$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: JbA/wZAIijbmjbSxNDbsrQUIdL7ANqXcqG2KY2doBRI= Subject key identifier: 00:80:57:01:35:81:62:C3:CD:FD:01:13:17:DB:4C:8E:7C:DF:27:F6 Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 021E Signing time: Sun 19 Oct 2025 04:24:44 +0000 Manifest this update: Sun 19 Oct 2025 04:24:43 +0000 Manifest next update: Sun 26 Oct 2025 04:24:43 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: e0GkK6U3xIqj5fYStzQGZ83omevRQJkD1Rb3zu+xrec=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: LBGA7uPNm5y2jKoMvMcCypIR4652t0Rg8FNArTxs7js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Oct 19 04:24:43 2025 GMT Not After : Oct 26 04:24:43 2025 GMT Subject: CN=68f4680b-9433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:fa:b6:6c:35:88:75:e3:89:b7:2b:05:d2: ff:3d:d7:6a:41:35:49:9c:a4:5e:bd:8e:f7:88:dd: 8f:fa:0f:f4:a4:89:ef:8e:3c:fc:6f:da:1d:af:c4: a1:72:a8:e2:be:e9:1c:e2:08:80:e8:12:f1:27:43: 7d:84:d1:b2:75:80:3d:f3:50:ef:0f:10:3d:af:0c: 69:86:e4:1f:ab:9b:89:3b:fb:8b:d8:35:cf:ce:a7: 83:c2:4d:f9:ac:6b:cb:69:6a:2b:7a:51:ac:f8:67: fa:6c:8d:c0:74:2c:2b:2c:16:c6:70:84:c1:d1:d0: 9d:5f:fb:ed:3b:fb:40:28:d1:ef:c8:d4:89:32:31: e2:0e:7a:09:d1:48:cb:d4:8b:0f:53:81:fe:99:a3: fc:c6:08:8c:2c:4b:8f:ae:9e:4a:14:92:d1:b7:ae: 9a:90:d8:65:2f:32:c3:6e:fe:24:15:43:ff:30:1a: 19:8e:b0:c1:78:19:ed:be:b7:73:f4:42:5a:88:4a: 37:1d:0a:ec:c6:84:37:b8:7e:93:f1:3f:d4:53:e8: 7d:52:f1:39:01:32:06:e4:d7:f4:a0:ac:a7:0f:c5: 05:01:13:8f:a1:f2:4e:c2:f3:84:e9:ef:43:6a:b4: b0:89:f8:8a:aa:07:9d:ad:87:ba:73:ab:29:2c:ab: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:80:57:01:35:81:62:C3:CD:FD:01:13:17:DB:4C:8E:7C:DF:27:F6 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d3:cd:d7:ea:eb:c7:f2:bb:41:43:ea:9c:dc:54:22:19:8a: be:6a:00:77:9d:06:ed:c8:df:12:5b:dd:d9:23:6a:41:5f:cb: cb:2a:ea:98:05:49:a1:70:bc:cc:19:75:2d:c9:ec:a0:87:7b: ce:1a:a7:93:4d:b1:2e:28:76:35:c6:88:40:8a:9b:9c:11:08: f0:5f:89:42:fd:0e:a7:60:7e:5c:90:60:38:3d:1c:40:ce:f7: ed:7a:15:4e:d6:ea:23:15:1e:9e:54:20:db:55:e9:57:6c:0c: 90:3d:e4:c3:fe:a6:9c:cd:5c:6e:c7:2e:56:ef:6a:64:05:3d: 37:c7:d2:b1:69:a9:b4:cc:6b:48:47:80:c3:c7:9c:79:91:93: 3d:03:27:2f:4f:8b:e1:2a:8e:9e:fd:69:6a:c1:71:91:cb:85: 38:80:b9:c9:51:51:91:de:f7:12:64:b9:40:dd:41:d9:31:3c: 63:9f:fc:db:d8:7c:37:b7:0e:6b:9c:81:1a:12:8d:09:1f:be: ea:53:9f:97:fd:d6:54:0e:06:2c:b4:f5:d0:8d:4e:8d:a4:4e: f1:7e:a2:ed:7f:d2:02:ec:8d:74:6a:4b:c9:b1:05:34:7c:26: 11:a6:a0:3f:3f:b1:31:d0:d4:9c:4a:4d:30:c8:b6:fa:c1:29: 01:07:cb:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUxMDE5MDQyNDQzWhcNMjUxMDI2MDQyNDQzWjAYMRYwFAYD VQQDEw02OGY0NjgwYi05NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hb6tmw1iHXjibcrBdL/PddqQTVJnKRevY73iN2P+g/0pInvjjz8b9odr8Sh cqjivukc4giA6BLxJ0N9hNGydYA981DvDxA9rwxphuQfq5uJO/uL2DXPzqeDwk35 rGvLaWorelGs+Gf6bI3AdCwrLBbGcITB0dCdX/vtO/tAKNHvyNSJMjHiDnoJ0UjL 1IsPU4H+maP8xgiMLEuPrp5KFJLRt66akNhlLzLDbv4kFUP/MBoZjrDBeBntvrdz 9EJaiEo3HQrsxoQ3uH6T8T/UU+h9UvE5ATIG5Nf0oKynD8UFAROPofJOwvOE6e9D arSwifiKqgedrYe6c6spLKsuswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACAVwE1 gWLDzf0BExfbTI583yf2MB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa083X6uvH8rtBQ+qc3FQiGYq+agB3nQbtyN8SW93ZI2pBX8vLKuqY BUmhcLzMGXUtyeygh3vOGqeTTbEuKHY1xohAipucEQjwX4lC/Q6nYH5ckGA4PRxA zvftehVO1uojFR6eVCDbVelXbAyQPeTD/qaczVxuxy5W72pkBT03x9Kxaam0zGtI R4DDx5x5kZM9AycvT4vhKo6e/WlqwXGRy4U4gLnJUVGR3vcSZLlA3UHZMTxjn/zb 2Hw3tw5rnIEaEo0JH77qU5+X/dZUDgYstPXQjU6NpE7xfqLtf9IC7I10akvJsQU0 fCYRpqA/P7Ex0NScSk0wyLb6wSkBB8sG -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:06 2025 by rpki-client