$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: vYxjWZegtvL2UeYQT6Q/NZpQilF418cqsOamyNWDY18= Subject key identifier: 81:D5:CE:A7:8E:01:F7:ED:A9:F3:FA:AB:9E:9B:D9:0C:88:54:9D:06 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 10A4 Signing time: Sun 02 Nov 2025 17:21:25 +0000 Manifest this update: Sun 02 Nov 2025 17:21:25 +0000 Manifest next update: Sun 09 Nov 2025 17:21:25 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: WGpve6NgysmhKgC/+pQmQ2MfSUhCJZf4g6xVCvu7CUM=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Nov 2 17:21:25 2025 GMT Not After : Nov 9 17:21:25 2025 GMT Subject: CN=69079315-ba01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:41:3d:5e:e3:55:00:39:d9:ce:e2:c2:c5: 35:7b:e8:c1:b0:b8:e6:ae:71:f2:54:21:3e:84:b7: a0:08:1f:8a:7a:a1:49:a3:d8:5d:05:ab:e8:9f:6f: 23:d5:18:9a:c3:eb:6d:0e:bb:8e:9f:6c:c8:25:5a: e1:2f:58:8b:ef:b0:ba:34:57:95:87:da:5a:db:13: 8b:67:ca:a6:cf:86:6f:8d:d3:54:1f:48:e0:57:b3: a6:e1:5c:13:1f:30:66:02:8b:ab:c5:60:52:22:98: 45:93:21:a1:9f:05:2e:a3:8a:06:c9:09:74:b5:13: de:f8:0a:2f:79:8a:92:3d:54:0f:e1:3d:7b:7a:04: d5:d2:d2:3a:07:05:12:a2:b7:4b:eb:cc:9e:ec:28: 0c:99:65:25:6f:bf:b6:30:bd:b3:4c:ae:39:69:24: 8a:ac:3b:d2:da:c8:58:62:56:aa:ef:49:cb:26:ba: cc:eb:4e:50:f5:a5:12:23:d4:28:c9:e5:69:92:f7: 6a:fe:72:31:e8:49:48:33:9f:e5:c0:78:0f:b3:0e: ae:ae:08:0e:bc:06:81:b2:41:1d:10:9c:f0:f7:b3: f5:bc:c3:7e:39:a1:16:91:c2:e8:18:bc:60:80:bc: cb:69:f6:ff:b1:84:ec:d8:df:17:a9:1f:65:98:cd: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:CE:A7:8E:01:F7:ED:A9:F3:FA:AB:9E:9B:D9:0C:88:54:9D:06 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fc:c1:a4:6f:3c:a9:ff:40:83:de:8c:cd:22:48:00:5f:41: 97:ca:4c:9d:73:1f:b2:57:48:d8:c3:27:31:00:5c:a9:77:0f: 9a:71:25:b3:c5:dc:4c:04:c6:7e:3d:91:55:63:5b:53:e1:cc: 4e:ff:16:8a:17:0d:e7:9f:a7:2e:ff:5e:7b:2e:61:32:c2:8d: f9:08:b7:06:d6:f3:bb:0d:2a:91:c6:a5:02:24:c3:fd:63:1e: 85:2a:be:cb:ff:1e:91:78:ae:e0:87:84:1f:f1:c6:5c:8c:0e: 49:c8:6f:c3:da:3c:32:f3:ae:fe:39:7f:43:b5:e0:74:8b:17: 05:17:13:a1:3f:24:8a:d8:80:c1:ea:a3:50:8d:5a:a0:70:d0: 7d:b7:c5:21:13:a3:85:e9:8d:60:a3:bd:13:29:f6:56:17:9c: 26:70:3f:43:f1:34:31:b4:f6:cc:7e:37:f1:67:46:c6:bf:a4: af:89:2d:b4:dc:2d:5c:fc:6c:e2:ee:41:c2:f8:70:c1:e8:81: 85:8a:36:08:f3:79:11:91:bc:88:41:97:17:90:e0:ca:95:11: 6d:49:fe:7d:e0:33:52:a5:a3:2f:2f:21:e1:63:fd:e0:6e:34: ff:ca:35:eb:1e:aa:db:15:43:e5:bd:17:7f:af:8c:a1:88:23: 75:0e:3f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUxMTAyMTcyMTI1WhcNMjUxMTA5MTcyMTI1WjAYMRYwFAYD VQQDEw02OTA3OTMxNS1iYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqVBPV7jVQA52c7iwsU1e+jBsLjmrnHyVCE+hLegCB+KeqFJo9hdBavon28j 1Riaw+ttDruOn2zIJVrhL1iL77C6NFeVh9pa2xOLZ8qmz4ZvjdNUH0jgV7Om4VwT HzBmAourxWBSIphFkyGhnwUuo4oGyQl0tRPe+AoveYqSPVQP4T17egTV0tI6BwUS ordL68ye7CgMmWUlb7+2ML2zTK45aSSKrDvS2shYYlaq70nLJrrM605Q9aUSI9Qo yeVpkvdq/nIx6ElIM5/lwHgPsw6urggOvAaBskEdEJzw97P1vMN+OaEWkcLoGLxg gLzLafb/sYTs2N8XqR9lmM2hwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHVzqeO AfftqfP6q56b2QyIVJ0GMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp/MGkbzyp/0CD3ozNIkgAX0GXykydcx+yV0jYwycxAFypdw+acSWz xdxMBMZ+PZFVY1tT4cxO/xaKFw3nn6cu/157LmEywo35CLcG1vO7DSqRxqUCJMP9 Yx6FKr7L/x6ReK7gh4Qf8cZcjA5JyG/D2jwy867+OX9DteB0ixcFFxOhPySK2IDB 6qNQjVqgcNB9t8UhE6OF6Y1go70TKfZWF5wmcD9D8TQxtPbMfjfxZ0bGv6SviS20 3C1c/Gzi7kHC+HDB6IGFijYI83kRkbyIQZcXkODKlRFtSf594DNSpaMvLyHhY/3g bjT/yjXrHqrbFUPlvRd/r4yhiCN1Dj8g -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:12 2025 by rpki-client