$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: DJRDPmIZsqkcFzCKcf6uxXP+pHyCb5r9EgYSkjHJr6U= Subject key identifier: 0C:D1:61:BD:F5:D3:80:54:AA:CF:8A:B0:49:AC:60:3E:2C:83:CD:D6 Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 5C Signing time: Sun 19 Oct 2025 10:31:19 +0000 Manifest this update: Sun 19 Oct 2025 10:31:19 +0000 Manifest next update: Sun 26 Oct 2025 10:31:19 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: d5wUxUes0tPHwWvj8LCv5UNmbGykjtjEAzMV+PRcsks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Oct 19 10:31:19 2025 GMT Not After : Oct 26 10:31:19 2025 GMT Subject: CN=68f4bdf7-6495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:cf:ea:8b:43:1a:63:3e:9b:7a:d9:a0:cf: f3:96:7c:c0:2b:21:42:3f:b1:39:d0:2e:de:fb:73: b5:36:2c:98:a4:ef:25:ec:8c:e2:bd:02:97:43:ed: 6f:9e:c2:fd:b7:47:e9:74:ae:37:4c:fd:8e:57:48: 6f:e9:df:b0:e0:99:1c:f4:c6:9a:5a:82:5b:33:20: 5b:ad:55:65:67:f0:eb:26:17:68:3a:05:5b:bd:fb: 5a:49:50:06:ae:89:25:b6:21:0c:e1:5a:4c:c0:d5: 0e:1d:75:f4:97:29:59:1a:44:6b:d3:6c:7c:34:a0: d3:d0:ea:ab:9b:1a:6e:d3:9e:b0:33:83:cf:04:68: 97:e8:67:bb:02:38:38:b7:78:85:14:49:27:44:d6: ab:aa:57:a0:a1:1d:f4:e2:e5:c3:12:5e:4f:73:85: a7:7a:7e:7b:6e:ab:a7:1b:c3:2c:da:20:24:bd:9b: 48:fd:92:0f:82:17:e1:f6:0f:6c:53:22:d6:fe:c8: 5f:4d:4e:ef:d2:18:83:b0:9e:e4:e1:87:38:d8:32: c6:ce:32:e8:22:14:50:a2:5e:24:25:30:54:39:8c: b9:26:6c:5b:cf:28:3e:36:8a:37:b9:85:6c:42:4f: 76:f8:05:df:31:fc:fb:15:99:26:40:71:02:a7:8e: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D1:61:BD:F5:D3:80:54:AA:CF:8A:B0:49:AC:60:3E:2C:83:CD:D6 X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:df:d8:d8:4a:a6:c0:bb:24:3a:6a:ae:66:b5:1f:3a:8e:c7: d9:76:31:94:d2:c7:8b:9c:83:16:08:25:6d:33:06:c4:f6:b0: 24:96:da:6d:83:86:21:82:78:40:b0:33:23:2c:e9:cf:a1:da: bf:b5:ca:ec:fc:14:24:0b:10:da:0d:d0:6a:b0:ba:ef:5b:5e: 71:73:c3:6c:28:03:d6:98:0d:bb:88:20:cc:be:1e:08:16:3e: c7:0a:30:45:07:09:37:1b:d4:0e:cb:cd:bd:f6:b6:30:3a:9c: fa:be:d1:76:f3:60:94:40:59:ea:6f:39:17:b7:99:f9:f5:08: 45:4d:2c:5c:3e:75:21:d5:f9:b7:15:23:0f:d0:c0:09:7f:d2: 9d:b3:49:fa:58:70:ba:f6:65:7c:bf:2e:c4:37:e5:36:90:4c: 1f:cb:d8:ee:70:fe:f6:41:7c:4c:63:94:b9:a6:39:3d:4b:04: f8:bc:ac:1d:31:06:99:95:67:e4:c8:9a:11:3d:14:4f:e1:0b: 90:0b:bc:55:78:18:1e:b7:89:9d:d7:8e:1e:1f:51:14:19:24: 65:72:a2:c2:63:72:f7:15:52:93:1b:a7:8e:e5:6b:a8:40:cf: 0b:d7:fb:b4:db:79:95:36:a3:19:8f:b3:47:51:79:bc:ba:90: 0c:1b:17:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTEwMTkxMDMxMTlaFw0yNTEwMjYxMDMxMTlaMBgxFjAUBgNV BAMTDTY4ZjRiZGY3LTY0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuls/qi0MaYz6betmgz/OWfMArIUI/sTnQLt77c7U2LJik7yXsjOK9ApdD7W+e wv23R+l0rjdM/Y5XSG/p37DgmRz0xppaglszIFutVWVn8OsmF2g6BVu9+1pJUAau iSW2IQzhWkzA1Q4ddfSXKVkaRGvTbHw0oNPQ6qubGm7TnrAzg88EaJfoZ7sCODi3 eIUUSSdE1quqV6ChHfTi5cMSXk9zhad6fntuq6cbwyzaICS9m0j9kg+CF+H2D2xT Itb+yF9NTu/SGIOwnuThhzjYMsbOMugiFFCiXiQlMFQ5jLkmbFvPKD42ije5hWxC T3b4Bd8x/PsVmSZAcQKnjvd5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDNFhvfXT gFSqz4qwSaxgPiyDzdYwHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAInf2NhKpsC7JDpqrma1HzqOx9l2MZTSx4ucgxYIJW0zBsT2sCSW2m2D hiGCeECwMyMs6c+h2r+1yuz8FCQLENoN0Gqwuu9bXnFzw2woA9aYDbuIIMy+HggW PscKMEUHCTcb1A7Lzb32tjA6nPq+0XbzYJRAWepvORe3mfn1CEVNLFw+dSHV+bcV Iw/QwAl/0p2zSfpYcLr2ZXy/LsQ35TaQTB/L2O5w/vZBfExjlLmmOT1LBPi8rB0x BpmVZ+TImhE9FE/hC5ALvFV4GB63iZ3Xjh4fURQZJGVyosJjcvcVUpMbp47la6hA zwvX+7TbeZU2oxmPs0dReby6kAwbF1k= -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:50 2025 by rpki-client