$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: B73118T221AyaX8v2SmMEhR6RZlpMZnnbXdPC85Y5tI= Subject key identifier: 96:1D:84:83:01:45:B6:F3:AE:5A:DF:51:68:6D:08:91:EF:35:AA:82 Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 51 Signing time: Sun 19 Oct 2025 10:38:31 +0000 Manifest this update: Sun 19 Oct 2025 10:38:31 +0000 Manifest next update: Sun 26 Oct 2025 10:38:31 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: ZjY7gqE8i4kssvKQspw0+m2boln/QpoF9viEZSPaCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Oct 19 10:38:31 2025 GMT Not After : Oct 26 10:38:31 2025 GMT Subject: CN=68f4bfa7-fd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:eb:e9:34:fe:e3:b8:08:42:0c:11:5c:66: 26:09:4b:5a:9e:e2:2f:db:ce:f1:a2:55:e6:76:fc: 5b:09:07:ba:c8:e5:ff:b5:e9:e5:e3:3b:b3:2c:1c: 9d:18:99:23:d9:67:73:4c:7c:c3:1b:37:e3:b3:fb: a8:0f:b8:03:5a:cb:b8:e9:68:82:a4:df:ef:72:5d: 75:8b:03:e5:29:1b:de:77:a2:16:06:50:05:f7:73: 73:c6:38:d4:73:f0:20:ed:38:9a:83:6f:cf:94:c4: a0:ba:84:61:8b:de:76:84:0e:9a:b5:69:88:c2:b5: 0b:a8:75:c6:7b:6b:c0:19:e3:cb:9f:42:84:c4:16: 10:74:c4:7e:a2:02:48:78:a4:5f:37:f9:bb:57:75: 96:90:7a:99:37:63:39:22:d9:4c:e6:c2:75:5c:5c: c2:a3:a8:c6:c9:49:e3:3f:48:1d:64:13:27:5f:40: 28:e7:cf:69:56:22:b0:1f:51:e7:83:03:78:e8:7a: 0c:09:5d:56:35:ad:c3:3b:d4:4f:24:9f:e6:fb:d9: 37:0f:ae:24:d7:ec:2d:4a:7b:e2:e4:ea:50:88:70: d6:06:53:5f:5a:12:20:b0:23:a2:61:46:ac:6a:0a: 50:48:78:70:9c:8c:01:d5:b7:53:4f:a9:ed:4f:0e: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1D:84:83:01:45:B6:F3:AE:5A:DF:51:68:6D:08:91:EF:35:AA:82 X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:a4:d0:94:df:50:5e:9c:8a:ba:9f:fa:d0:37:ab:9a:71:7a: 35:dc:2b:f0:a4:87:4d:fc:c8:e8:8d:7d:e5:fe:5b:de:d4:38: 51:7f:21:d8:e5:a9:4f:61:ed:70:1b:85:f4:b4:fc:8e:b7:88: cd:dc:48:4b:b7:c3:23:3a:be:64:7f:1c:21:7f:27:c7:bd:a3: bc:e8:e4:c4:70:98:8f:19:09:69:a3:29:d0:f5:d4:20:f5:76: dd:d6:41:4a:6d:ff:4b:b7:62:98:ab:a0:b2:55:7d:96:70:db: 19:47:a0:42:3d:ae:c9:a3:33:a4:ef:cf:d6:57:0d:01:47:60: 9d:2d:99:b0:d8:9b:85:63:be:fc:ce:a7:87:0f:4b:27:27:c4: 45:5b:d7:84:13:14:92:12:4c:c6:82:8f:8c:a7:b3:16:13:ec: 2d:46:50:77:b5:d7:fd:23:99:f2:8f:f1:d6:08:34:26:29:0d: 3e:f0:a1:b3:ff:ac:a4:1d:d1:3a:8e:5e:b9:96:66:cb:f6:af: e8:7b:8a:f3:47:e3:fb:12:bb:d2:a1:0d:b8:2c:7e:28:6d:7b: ae:58:04:6f:eb:93:4b:3f:ce:9a:d5:c9:43:12:d8:a7:62:91: 11:b8:1b:ea:cd:ff:01:78:c9:41:2c:72:82:90:c6:b1:5b:f7: eb:7e:8d:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTEwMTkxMDM4MzFaFw0yNTEwMjYxMDM4MzFaMBgxFjAUBgNV BAMTDTY4ZjRiZmE3LWZkOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7K+vpNP7juAhCDBFcZiYJS1qe4i/bzvGiVeZ2/FsJB7rI5f+16eXjO7MsHJ0Y mSPZZ3NMfMMbN+Oz+6gPuANay7jpaIKk3+9yXXWLA+UpG953ohYGUAX3c3PGONRz 8CDtOJqDb8+UxKC6hGGL3naEDpq1aYjCtQuodcZ7a8AZ48ufQoTEFhB0xH6iAkh4 pF83+btXdZaQepk3Yzki2UzmwnVcXMKjqMbJSeM/SB1kEydfQCjnz2lWIrAfUeeD A3joegwJXVY1rcM71E8kn+b72TcPriTX7C1Ke+Lk6lCIcNYGU19aEiCwI6JhRqxq ClBIeHCcjAHVt1NPqe1PDhlRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlh2EgwFF tvOuWt9RaG0Ike81qoIwHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALqk0JTfUF6cirqf+tA3q5pxejXcK/Ckh038yOiNfeX+W97UOFF/Idjl qU9h7XAbhfS0/I63iM3cSEu3wyM6vmR/HCF/J8e9o7zo5MRwmI8ZCWmjKdD11CD1 dt3WQUpt/0u3YpiroLJVfZZw2xlHoEI9rsmjM6Tvz9ZXDQFHYJ0tmbDYm4VjvvzO p4cPSycnxEVb14QTFJISTMaCj4ynsxYT7C1GUHe11/0jmfKP8dYINCYpDT7wobP/ rKQd0TqOXrmWZsv2r+h7ivNH4/sSu9KhDbgsfihte65YBG/rk0s/zprVyUMS2Kdi kRG4G+rN/wF4yUEscoKQxrFb9+t+jWc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:14 2025 by rpki-client