$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: EdKDm4hgkSa2eaUn5esf24kufPrVyb87qAtw1VEG1R8= Subject key identifier: 9E:94:78:E2:1C:0D:17:EB:51:73:D8:7B:8E:E8:D6:05:BB:98:F0:4A Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: F4 Signing time: Mon 03 Nov 2025 05:13:56 +0000 Manifest this update: Mon 03 Nov 2025 05:13:55 +0000 Manifest next update: Mon 10 Nov 2025 05:13:55 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: 5MhpIUHALnvGLu4TpjTBj3JtkRjHDa0kW8WsKSjmbi4=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: Q8jUoDfTBKkYt+wlmI66aJ+35Q4MifbD8LinqGUg/KY=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: KoaV0URvtmzdHrqA1z33gHV+eShaD03rJhOUSMjsP9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Nov 3 05:13:55 2025 GMT Not After : Nov 10 05:13:55 2025 GMT Subject: CN=69083a13-22d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:be:08:00:60:52:80:fc:ce:e7:b8:2b:42: ff:dd:29:28:7b:e8:e4:64:b5:ef:fb:01:25:b0:40: ae:fb:0b:ec:88:b9:d4:4d:8d:e5:73:ea:23:b3:c4: 1a:7a:06:41:fd:15:99:6c:4b:15:39:7b:63:55:be: 8c:5e:4c:e6:4a:d3:7a:05:ec:da:fc:8c:2f:82:de: 67:85:0a:42:0a:b4:b7:76:75:49:dc:f5:8c:9b:5a: ba:b5:c8:01:88:74:58:21:94:94:b3:42:e4:d1:93: 23:1d:43:90:df:9c:d3:c3:af:f9:b1:ae:b1:83:81: f2:73:6f:84:f2:0b:9b:69:80:30:02:52:03:38:46: 14:0b:05:3d:8c:8c:c5:c0:cb:ba:28:98:bd:24:72: 4f:8e:4e:27:39:7b:2c:10:82:d8:be:4b:bc:2e:25: 49:8a:d2:d6:7d:99:ef:66:33:bc:6b:4c:b6:c1:32: d5:ab:94:46:63:c7:4c:9c:c6:5e:90:35:52:43:96: 14:c4:5c:90:97:05:e5:04:63:45:e1:86:6b:89:3f: dc:88:d2:94:e1:12:3a:55:e6:1a:97:77:ed:6f:c4: 57:26:7f:5d:4f:bf:f5:c2:cb:58:db:da:25:75:0b: a7:ac:f1:c1:a1:3c:05:9d:69:74:d9:f2:fc:68:2f: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:94:78:E2:1C:0D:17:EB:51:73:D8:7B:8E:E8:D6:05:BB:98:F0:4A X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1c:4d:40:a2:1e:83:79:88:38:0f:d6:eb:13:56:06:41:ea: 27:a6:8a:6e:21:d2:64:e0:ec:77:8d:23:9b:00:9e:11:b7:e2: 77:39:34:4e:ae:64:16:5d:3c:dd:b8:5c:0d:0e:83:e9:81:a8: 23:d0:9e:fb:2f:6a:5e:da:5c:f7:11:65:9b:e9:cd:37:b2:15: aa:06:c3:b6:57:5f:2a:7c:63:e3:8f:bf:b5:b5:fb:7e:ed:1d: bb:b2:3a:15:f4:0d:20:c8:50:a9:68:0b:cd:c3:b4:1b:fa:15: 0a:42:bc:00:84:e7:9d:af:6a:bc:84:96:7e:d5:1e:d8:df:09: 0f:9a:22:21:87:8d:20:9f:ce:2d:be:24:85:44:fc:6f:05:5e: c6:fd:2d:a2:d8:97:10:ba:ee:ff:57:9d:52:2f:79:c7:c5:14: b9:6d:af:47:3e:fb:f2:4c:e2:2f:1b:d1:d8:5f:ef:74:29:67: b3:65:f4:09:f7:15:4f:6b:12:4e:aa:4d:b0:f5:64:68:39:52: f3:1b:bc:64:76:9d:f5:88:6c:dd:05:23:4b:62:66:ef:bf:16: 28:0a:aa:0f:31:ef:aa:f9:47:dd:70:22:20:5d:97:39:e9:81: 07:93:1b:84:13:d9:f7:c9:52:86:89:f3:0e:4c:ad:c0:25:ef: bb:63:7e:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUxMTAzMDUxMzU1WhcNMjUxMTEwMDUxMzU1WjAYMRYwFAYD VQQDEw02OTA4M2ExMy0yMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0G+CABgUoD8zue4K0L/3Skoe+jkZLXv+wElsECu+wvsiLnUTY3lc+ojs8Qa egZB/RWZbEsVOXtjVb6MXkzmStN6Beza/Iwvgt5nhQpCCrS3dnVJ3PWMm1q6tcgB iHRYIZSUs0Lk0ZMjHUOQ35zTw6/5sa6xg4Hyc2+E8gubaYAwAlIDOEYUCwU9jIzF wMu6KJi9JHJPjk4nOXssEILYvku8LiVJitLWfZnvZjO8a0y2wTLVq5RGY8dMnMZe kDVSQ5YUxFyQlwXlBGNF4YZriT/ciNKU4RI6VeYal3ftb8RXJn9dT7/1wstY29ol dQunrPHBoTwFnWl02fL8aC/wqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6UeOIc DRfrUXPYe47o1gW7mPBKMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmHE1Aoh6DeYg4D9brE1YGQeonpopuIdJk4Ox3jSObAJ4Rt+J3OTRO rmQWXTzduFwNDoPpgagj0J77L2pe2lz3EWWb6c03shWqBsO2V18qfGPjj7+1tft+ 7R27sjoV9A0gyFCpaAvNw7Qb+hUKQrwAhOedr2q8hJZ+1R7Y3wkPmiIhh40gn84t viSFRPxvBV7G/S2i2JcQuu7/V51SL3nHxRS5ba9HPvvyTOIvG9HYX+90KWezZfQJ 9xVPaxJOqk2w9WRoOVLzG7xkdp31iGzdBSNLYmbvvxYoCqoPMe+q+UfdcCIgXZc5 6YEHkxuEE9n3yVKGifMOTK3AJe+7Y36w -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:42 2025 by rpki-client