$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: hsXZ4aF2Oe2Wo4wEY3Jd2/cdD3S3LajuKhzkv36/HKI= Subject key identifier: E5:97:1D:D3:2B:43:C4:B0:22:97:20:97:E9:58:DD:1B:82:E2:5A:91 Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 0188 Signing time: Sun 19 Oct 2025 06:07:09 +0000 Manifest this update: Sun 19 Oct 2025 06:07:09 +0000 Manifest next update: Sun 26 Oct 2025 06:07:09 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: SpHLElMj7XnzExLYlFW0DWZnbLuNA9bgh0gv+Op1WOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Oct 19 06:07:09 2025 GMT Not After : Oct 26 06:07:09 2025 GMT Subject: CN=68f4800d-d71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:4c:95:e3:f5:01:00:5b:4f:2f:03:69:06: a2:66:7d:50:14:4d:09:b1:e0:0e:95:b1:8c:5f:54: d9:2f:fd:49:e3:d6:78:37:c5:3c:b4:06:2d:2b:72: ea:f9:a3:7c:9c:dc:ce:eb:f0:f8:48:f2:cc:41:f0: c3:73:ce:23:d1:e8:4d:8a:bb:16:42:4d:d0:77:c0: 08:6d:19:d3:68:6f:fe:f5:38:38:d1:2b:1e:f4:bd: 9f:2b:b6:78:1c:48:92:72:11:d7:36:5a:81:03:02: f0:23:88:70:37:03:54:d2:63:e1:47:d3:b3:f6:42: 26:f5:9b:ab:5c:65:8e:9c:9c:07:c0:6b:74:be:9a: 58:2c:fa:95:19:3a:5f:0f:40:30:0d:82:72:a7:37: 74:1b:a9:11:05:1c:73:08:71:e3:4a:4f:9a:8e:5a: 80:ff:8a:24:14:ea:58:7d:33:71:6e:22:e3:f8:da: 3c:d5:48:7a:e1:13:4b:3e:30:2a:02:9b:68:ba:d1: b3:cb:f7:e8:3b:3b:1c:9f:e7:f9:e9:42:3c:7e:9b: 67:10:76:ae:c5:13:b4:17:9e:16:05:8c:8c:9c:09: 80:76:97:a4:1d:24:68:42:78:cf:cc:90:e0:08:0b: c7:c5:0c:49:03:53:89:cf:ca:48:77:d3:9a:17:12: cc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:97:1D:D3:2B:43:C4:B0:22:97:20:97:E9:58:DD:1B:82:E2:5A:91 X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:17:4b:9e:c0:51:af:24:1e:b1:8c:d3:17:f1:c0:9e:2d:58: 11:8b:c5:45:37:72:5c:7f:59:f7:ca:65:aa:d8:3a:8a:19:4b: af:22:73:c6:ef:fb:4f:7a:f3:7c:55:f8:0a:9f:e3:25:29:3c: 36:e5:da:d2:6d:5e:e5:68:63:66:8f:1a:04:2e:91:30:c7:95: a6:b8:d4:d8:72:18:09:8b:dd:cf:ab:bf:20:6f:33:b6:93:62: 3d:50:9d:21:f0:db:c8:a1:d6:07:6e:ca:6e:03:91:d3:4e:b7: 16:25:0e:d7:a5:c2:59:64:15:ef:3f:58:d8:fa:7f:89:8f:53: 90:3a:c2:3b:9e:75:3d:00:5b:34:85:3c:58:02:fd:69:74:86: 0e:d5:0a:65:7d:da:29:6a:27:b5:c8:ca:45:60:4b:e3:fd:13: 6c:cb:b0:be:73:e6:67:f9:f5:83:6e:a6:77:b2:c3:2e:6a:ee: 43:a8:54:57:49:dd:e3:e7:6e:8b:1d:3a:eb:57:41:c0:b9:44: a1:dc:38:97:d4:74:9c:15:47:84:5f:7f:e3:34:86:ef:13:bf: 9d:60:fc:92:2c:8b:74:47:92:ad:d2:4e:bc:80:52:2a:6b:6f: a5:16:c3:a9:97:de:54:7a:11:c9:ec:61:18:09:5d:c0:97:10: 93:4a:c1:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjUxMDE5MDYwNzA5WhcNMjUxMDI2MDYwNzA5WjAYMRYwFAYD VQQDEw02OGY0ODAwZC1kNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqVMleP1AQBbTy8DaQaiZn1QFE0JseAOlbGMX1TZL/1J49Z4N8U8tAYtK3Lq +aN8nNzO6/D4SPLMQfDDc84j0ehNirsWQk3Qd8AIbRnTaG/+9Tg40Sse9L2fK7Z4 HEiSchHXNlqBAwLwI4hwNwNU0mPhR9Oz9kIm9ZurXGWOnJwHwGt0vppYLPqVGTpf D0AwDYJypzd0G6kRBRxzCHHjSk+ajlqA/4okFOpYfTNxbiLj+No81Uh64RNLPjAq AptoutGzy/foOzscn+f56UI8fptnEHauxRO0F54WBYyMnAmAdpekHSRoQnjPzJDg CAvHxQxJA1OJz8pId9OaFxLM5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWXHdMr Q8SwIpcgl+lY3RuC4lqRMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpF0uewFGvJB6xjNMX8cCeLVgRi8VFN3Jcf1n3ymWq2DqKGUuvInPG 7/tPevN8VfgKn+MlKTw25drSbV7laGNmjxoELpEwx5WmuNTYchgJi93Pq78gbzO2 k2I9UJ0h8NvIodYHbspuA5HTTrcWJQ7XpcJZZBXvP1jY+n+Jj1OQOsI7nnU9AFs0 hTxYAv1pdIYO1Qplfdopaie1yMpFYEvj/RNsy7C+c+Zn+fWDbqZ3ssMuau5DqFRX Sd3j526LHTrrV0HAuUSh3DiX1HScFUeEX3/jNIbvE7+dYPySLIt0R5Kt0k68gFIq a2+lFsOpl95UehHJ7GEYCV3AlxCTSsEk -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:45 2025 by rpki-client