$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json) Hash identifier: iXBQYD+WfTPHqhaABK3k8dlT1mVasvqOq+MVOUdfac4= Subject key identifier: 9E:CF:60:86:A7:20:86:40:F2:92:32:95:27:DF:10:43:94:08:33:71 Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft Manifest number: FC Signing time: Wed 05 Nov 2025 05:17:26 +0000 Manifest this update: Wed 05 Nov 2025 05:17:25 +0000 Manifest next update: Wed 12 Nov 2025 05:17:25 +0000 Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: PW+pQOKpHe05Phv8rA4EXtbpdIjaTHClm8c5F6aN638=) 2: 95C79E36379611EF87CBA24DC4F9AE02.roa (hash: ZMHJbDurrQwg9LuHdJ4fXoBTwDMXXjxbFZ/gpf/dfBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Validity Not Before: Nov 5 05:17:25 2025 GMT Not After : Nov 12 05:17:25 2025 GMT Subject: CN=690adde5-a8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:04:55:01:cd:1d:76:14:10:1f:9f:af:c2: 39:1b:de:c8:be:31:88:c3:e5:e5:00:07:1c:47:5a: 3e:5b:a7:b2:2e:78:74:d7:46:ca:cc:9c:33:1a:54: 6b:0a:ee:c4:95:d9:d3:34:df:41:50:80:15:a4:bb: b1:9e:9d:a7:61:fc:ad:11:33:aa:b1:d7:51:09:cb: e3:80:4a:d0:92:0e:84:fc:12:16:fa:10:95:fb:08: 8a:cb:01:de:9c:0a:2c:ff:e3:23:67:89:3d:61:6f: cb:b5:54:ca:b9:21:d4:66:6a:3c:be:53:f6:37:cd: 2c:c3:71:41:ef:30:3e:ba:bf:c7:b7:17:7f:d2:34: df:d4:44:de:05:24:a6:09:4c:e3:0b:50:38:b3:e5: 01:74:ee:6c:89:78:49:c5:30:06:13:d5:f5:2e:c3: 26:07:fb:10:89:e0:ed:6f:1f:20:6c:c1:ac:db:43: b3:01:1e:75:fa:db:a4:c4:fb:79:99:d4:2f:69:4d: 18:be:f3:95:c8:34:54:1e:f3:a1:22:c2:9c:d5:52: 6e:b1:20:32:2c:bb:7c:4b:d8:89:69:40:a8:11:22: 7a:60:a4:9f:c5:5f:2a:dd:59:40:36:9b:72:04:2a: 67:b9:25:d7:ee:5c:e9:f6:46:e0:c0:f7:b6:2f:c1: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CF:60:86:A7:20:86:40:F2:92:32:95:27:DF:10:43:94:08:33:71 X509v3 Authority Key Identifier: keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0b:8f:d3:82:33:a6:1f:c0:57:85:da:d1:e2:bd:53:b5:5a: 9a:dd:18:61:ef:b8:46:ce:7f:cb:cf:a5:60:46:49:24:4e:5a: 46:95:41:8e:a1:6e:e8:cf:6c:b0:8a:cd:3e:5e:2e:98:88:18: 36:f2:32:40:67:97:75:6e:ef:5f:50:c6:ed:93:72:81:b6:b0: 24:ba:15:0e:fd:d6:c9:ac:aa:d3:83:7f:5e:f1:73:c5:a8:3d: 18:8b:f2:f7:e4:7b:eb:72:be:2b:fb:dd:c9:4c:6b:3d:6b:a6: ee:83:ff:6c:2b:84:67:27:37:72:d8:41:21:7d:b4:27:18:0f: 5e:a7:df:13:26:5e:ce:d7:35:fa:eb:14:47:04:0a:c3:96:f0: e7:bf:a5:73:09:6c:69:a8:54:ec:04:ba:dc:95:4b:69:56:ee: b4:7d:1e:f2:f4:79:23:9a:9c:eb:c5:79:cd:16:89:83:9b:28: bc:93:58:78:c2:99:55:9e:0f:53:18:ae:d9:1b:41:cb:ab:9a: 87:ab:22:2f:33:a1:c8:7f:9d:1d:02:bb:64:a8:ce:a1:15:2d: 18:12:ca:20:f7:1d:d6:3e:67:34:fe:23:88:11:f1:1a:57:e7: d3:df:83:d1:2e:c0:17:6d:7d:e6:9c:eb:7c:6e:cc:69:be:bd: bd:a4:d2:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD MEIxNUI4RTAwHhcNMjUxMTA1MDUxNzI1WhcNMjUxMTEyMDUxNzI1WjAYMRYwFAYD VQQDEw02OTBhZGRlNS1hOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PgEVQHNHXYUEB+fr8I5G97IvjGIw+XlAAccR1o+W6eyLnh010bKzJwzGlRr Cu7EldnTNN9BUIAVpLuxnp2nYfytETOqsddRCcvjgErQkg6E/BIW+hCV+wiKywHe nAos/+MjZ4k9YW/LtVTKuSHUZmo8vlP2N80sw3FB7zA+ur/Htxd/0jTf1ETeBSSm CUzjC1A4s+UBdO5siXhJxTAGE9X1LsMmB/sQieDtbx8gbMGs20OzAR51+tukxPt5 mdQvaU0YvvOVyDRUHvOhIsKc1VJusSAyLLt8S9iJaUCoESJ6YKSfxV8q3VlANpty BCpnuSXX7lzp9kbgwPe2L8G19QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7PYIan IIZA8pIylSffEEOUCDNxMB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaC4/TgjOmH8BXhdrR4r1TtVqa3Rhh77hGzn/Lz6VgRkkkTlpGlUGO oW7oz2ywis0+Xi6YiBg28jJAZ5d1bu9fUMbtk3KBtrAkuhUO/dbJrKrTg39e8XPF qD0Yi/L35Hvrcr4r+93JTGs9a6bug/9sK4RnJzdy2EEhfbQnGA9ep98TJl7O1zX6 6xRHBArDlvDnv6VzCWxpqFTsBLrclUtpVu60fR7y9HkjmpzrxXnNFomDmyi8k1h4 wplVng9TGK7ZG0HLq5qHqyIvM6HIf50dArtkqM6hFS0YEsog9x3WPmc0/iOIEfEa V+fT34PRLsAXbX3mnOt8bsxpvr29pNJ3 -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:52 2025 by rpki-client