$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: Tgue0aB9tcfgeOGeBVzsJUw1KJKn8E91NG2kmPExn2Q= Subject key identifier: EE:0A:1A:98:84:AF:73:5A:76:C2:B3:93:C3:51:80:EB:91:FB:8B:0B Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 3512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 34E9 Signing time: Sat 18 Oct 2025 14:59:50 +0000 Manifest this update: Sat 18 Oct 2025 14:59:50 +0000 Manifest next update: Sat 25 Oct 2025 14:59:50 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: NOl8uB2z+NhX4te5dwBFoSy906zxCaYp0bISS0+l0NA=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13586 (0x3512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Oct 18 14:59:50 2025 GMT Not After : Oct 25 14:59:50 2025 GMT Subject: CN=68f3ab66-7458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:96:0e:96:a3:51:f2:6c:87:48:88:31:cb: 31:8d:7f:58:58:a5:f9:f5:ae:16:74:e4:3d:f8:45: 8d:c2:77:32:06:68:85:76:a4:51:a4:c0:66:ba:66: 5b:4c:46:85:3c:6f:db:d2:4f:50:99:7b:f1:08:a5: 5b:40:98:e5:93:d4:27:18:2c:1c:c6:57:81:02:6e: a2:e7:4b:55:84:0d:9a:fc:26:b0:45:3d:34:b2:fe: 96:91:69:f7:a5:a5:21:13:ba:50:db:03:4d:8c:a7: c0:dc:50:8b:da:d2:23:23:fd:56:ee:f9:8b:eb:bf: cf:4c:86:9a:a0:13:77:32:aa:cb:4a:ef:a4:55:2d: 06:eb:9f:50:56:a0:b1:99:b3:28:f7:96:50:0d:7d: 17:b0:54:87:bd:46:98:b4:28:c7:9f:57:c2:bd:b4: da:16:b5:b7:f9:26:51:3b:fb:2b:52:8f:fc:55:6e: 90:17:a6:68:d7:ee:19:39:53:64:15:ac:b1:70:54: 91:f7:be:40:c3:25:9a:9d:f5:e1:bd:01:d0:be:9c: a2:a4:5e:f4:0e:c0:10:4a:56:c7:2c:70:ee:0f:b1: b7:7b:f0:6a:25:af:29:41:b9:75:c6:2b:2e:3d:e7: f1:7d:a8:99:38:6c:83:f9:20:5b:75:34:cf:ca:f7: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:1A:98:84:AF:73:5A:76:C2:B3:93:C3:51:80:EB:91:FB:8B:0B X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cc:3c:80:1e:7b:5c:67:da:fb:8b:d3:c0:e6:c2:75:57:9d: ea:6a:37:67:2f:98:59:dc:89:7c:16:69:2d:5e:b1:80:6f:5c: 0f:e0:74:d7:f5:cf:f2:0c:1b:8f:61:9c:43:43:93:e4:86:e6: 1d:11:3b:3c:0c:55:ce:91:7a:fb:93:c8:ac:31:e1:fd:69:f6: bb:8e:c0:6b:81:91:4f:c4:6b:7b:ae:e7:91:da:e2:fc:0b:ec: bd:f5:ed:6f:cc:11:9b:89:24:38:23:90:8b:54:b7:67:fb:b3: 25:fa:ab:e7:ad:1d:c1:0c:ed:57:06:74:c1:bc:e3:ff:c3:25: 32:d2:aa:2d:1a:5a:83:3e:5e:e4:f9:90:6a:77:a3:4c:02:bb: 53:53:e6:6b:b1:4b:ef:7f:e9:3b:7b:24:f9:91:09:60:dc:dc: 4b:3e:c2:3f:37:a2:8c:b1:58:45:6a:28:bb:0d:7d:00:aa:6e: 0a:50:75:9c:b8:91:85:31:68:99:20:e4:fa:86:a3:02:a4:a9: 00:42:e6:63:a6:2b:ea:d7:1c:fe:62:bd:2a:ff:85:d9:6d:80: a8:fe:0f:79:07:27:49:7a:8f:c0:d7:89:c9:a4:5b:6a:bc:ee: 77:6d:8a:24:fd:22:7e:61:9a:f7:45:37:ea:43:5e:1f:19:ce: 96:c2:49:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUxMDE4MTQ1OTUwWhcNMjUxMDI1MTQ1OTUwWjAYMRYwFAYD VQQDEw02OGYzYWI2Ni03NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YuWDpajUfJsh0iIMcsxjX9YWKX59a4WdOQ9+EWNwncyBmiFdqRRpMBmumZb TEaFPG/b0k9QmXvxCKVbQJjlk9QnGCwcxleBAm6i50tVhA2a/CawRT00sv6WkWn3 paUhE7pQ2wNNjKfA3FCL2tIjI/1W7vmL67/PTIaaoBN3MqrLSu+kVS0G659QVqCx mbMo95ZQDX0XsFSHvUaYtCjHn1fCvbTaFrW3+SZRO/srUo/8VW6QF6Zo1+4ZOVNk FayxcFSR975AwyWanfXhvQHQvpyipF70DsAQSlbHLHDuD7G3e/BqJa8pQbl1xisu PefxfaiZOGyD+SBbdTTPyvfctwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4KGpiE r3NadsKzk8NRgOuR+4sLMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtzDyAHntcZ9r7i9PA5sJ1V53qajdnL5hZ3Il8FmktXrGAb1wP4HTX 9c/yDBuPYZxDQ5PkhuYdETs8DFXOkXr7k8isMeH9afa7jsBrgZFPxGt7rueR2uL8 C+y99e1vzBGbiSQ4I5CLVLdn+7Ml+qvnrR3BDO1XBnTBvOP/wyUy0qotGlqDPl7k +ZBqd6NMArtTU+ZrsUvvf+k7eyT5kQlg3NxLPsI/N6KMsVhFaii7DX0Aqm4KUHWc uJGFMWiZIOT6hqMCpKkAQuZjpivq1xz+Yr0q/4XZbYCo/g95BydJeo/A14nJpFtq vO53bYok/SJ+YZr3RTfqQ14fGc6WwknY -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:56 2025 by rpki-client