$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft File: JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json) Hash identifier: uWZ3AgeFeWFOOvjiTdP9KEvljWd6WgZNtXesdQdgLb0= Subject key identifier: A6:FC:0B:6F:28:BE:B6:EB:B5:36:B6:10:78:2B:26:34:94:75:31:ED Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Certificate serial: 2844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft Manifest number: 2826 Signing time: Tue 04 Nov 2025 15:41:59 +0000 Manifest this update: Tue 04 Nov 2025 15:41:59 +0000 Manifest next update: Tue 11 Nov 2025 15:41:59 +0000 Files and hashes: 1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: A8Qe4bMMentnT1kmaIninDt1OnG4fUd6XR9hMQ+Y8F4=) 2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: 0S9GAzXdX8/eY+v1QihZwNwaaUy/f0ZCSclJYlMg6j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10308 (0x2844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Validity Not Before: Nov 4 15:41:59 2025 GMT Not After : Nov 11 15:41:59 2025 GMT Subject: CN=690a1ec7-9803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:35:60:1b:2e:5c:50:5a:1d:c2:e7:4e:0f: 8e:86:c9:3e:49:d2:28:bd:c5:e9:f9:e0:1d:97:66: 1f:9c:21:15:5a:5a:8b:e7:75:14:8c:ff:41:ac:a2: 35:78:31:59:a5:eb:7b:1d:54:bd:65:06:e1:8d:64: 62:39:2c:62:c6:55:71:7e:f2:31:33:af:d7:89:50: c9:c3:ed:f3:bf:38:7c:51:7b:f7:e1:40:20:07:7a: 85:30:35:04:ed:8e:41:ac:a3:f3:16:78:8e:66:4c: 7e:2c:6c:65:f0:13:2b:ca:44:fb:15:16:ac:b6:d3: cb:38:79:40:1e:04:47:d9:1d:5b:c7:94:80:8f:1b: 30:da:01:94:45:70:ab:70:db:7c:86:5a:94:91:f8: c7:db:0f:61:12:e8:c2:f8:48:c0:25:47:90:46:58: bc:a3:b3:98:8e:94:2c:9e:9c:43:ba:d7:41:80:96: 02:08:5c:0d:f0:ff:fb:0e:d3:31:7b:76:d3:b2:d3: 04:94:e6:71:6b:6f:93:ad:ed:7d:14:90:a4:d7:3a: ee:04:21:33:73:ce:64:c3:e0:73:9b:a2:19:cc:e1: 49:09:bf:ba:cf:36:58:04:b3:8c:15:92:c7:3b:c5: e7:f6:9d:7a:ba:09:c7:77:7f:21:35:02:33:a7:b4: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FC:0B:6F:28:BE:B6:EB:B5:36:B6:10:78:2B:26:34:94:75:31:ED X509v3 Authority Key Identifier: keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3a:88:84:d0:76:90:ce:e2:8d:ad:86:6a:4b:76:e2:a5:8c: 31:6d:e8:5e:19:ca:32:5a:aa:d0:38:8b:65:7b:88:c2:44:e1: b0:8c:10:d4:d4:5a:00:02:26:ba:a4:c2:df:eb:18:c3:88:c2: 7c:16:7e:56:ed:6c:b4:99:d7:b6:f4:41:35:59:03:95:57:97: 10:8c:d3:0d:a9:33:a2:7f:d0:d7:0f:bf:16:b2:19:82:a3:61: af:64:b5:6a:4e:f2:df:dc:a6:1e:ba:b8:54:35:58:2e:9d:a8: bd:9e:7a:de:50:7c:97:69:31:5d:07:11:75:e9:85:fe:fd:c5: 99:d7:e2:ab:10:c5:91:5e:e2:71:cb:6c:56:6c:a2:54:28:34: 51:2a:27:3e:08:b8:72:c6:6a:6a:a9:57:59:3c:5f:3f:fc:f8: 0f:1d:ab:76:d3:a7:0d:f5:32:77:a6:2e:d1:3b:41:23:ba:3e: df:8a:63:7d:b6:f3:5a:c8:c0:ae:67:84:4c:45:e6:6c:19:2a: 25:6f:bc:ef:22:8b:07:d9:a8:c4:c1:ec:e9:7c:33:18:28:1e: dc:4e:b8:3c:98:34:ef:0f:83:0c:82:6d:94:9e:7f:0d:8c:c3: c8:0e:a2:04:4f:d2:3f:7d:fe:a1:07:c4:5a:24:fb:a3:a8:b8: 51:e5:55:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC NkIyREM5N0EwHhcNMjUxMTA0MTU0MTU5WhcNMjUxMTExMTU0MTU5WjAYMRYwFAYD VQQDEw02OTBhMWVjNy05ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGo1YBsuXFBaHcLnTg+Ohsk+SdIovcXp+eAdl2YfnCEVWlqL53UUjP9BrKI1 eDFZpet7HVS9ZQbhjWRiOSxixlVxfvIxM6/XiVDJw+3zvzh8UXv34UAgB3qFMDUE 7Y5BrKPzFniOZkx+LGxl8BMrykT7FRasttPLOHlAHgRH2R1bx5SAjxsw2gGURXCr cNt8hlqUkfjH2w9hEujC+EjAJUeQRli8o7OYjpQsnpxDutdBgJYCCFwN8P/7DtMx e3bTstMElOZxa2+Tre19FJCk1zruBCEzc85kw+Bzm6IZzOFJCb+6zzZYBLOMFZLH O8Xn9p16ugnHd38hNQIzp7Tv4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKb8C28o vrbrtTa2EHgrJjSUdTHtMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5 WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi8zMjg4QzMxMkEyRTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9w Yjl6ZXNqV214SU8yc3R5WG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgOoiE0HaQzuKNrYZqS3bipYwxbeheGcoyWqrQOItle4jCROGwjBDU 1FoAAia6pMLf6xjDiMJ8Fn5W7Wy0mde29EE1WQOVV5cQjNMNqTOif9DXD78WshmC o2GvZLVqTvLf3KYeurhUNVgunai9nnreUHyXaTFdBxF16YX+/cWZ1+KrEMWRXuJx y2xWbKJUKDRRKic+CLhyxmpqqVdZPF8//PgPHat206cN9TJ3pi7RO0Ejuj7fimN9 tvNayMCuZ4RMReZsGSolb7zvIosH2ajEwezpfDMYKB7cTrg8mDTvD4MMgm2Unn8N jMPIDqIET9I/ff6hB8RaJPujqLhR5VW3 -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:53 2025 by rpki-client