$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft File: JqEcV_UL86H3onhKHUlNXomDYc0.mft (raw, json) Hash identifier: 91b0yHOjPxi6WfHRMSJcysi9LAcB3djKOZUC2PB5ffk= Subject key identifier: D0:ED:1D:F9:B0:DA:BA:B4:E8:A0:8A:0C:36:73:E9:19:B3:FD:26:FB Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD Certificate issuer: /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft Manifest number: 43 Signing time: Mon 03 Nov 2025 07:24:21 +0000 Manifest this update: Mon 03 Nov 2025 07:24:21 +0000 Manifest next update: Mon 10 Nov 2025 07:24:21 +0000 Files and hashes: 1: JqEcV_UL86H3onhKHUlNXomDYc0.crl (hash: Pks7LiRkjtJg3eNpcZ3fHMTJHm1f0GwgmKuAfVzsEVI=) 2: 0CEE97B4563411F09FBF271BC4F9AE02.roa (hash: +5nsa0L3pEvZ7rt0LONhGmy6TtSxJKovU9i/lVSRT84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Validity Not Before: Nov 3 07:24:21 2025 GMT Not After : Nov 10 07:24:21 2025 GMT Subject: CN=690858a5-ff1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:94:fe:67:e3:7b:d5:d4:e0:18:5e:5c:28: 4c:a8:7d:76:2f:4b:81:ee:88:c2:43:2a:85:d8:a1: 58:f2:11:29:ba:a0:6b:00:a6:4d:26:9e:5d:86:87: f8:ff:9b:74:e4:93:e2:bb:38:e6:2a:8e:31:ef:5a: 9a:93:78:c9:6d:be:81:9b:ec:09:ff:41:08:6d:82: 0e:e5:9b:9b:d5:93:6a:de:55:10:23:15:09:9c:54: 5d:10:3c:3f:51:79:ec:30:48:06:f5:29:7b:ba:cf: 99:2f:a8:2a:e4:01:08:5d:98:55:ca:b9:9c:4b:b2: 1e:aa:cd:26:bf:d6:58:66:d5:6b:f4:1c:c9:df:40: 80:84:ba:bb:ba:10:2a:e9:e4:a9:6f:6a:be:e3:f4: c3:77:66:c1:64:af:11:cf:ea:08:64:1a:54:ec:42: 9b:16:f0:06:1f:96:79:d0:65:a6:4f:ec:c1:9f:e7: 17:a5:f7:64:54:e8:5b:62:ab:75:e9:2c:64:ac:14: 9d:2c:86:fe:90:99:88:cc:87:6b:8b:ac:a3:4d:3c: 6e:c7:c2:e0:d6:78:ad:34:50:5a:b9:d3:9f:17:e1: 97:47:1f:ca:10:56:70:7a:51:e3:b6:5a:34:d9:d0: 48:b4:de:91:95:4c:26:e8:18:77:4d:69:a8:cf:9b: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:ED:1D:F9:B0:DA:BA:B4:E8:A0:8A:0C:36:73:E9:19:B3:FD:26:FB X509v3 Authority Key Identifier: keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c6:1d:48:c4:0b:5a:df:58:90:c6:cd:71:c2:f6:18:df:de: 00:7c:6a:84:91:20:99:41:62:3f:48:99:35:3d:27:7b:e5:1f: a7:5b:e7:3f:11:f3:7f:39:3e:21:db:14:9f:d7:ed:e2:a0:21: ed:a6:39:21:7b:e3:ed:0c:d2:3c:17:09:4f:5e:3a:f5:16:f4: 97:1f:7b:41:24:9e:f2:30:da:15:d7:d6:2a:f5:35:f1:21:2b: f8:4f:53:0b:72:f7:01:2d:e7:ef:61:68:28:34:f1:63:e8:92: ea:aa:52:75:02:93:ab:7d:1e:9e:c1:a3:47:05:5d:a1:27:45: 57:cd:1a:52:29:b0:99:5b:fb:63:8b:ae:fd:d1:b4:b3:43:6e: 93:07:86:aa:14:ec:53:9f:6a:b3:5b:22:37:f1:12:c9:ad:9b: b5:b5:c0:19:f9:c9:e8:e6:03:44:64:64:f6:0c:ab:1f:44:dc: be:da:ba:7c:6c:06:cd:40:5a:65:32:5e:e5:23:9d:65:ac:55: 77:21:83:8f:8c:a4:bf:d5:4c:95:1d:f2:a0:e1:06:c3:ae:f5: 53:17:2d:ad:0a:b6:a6:28:e0:ac:91:26:2b:2e:d9:40:cf:b0: 8f:b9:b8:97:80:5b:da:f3:4b:1c:6b:18:04:8b:ce:10:77:3e: 89:18:cd:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoMjZBMTFDNTdGNTBCRjNBMUY3QTI3ODRBMUQ0OTRENUU4 OTgzNjFDRDAeFw0yNTExMDMwNzI0MjFaFw0yNTExMTAwNzI0MjFaMBgxFjAUBgNV BAMTDTY5MDg1OGE1LWZmMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+BZT+Z+N71dTgGF5cKEyofXYvS4HuiMJDKoXYoVjyESm6oGsApk0mnl2Gh/j/ m3Tkk+K7OOYqjjHvWpqTeMltvoGb7An/QQhtgg7lm5vVk2reVRAjFQmcVF0QPD9R eewwSAb1KXu6z5kvqCrkAQhdmFXKuZxLsh6qzSa/1lhm1Wv0HMnfQICEuru6ECrp 5Klvar7j9MN3ZsFkrxHP6ghkGlTsQpsW8AYflnnQZaZP7MGf5xel92RU6Ftiq3Xp LGSsFJ0shv6QmYjMh2uLrKNNPG7HwuDWeK00UFq5058X4ZdHH8oQVnB6UeO2WjTZ 0Ei03pGVTCboGHdNaajPmwB9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0O0d+bDa urTooIoMNnPpGbP9JvswHwYDVR0jBBgwFoAUJqEcV/UL86H3onhKHUlNXomDYc0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0VCMEY3NThFNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZIM29uaEtIVWxOWG9tRFlj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnFFY1ZfVUw4Nkgzb25oS0hVbE5Yb21EWWMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0VCMEY3NThFNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZI M29uaEtIVWxOWG9tRFljMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACbGHUjEC1rfWJDGzXHC9hjf3gB8aoSRIJlBYj9ImTU9J3vlH6db5z8R 8385PiHbFJ/X7eKgIe2mOSF74+0M0jwXCU9eOvUW9Jcfe0EknvIw2hXX1ir1NfEh K/hPUwty9wEt5+9haCg08WPokuqqUnUCk6t9Hp7Bo0cFXaEnRVfNGlIpsJlb+2OL rv3RtLNDbpMHhqoU7FOfarNbIjfxEsmtm7W1wBn5yejmA0RkZPYMqx9E3L7aunxs Bs1AWmUyXuUjnWWsVXchg4+MpL/VTJUd8qDhBsOu9VMXLa0KtqYo4KyRJisu2UDP sI+5uJeAW9rzSxxrGASLzhB3PokYzZc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:19 2025 by rpki-client