58:37 2025 by rpki-client