$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: Q8jrncbdePSwAwVNov0peagxo1ih9ol0a1AZAUKDj48= Subject key identifier: 89:7C:3D:C6:E1:2E:95:2B:46:11:99:92:96:26:F0:7C:44:AB:B1:2B Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0CA6 Signing time: Sat 18 Oct 2025 18:56:08 +0000 Manifest this update: Sat 18 Oct 2025 18:56:07 +0000 Manifest next update: Sat 25 Oct 2025 18:56:07 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: 1w5rwZnptiywxZplamj08SQ2bEvvD+UFvarAimgAZto=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Oct 18 18:56:07 2025 GMT Not After : Oct 25 18:56:07 2025 GMT Subject: CN=68f3e2c7-9446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:53:1f:6d:df:1f:fe:80:5b:5d:6f:1d:ad: b9:66:d1:44:03:38:28:a0:6a:07:79:e9:bb:f8:7d: 8d:26:d7:96:d4:e8:8a:0d:63:6d:e6:3b:ad:ec:32: a4:cc:91:bb:e2:6d:39:de:6e:3d:65:9b:b1:8e:1b: 82:e8:82:82:9b:39:4c:dc:de:9d:fa:cc:70:70:cd: b4:96:22:2a:66:d2:5c:5c:da:2d:16:98:79:a3:96: 1f:94:cb:3f:ad:a6:05:0a:8b:60:b1:2a:89:f1:dc: 2e:39:09:19:a4:58:76:0f:48:dc:ca:ca:b1:b2:09: e0:d9:f0:68:14:26:f7:cc:3d:2c:43:87:19:36:58: a0:22:06:11:33:e0:5b:82:b8:d7:c2:6a:29:bd:a7: 39:f4:ab:41:9d:a0:3d:23:01:d8:79:59:83:3e:cb: 13:7b:f6:dd:c1:b2:c5:57:69:36:60:0e:90:db:0e: ae:14:6a:69:ab:c6:42:6b:05:6b:84:7a:dc:00:91: 7a:5d:cb:e0:84:63:16:48:c1:6a:f0:70:4e:45:0e: 04:9c:38:4c:a3:1f:67:9a:24:3d:81:eb:f8:02:db: 89:b6:c0:2a:40:cd:6f:7c:4e:66:03:54:a2:e1:48: a9:93:c8:bd:d4:4a:25:20:f3:62:8c:f0:40:72:f4: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:3D:C6:E1:2E:95:2B:46:11:99:92:96:26:F0:7C:44:AB:B1:2B X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c1:76:e2:12:a0:53:1e:92:13:4c:ad:18:62:8c:fa:a0:e2: a4:59:94:67:34:77:22:f8:52:34:e9:5d:a3:28:97:01:6b:99: 51:7d:71:d3:40:be:61:23:a7:2e:cf:bf:02:cd:f7:84:67:b5: 24:ed:08:8a:39:68:a6:e8:2c:1b:cf:5b:fc:44:3f:35:4b:d9: 66:83:8b:ed:23:2c:a3:d0:93:ed:61:41:bb:24:61:46:dd:86: 8c:75:ab:97:fe:7f:b0:d7:65:a0:f7:47:8b:a3:1c:9f:c8:99: 01:4e:fb:76:9c:68:1c:d6:18:ee:d9:27:d3:9e:e0:4f:d1:96: f7:67:ae:53:5b:9c:d1:ee:fa:5c:29:ad:e3:65:42:88:40:f7: 67:cd:4d:b3:a6:48:6b:3c:02:e4:d7:70:5e:8e:9f:35:06:ae: 72:ef:57:b7:b5:fb:2a:eb:a5:bb:a0:4c:04:48:f9:56:6f:8e: 6b:dc:4f:22:ce:60:9d:0b:af:15:de:c6:4f:7f:da:22:41:9f: e9:a3:2e:eb:bf:c3:7f:1c:1d:13:9d:e4:dd:4b:f2:bd:a4:49: d1:32:2a:83:55:ab:84:e1:20:bc:d5:ff:23:df:81:3f:34:cf: 3d:2c:82:5f:e5:7e:96:0e:94:b0:b1:4e:bb:48:92:64:37:c0: ec:c0:c7:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUxMDE4MTg1NjA3WhcNMjUxMDI1MTg1NjA3WjAYMRYwFAYD VQQDEw02OGYzZTJjNy05NDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWVTH23fH/6AW11vHa25ZtFEAzgooGoHeem7+H2NJteW1OiKDWNt5jut7DKk zJG74m053m49ZZuxjhuC6IKCmzlM3N6d+sxwcM20liIqZtJcXNotFph5o5YflMs/ raYFCotgsSqJ8dwuOQkZpFh2D0jcysqxsgng2fBoFCb3zD0sQ4cZNligIgYRM+Bb grjXwmopvac59KtBnaA9IwHYeVmDPssTe/bdwbLFV2k2YA6Q2w6uFGppq8ZCawVr hHrcAJF6XcvghGMWSMFq8HBORQ4EnDhMox9nmiQ9gev4AtuJtsAqQM1vfE5mA1Si 4Uipk8i91EolIPNijPBAcvQZpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl8Pcbh LpUrRhGZkpYm8HxEq7ErMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKwXbiEqBTHpITTK0YYoz6oOKkWZRnNHci+FI06V2jKJcBa5lRfXHT QL5hI6cuz78CzfeEZ7Uk7QiKOWim6Cwbz1v8RD81S9lmg4vtIyyj0JPtYUG7JGFG 3YaMdauX/n+w12Wg90eLoxyfyJkBTvt2nGgc1hju2SfTnuBP0Zb3Z65TW5zR7vpc Ka3jZUKIQPdnzU2zpkhrPALk13Bejp81Bq5y71e3tfsq66W7oEwESPlWb45r3E8i zmCdC68V3sZPf9oiQZ/poy7rv8N/HB0TneTdS/K9pEnRMiqDVauE4SC81f8j34E/ NM89LIJf5X6WDpSwsU67SJJkN8DswMcf -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:46 2025 by rpki-client