$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: V0hPTbpqcFMvjSusFtvXAK2T1u4tbLSSZLvCHxT8/hI= Subject key identifier: 8C:E6:3C:4A:28:01:BD:5C:45:50:D1:EC:32:57:51:4F:34:1F:5E:2A Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 67 Signing time: Sun 19 Oct 2025 10:22:18 +0000 Manifest this update: Sun 19 Oct 2025 10:22:17 +0000 Manifest next update: Sun 26 Oct 2025 10:22:17 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: DVf5IwBIZ3uPSIwQb94R8oMrEn38LcVrYAVLTkSgjok=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: Oct 19 10:22:17 2025 GMT Not After : Oct 26 10:22:17 2025 GMT Subject: CN=68f4bbda-654d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:ec:36:fe:7b:51:18:c5:9c:3a:94:ad:a7: d2:2a:96:52:2f:83:c1:fd:cb:93:f6:5c:a7:2d:2d: 87:11:5d:74:6c:8e:19:61:40:a3:56:97:04:39:d2: 64:23:d9:13:62:f0:aa:6a:30:f3:30:9e:7e:22:0b: 77:52:05:05:a0:51:bb:1e:96:db:5b:80:ed:7d:d9: de:42:a8:20:d1:11:c3:c8:27:f2:40:22:95:14:b1: c1:ed:a9:5c:86:7c:8e:e8:82:2f:76:46:86:31:b8: 76:b2:7c:46:50:eb:17:79:d8:e5:c9:9c:51:70:82: a4:1e:28:90:19:45:05:e3:04:15:a5:a4:82:17:71: 40:6f:76:bc:b1:c0:36:22:ff:59:38:61:99:2d:29: 48:a7:ec:eb:f3:e3:28:e7:e3:95:87:4d:01:f7:1e: 3f:78:15:76:1c:1a:b7:fb:12:11:e0:2f:80:a7:df: 66:94:49:fc:9d:de:7f:15:84:88:d3:1d:fc:92:31: f2:cb:12:4b:05:61:de:51:01:61:1f:1a:35:80:d8: 30:c7:7a:0c:13:77:c3:f3:90:c6:23:88:64:1b:53: c6:f6:1b:e6:93:d4:c6:36:7c:00:4c:cb:4e:a9:7b: ec:6d:49:98:44:6a:fc:4c:c6:ee:13:a8:00:11:9b: 4d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E6:3C:4A:28:01:BD:5C:45:50:D1:EC:32:57:51:4F:34:1F:5E:2A X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2c:66:1d:30:a8:4a:f4:c0:9c:25:97:37:eb:71:16:6d:50: 35:22:5b:fb:0d:48:44:65:2a:de:11:3b:d4:61:af:72:ca:81: 14:95:62:3b:96:31:c0:95:13:4d:0c:85:c0:0d:01:78:91:9a: ba:6b:c1:d1:c7:1b:46:ae:31:15:39:47:24:4f:f0:ee:78:b4: 74:b3:6a:88:98:51:c8:2a:d1:c8:04:5a:55:eb:13:e5:1d:d3: eb:7d:44:56:5a:5f:0b:05:01:dd:ec:37:63:ed:cf:53:e7:eb: d3:5e:41:7a:48:d9:b6:6b:5e:14:0e:70:53:de:db:c1:75:fa: 19:e4:c8:19:90:26:f2:78:1f:65:e1:7f:14:0c:1c:14:a7:06: 80:e2:51:92:1e:40:95:64:cb:ef:f5:58:cc:b3:87:22:6a:94: e8:3d:f4:31:ad:92:87:df:15:39:49:b4:e2:51:9d:40:be:cd: b5:0e:62:c7:5f:f7:46:22:92:74:05:c5:86:e9:80:5f:42:e1: f3:49:a6:0c:7f:8b:42:3f:c4:93:09:40:2d:5d:5f:0d:70:46: c4:f3:12:91:c6:9e:59:7a:54:3f:75:70:dd:46:2c:cf:11:ce: cf:50:1d:53:7c:a3:a3:b5:fc:31:5b:e8:31:85:a8:63:c0:b2: 7b:78:39:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTEwMTkxMDIyMTdaFw0yNTEwMjYxMDIyMTdaMBgxFjAUBgNV BAMTDTY4ZjRiYmRhLTY1NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAZ+w2/ntRGMWcOpStp9IqllIvg8H9y5P2XKctLYcRXXRsjhlhQKNWlwQ50mQj 2RNi8KpqMPMwnn4iC3dSBQWgUbselttbgO192d5CqCDREcPIJ/JAIpUUscHtqVyG fI7ogi92RoYxuHayfEZQ6xd52OXJnFFwgqQeKJAZRQXjBBWlpIIXcUBvdryxwDYi /1k4YZktKUin7Ovz4yjn45WHTQH3Hj94FXYcGrf7EhHgL4Cn32aUSfyd3n8VhIjT HfySMfLLEksFYd5RAWEfGjWA2DDHegwTd8PzkMYjiGQbU8b2G+aT1MY2fABMy06p e+xtSZhEavxMxu4TqAARm033AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjOY8SigB vVxFUNHsMldRTzQfXiowHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwsZh0wqEr0wJwllzfrcRZtUDUiW/sNSERlKt4RO9Rhr3LKgRSVYjuW McCVE00MhcANAXiRmrprwdHHG0auMRU5RyRP8O54tHSzaoiYUcgq0cgEWlXrE+Ud 0+t9RFZaXwsFAd3sN2Ptz1Pn69NeQXpI2bZrXhQOcFPe28F1+hnkyBmQJvJ4H2Xh fxQMHBSnBoDiUZIeQJVky+/1WMyzhyJqlOg99DGtkoffFTlJtOJRnUC+zbUOYsdf 90YiknQFxYbpgF9C4fNJpgx/i0I/xJMJQC1dXw1wRsTzEpHGnll6VD91cN1GLM8R zs9QHVN8o6O1/DFb6DGFqGPAsnt4ORw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:31 2025 by rpki-client