$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: gG98rEedis9cIqSmQegrz7wP7v8vZwoLy6t1rlPbaMM= Subject key identifier: C1:56:4A:0F:20:6E:13:FA:48:08:5D:CD:A8:1B:F7:CD:8F:6A:54:2B Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 0502 Signing time: Tue 04 Nov 2025 23:44:30 +0000 Manifest this update: Tue 04 Nov 2025 23:44:29 +0000 Manifest next update: Tue 11 Nov 2025 23:44:29 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: UThRx8j79t0uIFwBJWFyXLTEV8ewIB+msr7GHYvfFJc=) 2: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: tVHP7vE09ih639kPT+zHjlRDQm6GDfHkbd/XlPHcK/0=) 3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: 8OgnHoASF/UsFAo8WcuH4tg18eHyDNchCEmDTI3RcYo=) 4: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: Egnw+r9qbejML3EvsCqcWRH67VrUmMQV/ILZahM9IPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Nov 4 23:44:29 2025 GMT Not After : Nov 11 23:44:29 2025 GMT Subject: CN=690a8fdd-20fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:d1:b0:93:bd:f9:73:5a:ff:3e:26:d8:c0: 46:8d:87:d1:c8:05:53:a8:c8:5b:db:24:e0:f8:b3: 6c:d8:53:ba:ac:93:33:60:b3:3a:f8:6f:65:ae:bb: 7d:df:73:8d:c5:80:92:a8:b9:4e:42:ce:01:1d:fc: 3d:31:b0:24:cc:8d:32:dd:b8:8b:83:08:a0:13:ea: 36:13:e8:4b:21:47:8b:a7:31:9b:4f:4d:76:5e:30: 9c:52:a2:ea:a8:af:08:a5:fd:cf:97:aa:78:0c:10: 9d:a6:41:39:67:5c:67:03:4e:4c:ac:08:da:3b:cc: 72:76:52:33:91:38:5d:66:e2:a0:eb:5c:de:98:b0: 93:10:1c:ce:be:39:56:ee:49:ff:82:e3:c3:46:a8: c8:01:2b:87:bf:9a:92:ff:38:07:29:9b:a3:ec:30: 78:55:da:ae:33:1f:0f:30:9c:05:f8:15:b4:db:8b: 1b:89:c2:42:51:b7:01:75:d7:87:42:95:9d:63:b1: da:58:38:22:fb:cc:ca:0f:83:68:e0:5b:97:c3:73: cc:e1:83:26:b0:df:56:2e:51:37:55:b4:27:41:b1: 66:06:fe:72:86:d1:b9:bb:0b:a0:70:f3:95:ad:34: 41:7b:61:6c:1d:44:c9:c6:c2:e4:6c:91:e9:80:a4: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:56:4A:0F:20:6E:13:FA:48:08:5D:CD:A8:1B:F7:CD:8F:6A:54:2B X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a6:54:73:e5:82:70:6b:33:d5:da:c7:52:c1:e4:f5:19:69: 0b:a0:1b:78:76:dc:73:2b:f0:d3:60:51:8a:6b:78:eb:ea:f3: d1:a3:0d:34:14:78:e4:39:50:40:62:99:03:a6:cf:40:5d:95: 35:5e:9a:6f:6a:02:7a:b7:82:eb:5a:ec:d5:d1:16:20:71:11: 3d:ae:5b:04:be:3f:4b:ac:8d:d0:81:ff:cd:dd:3c:e7:d4:20: 03:b0:3e:6c:fb:5a:10:a7:bd:51:c5:06:1e:68:f2:9e:35:ce: 8e:f7:1d:fb:60:0b:87:41:89:c3:7e:ff:f6:87:46:44:e9:36: 57:20:1f:45:1c:a6:21:f9:67:d8:41:82:2b:35:93:9c:4f:17: 65:dc:77:62:cf:db:1e:1c:3b:23:fb:39:54:5f:0c:6f:0c:04: 2a:47:29:a0:43:69:f8:ba:d9:df:f6:07:45:69:20:03:f9:aa: b6:68:82:18:68:ca:1b:22:7d:7f:30:43:30:66:0a:b5:46:b3: ca:eb:3c:20:3f:5e:9f:ba:33:d1:86:b0:d0:15:ec:16:8f:d1: b6:8f:27:1d:04:85:37:ce:e6:3d:19:a0:14:18:e1:1e:de:f5: 70:7f:54:89:6b:b9:a1:1e:46:f6:ad:09:aa:94:f5:0b:df:32: 47:cc:85:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjUxMTA0MjM0NDI5WhcNMjUxMTExMjM0NDI5WjAYMRYwFAYD VQQDEw02OTBhOGZkZC0yMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpHRsJO9+XNa/z4m2MBGjYfRyAVTqMhb2yTg+LNs2FO6rJMzYLM6+G9lrrt9 33ONxYCSqLlOQs4BHfw9MbAkzI0y3biLgwigE+o2E+hLIUeLpzGbT012XjCcUqLq qK8Ipf3Pl6p4DBCdpkE5Z1xnA05MrAjaO8xydlIzkThdZuKg61zemLCTEBzOvjlW 7kn/guPDRqjIASuHv5qS/zgHKZuj7DB4VdquMx8PMJwF+BW024sbicJCUbcBddeH QpWdY7HaWDgi+8zKD4No4FuXw3PM4YMmsN9WLlE3VbQnQbFmBv5yhtG5uwugcPOV rTRBe2FsHUTJxsLkbJHpgKQ/xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFWSg8g bhP6SAhdzagb982PalQrMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvplRz5YJwazPV2sdSweT1GWkLoBt4dtxzK/DTYFGKa3jr6vPRow00 FHjkOVBAYpkDps9AXZU1XppvagJ6t4LrWuzV0RYgcRE9rlsEvj9LrI3Qgf/N3Tzn 1CADsD5s+1oQp71RxQYeaPKeNc6O9x37YAuHQYnDfv/2h0ZE6TZXIB9FHKYh+WfY QYIrNZOcTxdl3Hdiz9seHDsj+zlUXwxvDAQqRymgQ2n4utnf9gdFaSAD+aq2aIIY aMobIn1/MEMwZgq1RrPK6zwgP16fujPRhrDQFewWj9G2jycdBIU3zuY9GaAUGOEe 3vVwf1SJa7mhHkb2rQmqlPUL3zJHzIXJ -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:23 2025 by rpki-client