$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: WedKiQxSTXW1qA0fbwFds7APCvstlvlNhw0devXD2UU= Subject key identifier: 28:6B:B4:D0:F1:F3:0E:D0:3D:0B:9B:F6:D3:39:66:F4:C6:F4:ED:16 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 34DD Signing time: Sat 18 Oct 2025 14:40:58 +0000 Manifest this update: Sat 18 Oct 2025 14:40:57 +0000 Manifest next update: Sat 25 Oct 2025 14:40:57 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: pFoGmOHB1lmmtB+wP5ysQcOZCjWV/Fm+yzv7BR9x/cY=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Oct 18 14:40:57 2025 GMT Not After : Oct 25 14:40:57 2025 GMT Subject: CN=68f3a6f9-17c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:46:7b:e9:6a:96:54:34:6d:2f:92:9a:7c: ac:12:b1:c6:e7:e8:73:7d:45:b2:67:6a:63:df:c4: ec:39:c9:65:50:5a:3b:34:da:98:f8:83:96:9d:1b: 65:0e:af:de:53:94:c5:27:f9:a6:fd:9d:46:9d:be: 47:89:41:58:4c:b0:e6:ab:51:3a:97:73:cb:5a:49: 76:1c:28:dc:34:9c:ec:cf:aa:1f:a3:f5:ae:8b:c8: fb:a0:16:2b:49:4f:62:fb:8f:21:a3:9d:a8:9f:70: 64:f8:d7:4d:80:cf:e3:52:86:66:a4:ed:67:88:d3: 37:fe:54:ae:06:8e:40:71:ce:e6:3d:c8:91:3d:2a: 79:81:3f:bc:43:51:dc:14:a1:e5:65:5c:0d:6f:93: 1d:b7:5c:cc:5c:c2:5a:fe:1e:d4:5e:a7:9a:ec:fc: 79:fd:1c:a1:a7:0b:22:36:80:82:22:5a:db:1a:33: a0:e2:0e:a6:9b:3e:67:fe:c9:99:5a:ca:1a:98:b9: 96:ac:64:fb:aa:33:d1:e6:86:03:ba:0b:4f:8f:f1: e7:72:93:16:b7:22:ea:52:49:de:09:d9:f7:9c:0b: 69:8b:64:34:43:e6:d1:a8:4c:6c:53:96:b3:b9:c9: cc:f1:dd:cf:8a:5a:2e:07:49:50:3e:b7:f3:30:00: a6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:B4:D0:F1:F3:0E:D0:3D:0B:9B:F6:D3:39:66:F4:C6:F4:ED:16 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2e:ab:b1:6d:d3:0c:8e:c3:57:7c:b5:d7:c7:e9:52:62:22: 7f:1b:89:8a:7d:7d:a2:0d:2d:55:90:85:f6:88:df:51:ec:88: 59:38:86:03:67:fb:a7:f6:13:0a:6b:e0:65:8a:52:95:d0:4a: 4b:f8:a0:cc:18:f8:3d:b2:68:56:1e:cd:89:b9:07:75:d7:c0: 9f:a0:80:4b:b8:fc:ad:eb:18:1f:f8:59:42:d1:95:06:0a:a3: 4e:2c:a8:23:86:62:4f:36:d0:06:a6:11:59:92:f6:61:29:44: 41:2e:81:98:55:42:85:2d:d6:87:4e:af:91:eb:9b:28:f1:54: 58:18:52:6a:89:55:d6:e8:56:37:c4:b5:ac:72:dd:dd:86:38: 3f:4c:cf:5c:cb:73:0b:51:72:14:f6:ee:e7:bb:7b:38:8e:fa: 1c:1d:06:44:54:3b:1b:0f:ea:bc:fc:75:ba:1a:66:d2:86:38: 80:5f:47:d1:84:db:1d:3a:9e:b3:b8:8b:78:69:61:4c:02:e3: 62:16:77:fc:2e:92:b7:eb:0c:62:35:cf:a8:c7:93:a0:04:7c: e9:84:5d:7c:6c:5d:2b:26:bd:f4:c1:d6:a0:2c:44:93:cc:4f: f6:9f:02:c3:63:10:86:d7:39:cc:ca:ce:40:6d:b2:c9:3d:67: 8a:f7:64:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjUxMDE4MTQ0MDU3WhcNMjUxMDI1MTQ0MDU3WjAYMRYwFAYD VQQDEw02OGYzYTZmOS0xN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbxGe+lqllQ0bS+SmnysErHG5+hzfUWyZ2pj38TsOcllUFo7NNqY+IOWnRtl Dq/eU5TFJ/mm/Z1Gnb5HiUFYTLDmq1E6l3PLWkl2HCjcNJzsz6ofo/Wui8j7oBYr SU9i+48ho52on3Bk+NdNgM/jUoZmpO1niNM3/lSuBo5Acc7mPciRPSp5gT+8Q1Hc FKHlZVwNb5Mdt1zMXMJa/h7UXqea7Px5/RyhpwsiNoCCIlrbGjOg4g6mmz5n/smZ WsoamLmWrGT7qjPR5oYDugtPj/HncpMWtyLqUkneCdn3nAtpi2Q0Q+bRqExsU5az ucnM8d3PilouB0lQPrfzMACm8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChrtNDx 8w7QPQub9tM5ZvTG9O0WMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNLquxbdMMjsNXfLXXx+lSYiJ/G4mKfX2iDS1VkIX2iN9R7IhZOIYD Z/un9hMKa+BlilKV0EpL+KDMGPg9smhWHs2JuQd118CfoIBLuPyt6xgf+FlC0ZUG CqNOLKgjhmJPNtAGphFZkvZhKURBLoGYVUKFLdaHTq+R65so8VRYGFJqiVXW6FY3 xLWsct3dhjg/TM9cy3MLUXIU9u7nu3s4jvocHQZEVDsbD+q8/HW6GmbShjiAX0fR hNsdOp6zuIt4aWFMAuNiFnf8LpK36wxiNc+ox5OgBHzphF18bF0rJr30wdagLEST zE/2nwLDYxCG1znMys5AbbLJPWeK92Qi -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:57 2025 by rpki-client