$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: ztFBBmvKY1ba9FKAPnAf3cPiJpyEgkWLzU3kQIkfLJo= Subject key identifier: 42:11:F1:52:5D:1D:06:A1:EE:DE:87:5E:F9:59:7B:EE:4A:83:C3:54 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0736 Signing time: Tue 04 Nov 2025 21:56:41 +0000 Manifest this update: Tue 04 Nov 2025 21:56:40 +0000 Manifest next update: Tue 11 Nov 2025 21:56:40 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: UWsYqabATEH5cL7szZ/Afh1bJGtljHsu/02vEBHftCo=) 2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: FOUqi/Zhh8esXFcRli/yVF/Rw56vHIwH4UuHSxeTaMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Nov 4 21:56:40 2025 GMT Not After : Nov 11 21:56:40 2025 GMT Subject: CN=690a7698-e163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:53:49:25:83:90:24:b1:58:0e:77:76:04: b7:fa:3a:91:03:9b:26:2e:7e:db:d3:10:f6:62:a7: db:3e:9f:87:41:cb:39:81:2b:de:a5:07:c5:bf:fc: c7:56:8c:64:94:c0:ef:1c:f0:c6:6a:6e:a3:f4:79: ca:ef:6e:d8:5c:67:41:84:cd:cc:3c:2f:fc:c6:4a: 02:0a:83:86:06:97:22:8b:82:b5:76:1e:2b:db:5b: df:a3:43:88:86:c5:24:52:49:6a:b2:91:e9:e8:cb: 51:bc:6d:32:c6:60:12:03:bb:f7:ac:09:ba:f9:35: 02:61:a7:33:5e:ae:f2:ad:12:ab:d6:b9:c6:b8:6c: a0:07:f2:2d:89:6d:bc:7b:a9:91:e5:08:f1:29:d9: c7:b3:21:a2:6b:57:49:67:f6:82:7e:98:73:39:3e: e8:56:88:8f:40:bd:35:c7:93:d4:0e:0a:6d:d5:ef: 96:30:6d:8b:9b:0b:e8:47:8e:ab:0f:09:c6:c5:06: 91:f9:19:e4:c5:d3:30:9a:18:d8:d3:db:b4:d0:8b: 7f:04:66:da:70:69:38:a4:54:bd:da:8c:b6:00:cc: 95:5c:44:24:ef:bb:c4:4d:0d:26:b1:58:ae:a4:3d: 5b:42:d0:10:4f:f9:9f:0a:5f:68:93:f4:42:e4:e0: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:11:F1:52:5D:1D:06:A1:EE:DE:87:5E:F9:59:7B:EE:4A:83:C3:54 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b9:50:fd:4f:5b:1f:41:c9:19:b6:ae:32:5f:16:ec:65:5e: af:c2:95:a2:40:90:e9:22:54:41:2b:0f:37:60:6a:4c:21:08: 83:c3:ce:48:1e:06:cf:99:6a:6f:58:73:56:8b:63:17:45:20: 26:ec:bb:58:8d:42:6e:9c:4e:41:f1:25:f8:77:e0:bd:6b:d5: 15:70:bf:15:d6:c7:a1:7c:0c:cc:ca:b8:39:7f:00:3a:b0:13: f1:5f:7c:4e:20:dd:ec:9b:d9:18:01:ca:66:ec:3b:7d:91:4d: 4b:c7:9d:3a:2c:55:bf:42:38:b7:5c:42:cc:82:cf:24:00:4c: 92:31:ec:dd:29:b3:a3:e9:60:8e:38:ee:eb:ef:fb:21:64:d7: 59:35:24:9d:5f:94:aa:44:7e:0c:25:a9:56:1b:1a:2c:c9:b4: 9b:f2:4c:ba:80:17:a2:0b:39:dd:26:f9:bf:e8:30:7f:d2:30: e7:51:bc:18:b2:73:0e:d3:0c:65:53:41:57:72:66:34:d0:83: 1f:5a:19:af:11:9b:08:eb:ae:50:ef:c4:35:ce:fa:f9:4b:22: 1a:9f:b0:56:e4:6a:0b:ce:27:9d:65:34:8b:0a:b7:40:74:8f: e1:57:93:dc:da:46:d1:3f:ee:9f:a1:6f:3b:28:6f:2c:d6:34: 09:6b:b7:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUxMTA0MjE1NjQwWhcNMjUxMTExMjE1NjQwWjAYMRYwFAYD VQQDEw02OTBhNzY5OC1lMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cRTSSWDkCSxWA53dgS3+jqRA5smLn7b0xD2YqfbPp+HQcs5gSvepQfFv/zH VoxklMDvHPDGam6j9HnK727YXGdBhM3MPC/8xkoCCoOGBpcii4K1dh4r21vfo0OI hsUkUklqspHp6MtRvG0yxmASA7v3rAm6+TUCYaczXq7yrRKr1rnGuGygB/ItiW28 e6mR5QjxKdnHsyGia1dJZ/aCfphzOT7oVoiPQL01x5PUDgpt1e+WMG2LmwvoR46r DwnGxQaR+RnkxdMwmhjY09u00It/BGbacGk4pFS92oy2AMyVXEQk77vETQ0msViu pD1bQtAQT/mfCl9ok/RC5OBt+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIR8VJd HQah7t6HXvlZe+5Kg8NUMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9uVD9T1sfQckZtq4yXxbsZV6vwpWiQJDpIlRBKw83YGpMIQiDw85I HgbPmWpvWHNWi2MXRSAm7LtYjUJunE5B8SX4d+C9a9UVcL8V1sehfAzMyrg5fwA6 sBPxX3xOIN3sm9kYAcpm7Dt9kU1Lx506LFW/Qji3XELMgs8kAEySMezdKbOj6WCO OO7r7/shZNdZNSSdX5SqRH4MJalWGxosybSb8ky6gBeiCzndJvm/6DB/0jDnUbwY snMO0wxlU0FXcmY00IMfWhmvEZsI665Q78Q1zvr5SyIan7BW5GoLziedZTSLCrdA dI/hV5Pc2kbRP+6foW87KG8s1jQJa7f1 -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:54 2025 by rpki-client