$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: B2lUe7C47jD41z6Td0EJHtBAn/ddpGFZ7SH8ozDcmKU= Subject key identifier: D0:65:59:6F:96:0D:AD:49:4C:7F:A3:1E:CF:F7:DF:53:77:FF:FE:4A Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: B9 Signing time: Sun 19 Oct 2025 09:07:17 +0000 Manifest this update: Sun 19 Oct 2025 09:07:17 +0000 Manifest next update: Sun 26 Oct 2025 09:07:17 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: yEoNcA4uWwWh02AFqCqurkH9dpPbJInDygYAodGd8h8=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Oct 19 09:07:17 2025 GMT Not After : Oct 26 09:07:17 2025 GMT Subject: CN=68f4aa45-a0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:b3:f7:31:4e:ab:41:39:4e:63:88:d2:71: 7f:15:6b:06:bf:51:39:13:7a:e5:82:26:fd:2c:7b: 2e:c1:47:e9:2e:db:4f:ea:06:dd:99:3a:8e:ae:1e: 43:41:d6:7a:41:58:77:db:02:ca:84:61:4f:f0:5f: 18:c0:7e:d6:e4:93:dd:ca:99:b5:cb:fe:d6:bd:8d: 9d:d9:62:43:c4:35:db:19:bd:41:9b:52:75:59:35: 70:a3:86:0a:d7:23:aa:57:9f:62:8d:eb:ea:3c:6d: f9:2c:51:93:a7:d2:5d:59:a3:09:c9:96:8e:fe:59: 52:54:9d:69:d8:d3:e4:77:d9:af:6e:7e:03:c9:64: f5:f3:c7:bd:4d:50:54:4b:5c:f1:34:d6:d0:e4:88: da:b5:c3:84:82:33:8d:df:32:0c:77:55:f4:f4:08: 83:f5:3d:ee:13:17:f8:43:46:f9:37:9b:f1:3d:ac: ab:d3:91:96:04:8b:4c:44:f7:11:78:64:20:77:96: 24:1e:c6:bc:5b:4a:c9:e7:41:b5:bc:65:05:f4:d4: 26:bc:cf:ef:87:55:c8:c4:f4:a9:d9:57:82:8a:2e: e2:9f:54:d7:e7:e5:83:a6:fb:dd:9c:70:8d:aa:7c: 75:9d:24:6d:3b:38:f0:92:b7:d7:1d:5f:42:8b:b4: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:65:59:6F:96:0D:AD:49:4C:7F:A3:1E:CF:F7:DF:53:77:FF:FE:4A X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b6:da:ed:ff:30:44:7d:43:c6:58:d6:be:f1:68:7b:52:5f: 95:be:15:2d:af:d4:61:e7:b1:c5:2b:cd:dd:32:0a:97:e5:f9: be:62:fe:95:b2:d7:2e:13:89:54:fa:af:1e:06:9b:84:c2:70: f0:d5:71:a0:b0:41:d0:7b:70:35:45:bc:2d:8a:89:f3:ba:b0: f3:c3:d8:78:8f:31:2d:4a:54:f4:bb:34:51:04:83:de:7a:f0: 23:24:e6:54:6b:d5:dc:fa:a3:f5:9b:82:c6:10:52:a6:d4:49: bc:f5:ec:ae:a8:69:de:a7:d9:bb:2d:84:be:2d:3e:6e:99:f5: 0b:fd:12:9b:f6:77:e1:94:22:69:11:3d:4c:a0:c5:81:7e:b1: 6b:2a:62:2b:de:f6:1a:4a:9d:54:0c:38:0c:61:fb:45:8b:92: 26:72:f2:f4:ee:6c:eb:01:3c:9e:e6:39:32:77:52:53:f6:9a: 4b:1d:37:0b:aa:cb:46:7e:7f:e6:1f:ed:c7:74:ca:67:40:bd: 45:4a:36:00:5e:d5:74:dd:67:07:6f:7a:30:de:b7:2f:5c:17: de:32:47:a2:f6:6a:a1:e0:dc:a6:f2:5d:2b:c5:be:4f:a1:46: 53:df:08:c5:c1:03:e5:d7:40:61:48:fe:6a:03:14:a0:94:ac: 4a:2e:d8:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjUxMDE5MDkwNzE3WhcNMjUxMDI2MDkwNzE3WjAYMRYwFAYD VQQDEw02OGY0YWE0NS1hMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxez9zFOq0E5TmOI0nF/FWsGv1E5E3rlgib9LHsuwUfpLttP6gbdmTqOrh5D QdZ6QVh32wLKhGFP8F8YwH7W5JPdypm1y/7WvY2d2WJDxDXbGb1Bm1J1WTVwo4YK 1yOqV59ijevqPG35LFGTp9JdWaMJyZaO/llSVJ1p2NPkd9mvbn4DyWT188e9TVBU S1zxNNbQ5IjatcOEgjON3zIMd1X09AiD9T3uExf4Q0b5N5vxPayr05GWBItMRPcR eGQgd5YkHsa8W0rJ50G1vGUF9NQmvM/vh1XIxPSp2VeCii7in1TX5+WDpvvdnHCN qnx1nSRtOzjwkrfXHV9Ci7TbRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBlWW+W Da1JTH+jHs/331N3//5KMB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWttrt/zBEfUPGWNa+8Wh7Ul+VvhUtr9Rh57HFK83dMgqX5fm+Yv6V stcuE4lU+q8eBpuEwnDw1XGgsEHQe3A1RbwtionzurDzw9h4jzEtSlT0uzRRBIPe evAjJOZUa9Xc+qP1m4LGEFKm1Em89eyuqGnep9m7LYS+LT5umfUL/RKb9nfhlCJp ET1MoMWBfrFrKmIr3vYaSp1UDDgMYftFi5ImcvL07mzrATye5jkyd1JT9ppLHTcL qstGfn/mH+3HdMpnQL1FSjYAXtV03WcHb3ow3rcvXBfeMkei9mqh4Nym8l0rxb5P oUZT3wjFwQPl10BhSP5qAxSglKxKLth3 -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:53 2025 by rpki-client