$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft File: JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json) Hash identifier: bondmUMMYFI13x3UdPPMasbPdPmhRxohW/GtZnwUFLk= Subject key identifier: 48:B0:99:A1:A2:E3:08:B6:ED:85:E8:DF:9B:D1:0A:7B:77:5C:78:09 Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F Certificate issuer: /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft Manifest number: 0CE3 Signing time: Sat 18 Oct 2025 18:47:48 +0000 Manifest this update: Sat 18 Oct 2025 18:47:47 +0000 Manifest next update: Sat 25 Oct 2025 18:47:47 +0000 Files and hashes: 1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: 88OTI/sX2XCwotZo1g3jZP8e7b6y19J3cU42IvRzYVo=) 2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=) 3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Validity Not Before: Oct 18 18:47:47 2025 GMT Not After : Oct 25 18:47:47 2025 GMT Subject: CN=68f3e0d3-7542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:bf:73:99:b3:29:cb:0b:8f:c3:28:1f:65: 28:27:8f:1f:f3:37:83:83:48:d8:8b:f6:e6:0b:8c: c4:94:a5:51:78:f4:9a:07:c8:ab:dd:7c:be:36:26: 5c:9f:06:bc:47:24:9c:5d:bd:f1:00:a0:08:67:c4: 54:5d:e9:f7:dc:2f:74:d3:bd:78:bb:63:ca:14:cc: 2c:35:d1:d6:f1:ff:e5:88:b7:57:dc:e5:1a:9d:ab: 19:6c:ad:29:21:24:f3:2e:85:49:17:92:5d:3f:3a: 30:5b:1a:b5:25:74:5d:91:65:b9:fe:51:80:98:fa: e6:74:89:44:de:e1:30:ad:e5:aa:ac:f8:a7:f0:8b: 51:da:df:b0:7e:3d:ee:f9:95:2e:c3:4b:8e:44:0c: 5f:42:fb:db:53:2f:e1:0e:5f:75:c3:6a:f9:19:1a: 63:e4:e0:c4:d6:3c:5b:6a:a9:41:5f:cb:22:fb:95: 33:67:cc:c0:48:ae:8f:18:ab:e7:84:aa:e9:3e:7a: 8b:af:a9:0c:0b:51:31:1a:75:a9:c2:9a:e4:b8:0f: c2:18:de:13:0a:c3:04:07:31:30:4b:9e:7e:cd:83: 47:fd:0e:54:42:b3:a8:6e:b5:31:a6:2c:cb:b8:cd: bb:02:cd:3b:c1:61:38:ac:23:54:62:70:a8:4c:0e: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B0:99:A1:A2:E3:08:B6:ED:85:E8:DF:9B:D1:0A:7B:77:5C:78:09 X509v3 Authority Key Identifier: keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:fe:26:28:7d:f8:d0:4b:87:f4:87:d8:01:c0:2f:74:ef: 52:97:a8:ea:77:e0:ad:87:36:7e:63:55:fa:eb:2f:6f:83:f6: ff:05:9e:16:fb:4a:04:b5:51:bf:74:58:42:e5:ab:19:76:5a: fa:7b:b5:41:29:b4:da:09:44:5e:5a:9c:55:10:90:2c:ed:6c: 77:f7:2b:fc:b7:43:bc:9d:d7:03:9c:7f:8f:11:a9:ac:60:15: ad:2c:15:6c:f2:01:cc:74:4a:e8:0b:00:0d:6d:31:3c:5f:2d: f6:6d:56:76:60:23:0b:d8:62:02:4c:55:bc:7b:22:55:2b:09: 7b:af:a7:7c:69:34:ef:b4:90:15:e3:8d:b3:c5:09:32:5c:97: 72:4d:41:5a:88:cc:eb:fb:b6:df:3f:30:ac:42:83:22:18:d9: 87:da:07:77:8a:dc:07:ca:14:24:10:0b:16:6f:2e:cd:a5:a9: 31:8c:20:45:55:f7:64:ca:38:79:3e:1b:01:d7:00:dc:00:a5: 46:b9:b9:fb:a8:6c:3b:5a:c6:de:81:a9:7d:87:c7:7a:2a:ed: 99:53:cf:2b:59:94:ec:f3:c2:2e:d8:bf:a3:9b:a0:b0:42:0e: dd:44:fb:01:ec:43:a4:3e:89:57:28:a0:76:cd:a4:91:24:98: 91:c4:1c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD RjQxN0M5M0YwHhcNMjUxMDE4MTg0NzQ3WhcNMjUxMDI1MTg0NzQ3WjAYMRYwFAYD VQQDEw02OGYzZTBkMy03NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfy/c5mzKcsLj8MoH2UoJ48f8zeDg0jYi/bmC4zElKVRePSaB8ir3Xy+NiZc nwa8RyScXb3xAKAIZ8RUXen33C900714u2PKFMwsNdHW8f/liLdX3OUanasZbK0p ISTzLoVJF5JdPzowWxq1JXRdkWW5/lGAmPrmdIlE3uEwreWqrPin8ItR2t+wfj3u +ZUuw0uORAxfQvvbUy/hDl91w2r5GRpj5ODE1jxbaqlBX8si+5UzZ8zASK6PGKvn hKrpPnqLr6kMC1ExGnWpwprkuA/CGN4TCsMEBzEwS55+zYNH/Q5UQrOobrUxpizL uM27As07wWE4rCNUYnCoTA4ALQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiwmaGi 4wi27YXo35vRCnt3XHgJMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V QjVXNkc2bXgzYV9QUVh5VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Mf4mKH340EuH9IfYAcAvdO9Sl6jqd+CthzZ+Y1X66y9vg/b/BZ4W +0oEtVG/dFhC5asZdlr6e7VBKbTaCUReWpxVEJAs7Wx39yv8t0O8ndcDnH+PEams YBWtLBVs8gHMdEroCwANbTE8Xy32bVZ2YCML2GICTFW8eyJVKwl7r6d8aTTvtJAV 442zxQkyXJdyTUFaiMzr+7bfPzCsQoMiGNmH2gd3itwHyhQkEAsWby7NpakxjCBF Vfdkyjh5PhsB1wDcAKVGubn7qGw7Wsbegal9h8d6Ku2ZU88rWZTs88Iu2L+jm6Cw Qg7dRPsB7EOkPolXKKB2zaSRJJiRxByb -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:43 2025 by rpki-client