$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: bUoc1+aFNpcPRnTQvjx8fIGn35UuVXt+L3mUMwmbSWE= Subject key identifier: B1:67:7B:ED:C1:EE:98:87:58:E7:CC:60:37:18:4E:7A:19:EB:36:84 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 014E Signing time: Sun 19 Oct 2025 06:54:51 +0000 Manifest this update: Sun 19 Oct 2025 06:54:50 +0000 Manifest next update: Sun 26 Oct 2025 06:54:50 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: XwbPWIicchyHhdyluMf6AN5KO7HSt89lAGAhusQ+zzM=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Oct 19 06:54:50 2025 GMT Not After : Oct 26 06:54:50 2025 GMT Subject: CN=68f48b3a-e139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:4b:de:3b:93:b1:e2:04:e0:d4:90:34:47: 8c:da:6b:d5:ff:19:07:76:23:16:59:6e:c5:67:5f: c4:84:97:71:80:38:95:4b:7f:56:2a:37:0b:36:ec: 90:70:53:aa:10:1c:a9:d9:9a:ec:f2:05:1a:f9:0e: c9:b9:28:be:bf:ce:b1:62:19:0c:46:e1:f0:c8:79: a0:8e:b4:1a:a7:5f:9f:a2:da:a9:17:2d:9c:f8:ae: 9d:9f:a2:77:b1:56:23:83:f6:41:84:34:64:af:58: 72:08:b2:4b:00:73:21:7c:a2:bd:a7:fc:8f:8b:07: 68:27:78:69:6d:43:c2:81:40:1b:fe:94:23:15:e6: 33:e4:a0:98:78:5a:d3:0a:0a:0e:77:3f:b3:38:27: db:1f:10:52:50:28:2a:23:c7:1d:05:fe:dd:01:d5: b2:56:83:56:d3:61:12:7a:f6:32:55:82:5e:e1:a4: 86:ef:da:f4:aa:af:86:07:fb:41:95:80:75:b8:fc: f0:cc:1c:7d:a5:0e:3a:25:c4:be:53:3b:47:50:d2: b3:23:a7:42:85:3e:fc:ec:1e:86:9b:b6:18:4f:22: 12:32:f5:36:4e:d0:8c:d5:3e:32:ae:85:1c:42:ae: c5:65:d0:cb:31:9c:e0:c6:3f:43:e2:2e:f2:39:31: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:7B:ED:C1:EE:98:87:58:E7:CC:60:37:18:4E:7A:19:EB:36:84 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:c6:70:33:b3:2a:f1:e5:2d:a7:a0:52:3f:7d:08:72:50:a9: 45:df:e5:15:d1:dd:39:25:c7:0c:72:98:d9:15:b2:c2:21:3c: 35:cd:ea:e2:31:c1:3d:78:e7:30:c8:37:ec:36:64:c0:49:cc: 25:37:4b:c5:01:56:3f:91:4f:14:39:d9:d0:19:c6:f6:c7:91: f8:76:2f:ae:36:87:51:ca:bd:7d:f7:ba:69:d7:55:76:dc:3f: d9:62:a9:9a:70:c6:d5:1a:ea:ad:d4:2b:91:f9:0a:8a:32:c2: 5d:03:a4:03:11:d2:8f:62:8f:89:9b:e3:27:0f:6c:72:6c:e1: 44:7e:f7:31:97:8c:f6:e8:39:bb:a8:91:ce:08:ab:14:05:28: 35:f7:b8:9e:19:2e:5a:90:5e:71:e4:dc:31:4d:89:a8:fd:5c: d0:db:de:3a:79:1a:d2:b5:02:d2:9d:1e:2f:57:29:05:14:0f: 44:af:1f:c3:d3:0a:71:41:bb:55:07:60:bd:61:bc:2c:ce:d4: fe:e8:7e:59:ec:29:bd:75:6f:fe:31:07:c6:68:42:7d:e7:6f: 42:c0:cd:86:bb:77:e3:96:93:21:36:95:e5:91:18:2b:6c:ce: 14:93:9d:fd:c4:0f:3b:15:d3:ee:08:84:73:2a:bc:e2:9d:52: 01:80:26:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUxMDE5MDY1NDUwWhcNMjUxMDI2MDY1NDUwWjAYMRYwFAYD VQQDEw02OGY0OGIzYS1lMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hNL3juTseIE4NSQNEeM2mvV/xkHdiMWWW7FZ1/EhJdxgDiVS39WKjcLNuyQ cFOqEByp2Zrs8gUa+Q7JuSi+v86xYhkMRuHwyHmgjrQap1+fotqpFy2c+K6dn6J3 sVYjg/ZBhDRkr1hyCLJLAHMhfKK9p/yPiwdoJ3hpbUPCgUAb/pQjFeYz5KCYeFrT CgoOdz+zOCfbHxBSUCgqI8cdBf7dAdWyVoNW02ESevYyVYJe4aSG79r0qq+GB/tB lYB1uPzwzBx9pQ46JcS+UztHUNKzI6dChT787B6Gm7YYTyISMvU2TtCM1T4yroUc Qq7FZdDLMZzgxj9D4i7yOTFYQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFne+3B 7piHWOfMYDcYTnoZ6zaEMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3xnAzsyrx5S2noFI/fQhyUKlF3+UV0d05JccMcpjZFbLCITw1zeri McE9eOcwyDfsNmTAScwlN0vFAVY/kU8UOdnQGcb2x5H4di+uNodRyr1997pp11V2 3D/ZYqmacMbVGuqt1CuR+QqKMsJdA6QDEdKPYo+Jm+MnD2xybOFEfvcxl4z26Dm7 qJHOCKsUBSg197ieGS5akF5x5NwxTYmo/VzQ2946eRrStQLSnR4vVykFFA9Erx/D 0wpxQbtVB2C9YbwsztT+6H5Z7Cm9dW/+MQfGaEJ9529CwM2Gu3fjlpMhNpXlkRgr bM4Uk539xA87FdPuCIRzKrzinVIBgCZk -----END CERTIFICATE-----Generated at Sun Oct 19 23:03:29 2025 by rpki-client