$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json) Hash identifier: Fw/peeQtX/PLg4lbPL5g8rBKEs/qy/9V1CrwZSBtwiM= Subject key identifier: 8E:D3:99:72:BE:6B:51:32:61:AC:F9:20:C3:10:B4:F5:C4:36:34:1B Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft Manifest number: 0422 Signing time: Sun 19 Oct 2025 02:15:24 +0000 Manifest this update: Sun 19 Oct 2025 02:15:23 +0000 Manifest next update: Sun 26 Oct 2025 02:15:23 +0000 Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: 2Ih0cv03uZOdKPD8fX0XM7Z3KkbCZ6T7J5KzJE89FKk=) 2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: aEYNM6Phn31D8FyeIqNiot79wvPM4Ab/EZ23BGQS/EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Validity Not Before: Oct 19 02:15:23 2025 GMT Not After : Oct 26 02:15:23 2025 GMT Subject: CN=68f449bc-3026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:21:22:59:89:c7:6c:d3:6a:52:4f:68:1e: ad:fd:39:5f:db:40:f6:11:02:e0:2b:25:3a:93:0f: fb:42:4d:61:b4:87:ec:c3:82:7f:8d:21:dd:b5:fa: 1a:e0:8a:99:0c:75:2a:3f:ae:c9:e9:df:1a:df:c9: 69:1e:04:ad:11:db:1b:2c:af:66:fa:be:71:aa:5f: 30:95:70:86:34:19:af:26:f9:ca:01:8c:57:55:6e: 57:72:ee:6e:4b:3b:8e:2d:91:51:e8:a1:a8:08:74: 79:4c:e5:02:d1:d9:c0:13:91:4a:15:dc:74:ca:28: 2d:6d:c0:10:b5:ab:93:19:24:91:fa:44:c5:c7:5f: c0:38:ef:89:ae:a3:01:7b:52:84:f8:f5:c2:5a:ae: aa:45:58:ba:76:78:69:19:88:0d:0f:eb:de:6c:0f: ca:48:e9:8c:9e:8d:55:a9:80:b1:3b:74:0d:35:a1: 44:5d:e8:4b:99:60:6b:ed:93:13:52:f3:72:3a:bf: 40:df:0b:25:4e:3f:6e:77:07:f6:03:22:62:c0:4d: cd:ae:b9:7e:83:9e:bd:1e:fa:de:48:a8:c0:42:14: 2a:87:6b:9c:cb:d6:2b:dd:be:b2:b0:90:12:e2:b5: 2e:93:8d:0e:6a:fc:fe:8c:37:f5:c0:94:d2:bf:37: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D3:99:72:BE:6B:51:32:61:AC:F9:20:C3:10:B4:F5:C4:36:34:1B X509v3 Authority Key Identifier: keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:92:07:d7:10:d0:3b:df:29:e6:af:ec:a0:89:28:f3:4b:25: d8:1d:a8:f2:7d:4b:52:cd:03:dd:e9:39:d1:19:5a:7a:67:82: e8:07:42:3e:90:9b:b1:ff:d2:b1:1c:a3:38:85:b1:c4:e7:7f: 27:ec:81:59:f1:59:2d:1c:6e:ea:b1:48:d1:17:b8:bb:9a:78: 1e:fd:02:fb:57:e3:35:e9:9a:f8:0b:d3:84:59:e3:d0:07:02: c9:29:14:88:70:be:59:b9:10:f9:49:8d:42:59:42:d5:88:59: c6:f7:72:0b:71:0d:04:25:05:83:02:30:72:af:aa:ba:9e:ab: 82:8b:75:97:d8:17:94:fd:18:f7:16:7d:e8:3b:1d:1f:7e:66: f4:d0:d1:ab:68:cc:51:9f:dd:05:59:ee:d7:5d:96:76:6e:93: 18:58:10:2a:ea:23:06:8b:97:aa:c6:70:6a:c8:aa:82:99:ca: c9:d3:ff:b9:e4:29:41:13:00:f4:51:95:8c:18:c2:df:6c:d7: 52:71:1c:d3:3a:62:9f:fc:ea:35:ce:e6:e1:13:60:88:98:d1: f8:c5:e5:5a:f7:63:04:a8:e9:b6:79:7e:86:fe:c0:2b:30:88: 27:77:ca:25:98:4b:c4:f2:60:9e:90:3b:e0:19:36:9f:ca:e0: e3:8e:42:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5 RTQ4MDY2NEQwHhcNMjUxMDE5MDIxNTIzWhcNMjUxMDI2MDIxNTIzWjAYMRYwFAYD VQQDEw02OGY0NDliYy0zMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ4hIlmJx2zTalJPaB6t/Tlf20D2EQLgKyU6kw/7Qk1htIfsw4J/jSHdtfoa 4IqZDHUqP67J6d8a38lpHgStEdsbLK9m+r5xql8wlXCGNBmvJvnKAYxXVW5Xcu5u SzuOLZFR6KGoCHR5TOUC0dnAE5FKFdx0yigtbcAQtauTGSSR+kTFx1/AOO+JrqMB e1KE+PXCWq6qRVi6dnhpGYgND+vebA/KSOmMno1VqYCxO3QNNaFEXehLmWBr7ZMT UvNyOr9A3wslTj9udwf2AyJiwE3Nrrl+g569HvreSKjAQhQqh2ucy9Yr3b6ysJAS 4rUuk40Oavz+jDf1wJTSvzcguQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7TmXK+ a1EyYaz5IMMQtPXENjQbMB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs ZzlTYmxIRzgzQWFlU0FaazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBckgfXENA73ynmr+ygiSjzSyXYHajyfUtSzQPd6TnRGVp6Z4LoB0I+ kJux/9KxHKM4hbHE538n7IFZ8VktHG7qsUjRF7i7mnge/QL7V+M16Zr4C9OEWePQ BwLJKRSIcL5ZuRD5SY1CWULViFnG93ILcQ0EJQWDAjByr6q6nquCi3WX2BeU/Rj3 Fn3oOx0ffmb00NGraMxRn90FWe7XXZZ2bpMYWBAq6iMGi5eqxnBqyKqCmcrJ0/+5 5ClBEwD0UZWMGMLfbNdScRzTOmKf/Oo1zubhE2CImNH4xeVa92MEqOm2eX6G/sAr MIgnd8olmEvE8mCekDvgGTafyuDjjkJm -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:16 2025 by rpki-client