$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: h4nd8ZoHEnULU/M6IZY73oYGMFCxCJ/wjRRkELU61Hc= Subject key identifier: 97:0F:A0:E8:47:F2:D0:DC:C8:A5:73:1A:26:5F:F9:EE:FA:52:06:51 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 1408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 13FC Signing time: Sat 18 Oct 2025 17:24:09 +0000 Manifest this update: Sat 18 Oct 2025 17:24:08 +0000 Manifest next update: Sat 25 Oct 2025 17:24:08 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: +uRJIfjwYRZLuF63jFwuHGg2lKn9j1KzMF0x/IWjQ/c=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: IqvtwPczbHtONnp7/SjDoKiW5eTz+eR8wc9lCI4pYs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5128 (0x1408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Oct 18 17:24:08 2025 GMT Not After : Oct 25 17:24:08 2025 GMT Subject: CN=68f3cd39-0b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:00:24:36:80:51:ad:24:e8:b9:0c:7a:3a: 49:79:6b:97:ca:df:14:af:ee:0c:08:44:14:77:7f: 13:b5:a4:00:9e:5a:3b:ee:63:ac:6d:dd:3a:fe:4d: e1:5a:52:7c:00:3d:03:7b:57:a4:73:8a:4a:39:76: c4:dc:28:8b:d9:97:e8:bc:09:71:d4:96:27:41:fa: df:7f:cd:25:53:52:18:4f:d1:0f:54:bd:a5:54:47: 94:31:b9:44:e4:79:40:73:8e:84:be:29:32:9c:3c: 78:6d:99:89:78:71:83:52:e9:53:3b:42:27:65:f1: ce:9e:9a:b0:57:39:66:9f:8b:ca:3b:36:8d:82:95: 01:d8:81:d9:1b:c4:9a:6c:7e:24:83:af:51:36:36: 37:95:6b:3e:3b:e5:bc:50:52:d2:af:01:e8:7c:2a: 21:6a:71:4b:2e:c2:b2:c8:18:39:6c:b9:5f:36:ab: a7:c1:cc:48:e7:5e:ef:16:97:fd:a2:72:f9:fe:ef: db:f3:9b:f6:02:18:8a:3a:d5:88:d9:8f:69:40:e0: 82:92:11:89:64:f7:92:c5:e3:d1:ac:f0:2f:6f:4c: 82:67:8c:d7:d6:9e:c6:1c:cb:24:e8:af:b2:ab:1a: ba:bd:35:50:22:44:55:5f:da:af:b8:00:45:9e:da: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:A0:E8:47:F2:D0:DC:C8:A5:73:1A:26:5F:F9:EE:FA:52:06:51 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:3e:9a:b9:e0:56:ff:09:f0:09:68:89:d7:17:77:fb:45:2c: d1:fe:e8:24:1f:36:2b:8e:8a:c1:c2:d1:2a:67:82:a6:83:e2: 72:92:78:52:a4:54:35:e0:c6:43:f9:fe:96:a0:64:b2:08:08: 57:00:22:84:ef:f5:22:55:b9:13:ee:6e:57:7a:7b:50:94:cd: 9a:e8:1b:62:9d:98:6c:56:98:c7:5d:10:d6:4e:d3:bf:7f:c1: 09:32:c0:75:99:c9:d6:07:c3:f3:ad:66:59:9f:af:4f:35:05: 46:be:ba:cd:f1:d5:59:d1:7b:83:d9:c0:17:87:05:92:10:cd: 1b:1a:a6:51:51:e3:ef:44:ae:5b:47:26:71:f1:72:0c:bb:ea: 48:17:14:f9:6e:e2:2d:53:2d:48:b8:b2:d4:79:2d:18:23:35: a5:b0:96:ca:3e:91:06:a8:4c:09:f7:29:88:9c:b5:14:e9:b6: f4:02:a5:e6:a2:16:fb:f0:23:9f:5d:1c:59:dd:80:ec:55:ea: 75:2d:69:c8:1d:8a:fc:a7:bc:e5:20:d9:a6:e0:7e:0d:58:65: 08:55:5c:73:a9:b6:f2:f2:bc:46:ce:5e:04:94:64:9c:3a:5d: 85:5d:e8:cc:f8:19:bd:b3:99:3d:19:99:96:c4:3b:c3:05:09: d2:43:76:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjUxMDE4MTcyNDA4WhcNMjUxMDI1MTcyNDA4WjAYMRYwFAYD VQQDEw02OGYzY2QzOS0wYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4MAJDaAUa0k6LkMejpJeWuXyt8Ur+4MCEQUd38TtaQAnlo77mOsbd06/k3h WlJ8AD0De1ekc4pKOXbE3CiL2ZfovAlx1JYnQfrff80lU1IYT9EPVL2lVEeUMblE 5HlAc46EvikynDx4bZmJeHGDUulTO0InZfHOnpqwVzlmn4vKOzaNgpUB2IHZG8Sa bH4kg69RNjY3lWs+O+W8UFLSrwHofCohanFLLsKyyBg5bLlfNqunwcxI517vFpf9 onL5/u/b85v2AhiKOtWI2Y9pQOCCkhGJZPeSxePRrPAvb0yCZ4zX1p7GHMsk6K+y qxq6vTVQIkRVX9qvuABFntqbjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcPoOhH 8tDcyKVzGiZf+e76UgZRMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXPpq54Fb/CfAJaInXF3f7RSzR/ugkHzYrjorBwtEqZ4Kmg+JyknhS pFQ14MZD+f6WoGSyCAhXACKE7/UiVbkT7m5XentQlM2a6BtinZhsVpjHXRDWTtO/ f8EJMsB1mcnWB8PzrWZZn69PNQVGvrrN8dVZ0XuD2cAXhwWSEM0bGqZRUePvRK5b RyZx8XIMu+pIFxT5buItUy1IuLLUeS0YIzWlsJbKPpEGqEwJ9ymInLUU6bb0AqXm ohb78COfXRxZ3YDsVep1LWnIHYr8p7zlINmm4H4NWGUIVVxzqbby8rxGzl4ElGSc Ol2FXejM+Bm9s5k9GZmWxDvDBQnSQ3bz -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:11 2025 by rpki-client