$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json) Hash identifier: KD3Rc2zpGonTCfPrF4zHMAEoVOmkIzRba9oBbUv6NgI= Subject key identifier: 1C:64:3F:6D:2F:49:3F:DE:CB:32:12:43:09:D2:AC:94:3A:78:0F:EE Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Certificate serial: 06B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft Manifest number: 06AC Signing time: Sun 02 Nov 2025 22:13:10 +0000 Manifest this update: Sun 02 Nov 2025 22:13:09 +0000 Manifest next update: Sun 09 Nov 2025 22:13:09 +0000 Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: +HZ+QhFlLY2W95RzNGWhjV+/uUnfB/pe9JECM1R1wc0=) 2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: IYSv1L8CrFfVZhb7vVnKxPTFDHznaeEotmtw/x51wYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Validity Not Before: Nov 2 22:13:09 2025 GMT Not After : Nov 9 22:13:09 2025 GMT Subject: CN=6907d775-5b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:20:f6:d6:f6:03:16:62:a6:53:d8:8c:cf: 1c:87:68:43:0c:61:71:34:1f:18:c1:56:79:ef:ec: fb:82:f6:1e:d3:3e:20:15:a3:d6:b6:fc:02:f3:6b: 9a:a3:f0:06:4e:51:b7:84:60:08:cc:5f:af:9a:a3: 0a:3d:e3:89:3d:00:3d:4b:b2:63:53:7c:79:df:56: c7:bf:75:84:e7:e7:31:88:dd:94:9f:86:ac:43:b9: 1c:fc:1d:de:bd:da:9f:12:dd:5f:fe:01:1e:5c:63: 5e:70:6b:65:62:ae:3d:90:8e:69:3b:76:6c:0d:30: 9b:7a:56:46:41:fc:4d:a1:14:f5:42:41:f4:b2:41: 9a:e5:cc:a7:1d:04:9f:81:7e:78:c8:f6:8a:9d:e0: d1:20:8d:60:f2:13:21:0c:e5:d7:10:28:07:cc:20: 16:2a:98:d1:fe:c9:24:b4:af:0b:b5:ce:7d:00:ee: 4c:d3:1a:7a:ee:2c:1a:82:91:3f:e1:4b:d7:ba:b6: 05:77:90:18:88:89:6c:d3:d1:ed:fd:b6:7e:bf:73: a8:ca:a4:c8:02:81:44:f1:35:93:b3:ac:7a:86:18: 47:2d:9e:73:24:89:54:85:2f:01:10:c2:38:d3:f8: 1a:a1:05:a1:0c:0e:88:6c:b0:32:96:52:f7:71:69: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:64:3F:6D:2F:49:3F:DE:CB:32:12:43:09:D2:AC:94:3A:78:0F:EE X509v3 Authority Key Identifier: keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:90:d5:3e:25:b4:d2:1f:8c:30:12:10:1d:fb:07:4c:17:82: e2:c5:b4:aa:98:e5:3b:67:96:2c:0f:7d:20:41:74:50:c6:73: 46:a0:f8:e7:b0:c4:ff:81:93:de:f0:ae:26:72:68:b5:e2:85: 54:7c:45:80:cf:80:42:54:58:46:f8:49:cf:ea:54:a1:08:5c: 71:18:60:d5:fd:03:64:9a:f2:75:71:1b:6b:7f:75:cd:fe:02: d3:70:b6:a3:33:1a:3d:e1:3c:e6:6d:e6:15:46:01:c8:0a:fd: da:a3:6d:fd:42:85:8c:f4:13:f1:35:82:6d:85:ba:c4:05:a5: 64:df:34:93:1b:46:b2:7d:a7:f7:27:e1:25:55:2b:eb:04:6d: ea:ec:1c:ae:96:30:db:24:fc:50:27:2b:cf:bf:1d:d6:95:c4: a7:e5:e0:25:6f:fb:cf:50:fe:d8:62:36:8a:cb:7f:d8:ce:38: 54:b7:55:59:cf:dc:fe:68:e2:59:bf:3e:11:97:31:34:d6:0d: 1d:e8:d5:07:65:c3:ce:82:d9:16:85:8a:8a:ba:de:42:20:f6: 55:5f:24:b1:a2:49:34:32:28:9b:52:f7:25:2b:7a:51:e0:cd: 10:fd:88:17:72:28:37:85:a7:ea:60:d2:46:45:fd:c5:2b:27: 19:41:5b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRCNTcxMTAvBgNVBAUTKDI1QjYxNzhCQTRGODZGRjBCNUYyNTUxNzgwOUJERjIw RDk0NjhFNjkwHhcNMjUxMTAyMjIxMzA5WhcNMjUxMTA5MjIxMzA5WjAYMRYwFAYD VQQDEw02OTA3ZDc3NS01YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGQg9tb2AxZiplPYjM8ch2hDDGFxNB8YwVZ57+z7gvYe0z4gFaPWtvwC82ua o/AGTlG3hGAIzF+vmqMKPeOJPQA9S7JjU3x531bHv3WE5+cxiN2Un4asQ7kc/B3e vdqfEt1f/gEeXGNecGtlYq49kI5pO3ZsDTCbelZGQfxNoRT1QkH0skGa5cynHQSf gX54yPaKneDRII1g8hMhDOXXECgHzCAWKpjR/skktK8Ltc59AO5M0xp67iwagpE/ 4UvXurYFd5AYiIls09Ht/bZ+v3OoyqTIAoFE8TWTs6x6hhhHLZ5zJIlUhS8BEMI4 0/gaoQWhDA6IbLAyllL3cWnPrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxkP20v ST/eyzISQwnSrJQ6eA/uMB8GA1UdIwQYMBaAFCW2F4uk+G/wtfJVF4Cb3yDZRo5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEI1Ny84MzhDODkxNjgz NTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJfQzE4bFVYZ0p2ZklObEdq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0piWVhpNlQ0Yl9DMThsVVhnSnZmSU5sR2ptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEI1Ny84MzhDODkxNjgzNTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJf QzE4bFVYZ0p2ZklObEdqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjkNU+JbTSH4wwEhAd+wdMF4LixbSqmOU7Z5YsD30gQXRQxnNGoPjn sMT/gZPe8K4mcmi14oVUfEWAz4BCVFhG+EnP6lShCFxxGGDV/QNkmvJ1cRtrf3XN /gLTcLajMxo94TzmbeYVRgHICv3ao239QoWM9BPxNYJthbrEBaVk3zSTG0ayfaf3 J+ElVSvrBG3q7ByuljDbJPxQJyvPvx3WlcSn5eAlb/vPUP7YYjaKy3/YzjhUt1VZ z9z+aOJZvz4RlzE01g0d6NUHZcPOgtkWhYqKut5CIPZVXySxokk0MiibUvclK3pR 4M0Q/YgXcig3hafqYNJGRf3FKycZQVvx -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:54 2025 by rpki-client