$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: riQ7xh1BbEadk8GMp9ZqtfISMskuArcZ0QnMv9eTb7o= Subject key identifier: FF:D2:A4:AF:3C:9F:75:CE:30:C7:2A:9A:45:D6:CE:CB:3D:A8:C5:30 Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 1FD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1F86 Signing time: Sat 18 Oct 2025 16:18:37 +0000 Manifest this update: Sat 18 Oct 2025 16:18:36 +0000 Manifest next update: Sat 25 Oct 2025 16:18:36 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: mPNTs6ElpXZOCmPR6r+q8OyJ6opJ2F2AL+jBcB2mPzQ=) 2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ruc/xUwDnNEwkE2/jK0HE26pVyzAxl1jWbriA1MT2XI=) 3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: l81KZYm8B7McIqBnNG7M2LbcnjjotjoHq+OGQq2Xixo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8150 (0x1fd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Oct 18 16:18:36 2025 GMT Not After : Oct 25 16:18:36 2025 GMT Subject: CN=68f3bddd-3ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:09:5b:ae:3f:a5:4c:b2:06:7e:a7:36:3b: 63:f1:d7:e8:0b:ba:c0:05:a3:b8:f7:ba:b7:25:bc: 6e:88:03:e9:34:3e:1d:34:f2:f6:8d:25:94:7b:e4: c6:76:19:7b:cb:c5:89:a6:78:bc:d7:c7:8e:e3:21: 0c:f9:63:b6:4b:e3:b9:e0:48:fe:64:21:d3:0e:bf: ec:4c:b1:3e:a4:be:8c:02:3f:13:63:3f:88:88:89: 54:f6:cf:90:e4:c9:7f:37:2c:1e:e1:8e:b8:1a:35: 24:d5:1d:a7:93:18:6c:61:35:75:fe:ed:b4:79:fc: 18:cf:62:69:7d:e9:a7:19:72:ab:98:27:fa:13:07: 82:11:92:09:d0:74:04:5f:74:2f:96:c2:48:17:bf: f6:51:a5:67:97:51:28:5a:4d:d4:00:f3:6f:78:ad: bd:bb:a7:4e:11:22:63:0a:b6:74:49:af:24:a6:1b: b4:72:23:b3:90:9e:7f:30:c6:61:5b:f4:5a:1a:cf: 1f:ce:5c:a5:20:84:4b:22:5a:bf:e8:13:19:86:79: 0b:60:2f:df:00:06:2a:43:07:48:0d:f5:82:2f:51: f6:47:c5:43:4a:3b:9b:83:1f:58:4c:1a:45:a8:17: 93:f8:92:0f:9f:6a:a9:81:72:79:91:d9:e0:24:10: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D2:A4:AF:3C:9F:75:CE:30:C7:2A:9A:45:D6:CE:CB:3D:A8:C5:30 X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:7b:8a:94:c9:b1:05:26:2e:bc:d7:94:d4:1a:d2:49:c2:de: aa:2e:53:ba:eb:24:9d:09:7a:33:ab:93:c8:e2:77:72:a0:2b: 3e:80:45:1a:36:a9:80:42:e4:42:02:c9:f7:0b:27:bc:a0:b5: 42:3b:35:d3:11:10:99:5e:07:88:b9:0f:9a:cb:d4:8b:87:b6: e1:be:81:46:f7:dd:89:60:e6:32:38:71:55:1b:6c:1c:e3:da: 8a:37:e2:dd:9a:7e:c9:de:d2:62:05:9b:54:19:91:9f:4e:fa: 56:27:15:8e:e3:10:05:1a:07:a6:15:9c:a5:c2:d2:9e:f7:b6: 38:7d:c0:0b:aa:3e:d4:80:0d:4e:38:e0:5b:0c:5d:7d:08:3c: 2b:a8:3e:f9:3c:c2:29:31:2c:11:2f:f7:7b:db:21:b4:57:48: dd:82:9d:3e:7e:48:49:54:2d:7b:1d:b1:57:3b:83:b2:18:e3: 8f:01:23:72:b4:25:ba:7e:d0:98:93:91:64:90:d5:2f:7c:2f: 61:1b:c4:34:45:8c:c2:6b:2f:c5:09:ae:d0:9e:93:bf:79:51: e9:cf:63:17:9f:c9:d2:d2:f9:42:3d:5d:10:62:88:6e:99:67: c4:a0:51:cd:87:82:3e:50:93:f0:3b:fb:2f:e3:cb:85:0b:85: f2:6a:ae:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjUxMDE4MTYxODM2WhcNMjUxMDI1MTYxODM2WjAYMRYwFAYD VQQDEw02OGYzYmRkZC0zYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgoJW64/pUyyBn6nNjtj8dfoC7rABaO497q3JbxuiAPpND4dNPL2jSWUe+TG dhl7y8WJpni818eO4yEM+WO2S+O54Ej+ZCHTDr/sTLE+pL6MAj8TYz+IiIlU9s+Q 5Ml/Nywe4Y64GjUk1R2nkxhsYTV1/u20efwYz2JpfemnGXKrmCf6EweCEZIJ0HQE X3QvlsJIF7/2UaVnl1EoWk3UAPNveK29u6dOESJjCrZ0Sa8kphu0ciOzkJ5/MMZh W/RaGs8fzlylIIRLIlq/6BMZhnkLYC/fAAYqQwdIDfWCL1H2R8VDSjubgx9YTBpF qBeT+JIPn2qpgXJ5kdngJBCOaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/SpK88 n3XOMMcqmkXWzss9qMUwMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTe4qUybEFJi6815TUGtJJwt6qLlO66ySdCXozq5PI4ndyoCs+gEUa NqmAQuRCAsn3Cye8oLVCOzXTERCZXgeIuQ+ay9SLh7bhvoFG992JYOYyOHFVG2wc 49qKN+Ldmn7J3tJiBZtUGZGfTvpWJxWO4xAFGgemFZylwtKe97Y4fcALqj7UgA1O OOBbDF19CDwrqD75PMIpMSwRL/d72yG0V0jdgp0+fkhJVC17HbFXO4OyGOOPASNy tCW6ftCYk5FkkNUvfC9hG8Q0RYzCay/FCa7QnpO/eVHpz2MXn8nS0vlCPV0QYohu mWfEoFHNh4I+UJPwO/sv48uFC4Xyaq5c -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:11 2025 by rpki-client