$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft File: JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json) Hash identifier: cxx4e/fxoG2Q0pGNsA16OywxKItDh6C6dTRuFrRu0m4= Subject key identifier: DF:B0:B3:08:F1:51:51:FB:4F:38:AF:55:CD:66:5B:B4:5C:89:0C:16 Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 Certificate issuer: /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft Manifest number: 47BE Signing time: Mon 20 Oct 2025 14:22:08 +0000 Manifest this update: Mon 20 Oct 2025 14:22:07 +0000 Manifest next update: Mon 27 Oct 2025 14:22:07 +0000 Files and hashes: 1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: pOTrQMXXqbMEFrUPcSGnvPxJ0mKOgE9tboj+oXYer5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Validity Not Before: Oct 20 14:22:07 2025 GMT Not After : Oct 27 14:22:07 2025 GMT Subject: CN=68f64590-0371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9d:85:ad:47:d0:0b:e7:fc:86:03:d5:b0:e3: 3b:8a:b8:03:b0:6c:fd:82:90:07:00:ae:a8:21:58: 43:9c:e8:9a:3c:4d:7a:aa:39:db:e3:f7:8e:ed:63: 8b:88:c3:c6:d8:ef:85:9b:b9:db:49:9a:79:d1:13: cf:9b:aa:dd:36:b4:96:6d:8a:d1:e1:1d:10:1d:0e: 7b:83:56:00:38:8d:8f:e1:b5:7b:42:44:05:7c:b6: aa:41:31:01:68:9f:ce:12:3f:ee:63:73:8a:74:9d: a5:31:0c:41:ed:56:e9:56:36:80:56:e2:fa:f1:2d: 5d:22:5e:71:53:f8:7c:de:5f:27:44:23:7e:37:19: e3:ea:e1:bf:cf:a0:97:40:f5:01:2d:64:87:39:89: e7:dc:da:92:bd:56:67:98:03:37:68:02:1d:a1:fa: b6:2b:be:79:67:c6:63:6f:81:cd:7a:55:08:38:0e: 80:d0:4f:bd:18:ca:b9:14:32:05:ac:69:4c:be:b9: 2b:11:32:83:f2:44:12:a5:9d:f5:bf:4c:54:d3:88: 54:d6:f7:b0:c4:45:02:91:e6:80:b5:0f:53:2f:5c: a0:43:e9:81:25:10:1c:8d:39:1f:09:31:92:30:52: e1:59:d9:be:24:5a:60:0e:ad:59:f7:5f:26:98:66: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B0:B3:08:F1:51:51:FB:4F:38:AF:55:CD:66:5B:B4:5C:89:0C:16 X509v3 Authority Key Identifier: keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:46:da:c1:fc:a0:39:a3:9d:4c:01:85:ba:fd:97:12:a5:db: e8:94:42:eb:39:fe:e9:c0:d6:fe:3f:66:eb:2e:0d:0f:2d:e6: 30:09:1a:31:55:51:92:4c:3a:5a:b6:f6:ab:56:46:49:4e:86: 57:15:bc:23:a8:1e:04:77:4d:b5:0d:b1:30:21:fe:8b:cb:03: 96:6b:fc:c7:44:20:7d:ab:1c:a1:13:55:22:14:82:d1:74:01: c8:52:18:42:a5:93:a8:ed:14:bf:30:dd:b3:48:39:c7:01:c4: 1a:73:07:6a:6e:de:8c:c3:2a:31:af:41:31:43:ad:2e:db:3b: 0d:ef:fc:69:16:d9:35:2a:ae:a5:70:58:92:d1:91:a9:99:32: 68:1b:d8:87:75:ef:80:c4:f9:e7:71:bc:dc:33:26:c3:15:2d: 7a:0d:4c:c1:c2:64:6b:d6:27:61:f2:f7:7c:5c:b5:d9:d0:5a: df:fc:ca:21:f9:a7:06:8a:b4:7c:25:4d:41:42:f1:9f:2f:69: 26:15:0b:63:b1:59:fb:2a:b1:16:00:1b:8b:24:22:11:06:a5: f0:d1:ff:10:06:f2:1e:bf:cf:70:2a:9d:4a:c7:37:f1:3e:9f: 33:a4:19:a2:70:84:c8:c0:e3:9a:3a:ca:7f:da:2f:c8:b2:00: b9:f6:b8:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDI3MjMwN0IyMjc5MzZEQjNFRTNCNjU0MDYwMkMzMkQ5 NTgzMDlGNjEwHhcNMjUxMDIwMTQyMjA3WhcNMjUxMDI3MTQyMjA3WjAYMRYwFAYD VQQDEw02OGY2NDU5MC0wMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA652FrUfQC+f8hgPVsOM7irgDsGz9gpAHAK6oIVhDnOiaPE16qjnb4/eO7WOL iMPG2O+Fm7nbSZp50RPPm6rdNrSWbYrR4R0QHQ57g1YAOI2P4bV7QkQFfLaqQTEB aJ/OEj/uY3OKdJ2lMQxB7VbpVjaAVuL68S1dIl5xU/h83l8nRCN+Nxnj6uG/z6CX QPUBLWSHOYnn3NqSvVZnmAM3aAIdofq2K755Z8Zjb4HNelUIOA6A0E+9GMq5FDIF rGlMvrkrETKD8kQSpZ31v0xU04hU1vewxEUCkeaAtQ9TL1ygQ+mBJRAcjTkfCTGS MFLhWdm+JFpgDq1Z918mmGZR3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+wswjx UVH7TzivVc1mW7RciQwWMB8GA1UdIwQYMBaAFCcjB7Ink22z7jtlQGAsMtlYMJ9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJiUHVPMlZBWUN3eTJWZ3du MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0p5TUhzaWVUYmJQdU8yVkFZQ3d5MlZnd24yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJi UHVPMlZBWUN3eTJWZ3duMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4RtrB/KA5o51MAYW6/ZcSpdvolELrOf7pwNb+P2brLg0PLeYwCRox VVGSTDpatvarVkZJToZXFbwjqB4Ed021DbEwIf6LywOWa/zHRCB9qxyhE1UiFILR dAHIUhhCpZOo7RS/MN2zSDnHAcQacwdqbt6Mwyoxr0ExQ60u2zsN7/xpFtk1Kq6l cFiS0ZGpmTJoG9iHde+AxPnncbzcMybDFS16DUzBwmRr1idh8vd8XLXZ0Frf/Moh +acGirR8JU1BQvGfL2kmFQtjsVn7KrEWABuLJCIRBqXw0f8QBvIev89wKp1Kxzfx Pp8zpBmicITIwOOaOsp/2i/IsgC59riN -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:09 2025 by rpki-client