$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json) Hash identifier: iprH31FkFPdo+JTm0PvXqDjMryfP9uS7wzdRvbZ+6Ts= Subject key identifier: 0E:56:2E:F3:1F:50:A9:4E:F1:1E:4A:95:42:37:9B:CE:55:0D:AB:52 Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft Manifest number: 2D Signing time: Sun 19 Oct 2025 11:12:53 +0000 Manifest this update: Sun 19 Oct 2025 11:12:52 +0000 Manifest next update: Sun 26 Oct 2025 11:12:52 +0000 Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: Pixe68suSWK55UHUO9rOGwVZMVOWCbFdgjUQvMAlSxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Validity Not Before: Oct 19 11:12:52 2025 GMT Not After : Oct 26 11:12:52 2025 GMT Subject: CN=68f4c7b5-0b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1f:65:0b:b6:b2:90:1a:f6:92:46:c7:40:5b: 0e:0a:b8:3e:eb:04:44:31:1f:7d:e9:0a:b4:22:52: 81:99:b5:4a:42:9c:9c:b0:6a:0b:28:ff:dd:d9:5d: 82:fa:a1:9d:ec:b7:aa:9f:d0:6d:6a:4c:7e:2e:93: be:1d:58:b2:44:45:66:67:2c:59:6d:10:51:31:f6: 0d:e4:41:33:9c:36:13:1f:3b:5a:37:5e:50:a1:31: 19:74:f6:db:b4:b6:c3:02:56:a6:52:52:f3:ba:cd: cf:1a:fc:53:49:06:db:2a:df:9a:d2:7b:6f:fa:e3: 9e:41:cb:61:17:2b:fb:79:e1:9c:ee:c7:37:8f:4c: 9e:a9:25:8e:d9:a3:c3:39:d1:b5:32:e2:b2:88:c8: 55:cc:88:d1:a5:5b:2c:b8:fa:73:1c:de:ce:3a:05: bb:6b:4f:d3:63:42:39:f5:7d:74:65:6f:d3:11:26: 69:41:c8:77:12:ec:75:28:a6:13:e6:6e:07:30:fb: a0:d5:26:ac:fb:dc:4f:0e:16:23:65:c2:ba:e4:af: fb:f2:e6:5b:9c:16:5a:3e:fa:3a:3c:b5:af:63:8c: 6e:64:e4:9f:e1:99:a9:0d:02:39:82:c7:0c:6c:51: 83:a8:bd:89:12:11:3a:63:28:56:e6:fe:44:6d:96: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:2E:F3:1F:50:A9:4E:F1:1E:4A:95:42:37:9B:CE:55:0D:AB:52 X509v3 Authority Key Identifier: keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d3:80:57:2e:ff:0b:99:37:47:54:3a:84:9e:70:91:c3:75: 58:83:30:67:75:cd:e5:1d:e2:b6:4f:54:16:59:e7:01:90:10: 7f:ca:fe:e0:5f:89:98:01:4d:a3:6e:57:f5:e2:ba:5c:9b:6d: a6:75:ff:12:d2:50:be:47:3b:8d:37:8d:aa:82:34:06:3c:40: 73:55:88:db:0c:53:24:b1:fa:15:72:89:87:66:f5:21:b1:30: c8:d8:04:38:81:33:29:92:f7:52:df:16:9d:5d:37:57:fa:09: 58:2e:74:78:24:e9:54:fd:b0:95:87:6d:a3:34:10:ec:ce:01: 8e:a9:c3:5d:3e:13:f7:41:74:16:73:b8:01:0f:00:9e:e7:32: 63:59:07:aa:b9:86:12:41:f3:87:83:68:e3:27:b8:a7:d6:bc: c6:ea:28:d4:89:29:64:c8:c9:17:2b:6e:0b:ac:3a:3c:41:f3: e9:b2:20:b4:83:a9:14:7b:4f:87:60:a6:2e:83:d4:dd:bc:fb: 3e:a4:1e:a3:ce:da:1f:45:38:72:3c:8a:a9:a1:cf:dd:37:07: 8a:81:21:d0:9e:a9:75:61:09:b4:48:ed:3f:f7:91:80:64:2e: 76:66:d0:a9:fe:17:26:a3:9e:47:a0:1b:e7:a2:93:91:d1:e7: f9:24:52:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMjVBMTk3NTgxNkNEOUU4OUYzRDZFQTZBNzYzMDIyNDNC RUMzNDVFRTAeFw0yNTEwMTkxMTEyNTJaFw0yNTEwMjYxMTEyNTJaMBgxFjAUBgNV BAMTDTY4ZjRjN2I1LTBiOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoH2ULtrKQGvaSRsdAWw4KuD7rBEQxH33pCrQiUoGZtUpCnJywagso/93ZXYL6 oZ3st6qf0G1qTH4uk74dWLJERWZnLFltEFEx9g3kQTOcNhMfO1o3XlChMRl09tu0 tsMCVqZSUvO6zc8a/FNJBtsq35rSe2/6455By2EXK/t54ZzuxzePTJ6pJY7Zo8M5 0bUy4rKIyFXMiNGlWyy4+nMc3s46BbtrT9NjQjn1fXRlb9MRJmlByHcS7HUophPm bgcw+6DVJqz73E8OFiNlwrrkr/vy5lucFlo++jo8ta9jjG5k5J/hmakNAjmCxwxs UYOovYkSETpjKFbm/kRtlhFJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDlYu8x9Q qU7xHkqVQjebzlUNq1IwHwYDVR0jBBgwFoAUJaGXWBbNnonz1upqdjAiQ77DRe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzRGNkQ2RjYwNkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFHWFdCYk5ub256MXVwcWRqQWlRNzdEUmU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzRGNkQ2RjYwNkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9u ejF1cHFkakFpUTc3RFJlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfTgFcu/wuZN0dUOoSecJHDdViDMGd1zeUd4rZPVBZZ5wGQEH/K/uBf iZgBTaNuV/XiulybbaZ1/xLSUL5HO403jaqCNAY8QHNViNsMUySx+hVyiYdm9SGx MMjYBDiBMymS91LfFp1dN1f6CVgudHgk6VT9sJWHbaM0EOzOAY6pw10+E/dBdBZz uAEPAJ7nMmNZB6q5hhJB84eDaOMnuKfWvMbqKNSJKWTIyRcrbgusOjxB8+myILSD qRR7T4dgpi6D1N28+z6kHqPO2h9FOHI8iqmhz903B4qBIdCeqXVhCbRI7T/3kYBk LnZm0Kn+FyajnkegG+eik5HR5/kkUto= -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:23 2025 by rpki-client