$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: YMRfcQBpk+FNRdtZSvtCgoRQqg33jXOAGTYffo+shMo= Subject key identifier: 31:5F:A6:07:2D:AD:DC:CE:D5:EF:DB:B7:CD:61:20:A9:6D:0A:3A:40 Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0A9D Signing time: Tue 04 Nov 2025 19:38:16 +0000 Manifest this update: Tue 04 Nov 2025 19:38:16 +0000 Manifest next update: Tue 11 Nov 2025 19:38:16 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: Ko8N1YsaR+JndAha4YRTfSsqXyuucQFYGIwcIwHByWc=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: hMv9fBk1Ra6uR7Y0gqdPJ+C+iXxo/tfwAVFp8JPwJHs=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: Nov 4 19:38:16 2025 GMT Not After : Nov 11 19:38:16 2025 GMT Subject: CN=690a5628-12d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:a6:81:db:40:b6:36:e0:37:88:11:53:57: da:a3:33:9b:18:9b:ce:83:ac:24:8e:1f:26:cc:b1: d1:ab:1a:41:f9:af:3b:b3:cf:b9:19:02:4f:bc:db: a6:7b:66:7f:2b:93:73:1c:d0:46:e7:bb:76:7d:bf: 81:0d:5f:70:6f:8c:ac:f4:65:41:72:b0:a9:c9:a1: 4f:59:50:c3:38:86:89:e2:24:05:cc:87:6f:0c:27: ef:f6:19:09:5e:2a:d8:19:5e:64:ec:8d:f7:c0:a9: f4:33:4c:2c:bf:a9:4a:b8:e2:0e:0d:a6:06:87:2e: 12:df:f4:6f:0c:0b:e6:76:cc:2a:31:be:ad:17:68: 61:fe:72:f4:9a:0a:ad:d5:3c:c7:df:cd:b0:47:56: 53:89:f6:f1:8d:16:76:54:05:73:01:ce:7c:ef:a3: 99:f4:c2:b1:4c:eb:ae:63:48:15:8d:77:8e:f8:84: 47:80:46:3a:99:5c:fa:69:3f:09:ce:ea:f4:8a:bd: 46:34:f4:8b:7d:4c:27:54:2b:f6:10:5a:82:98:c9: 02:16:8c:36:ea:eb:d1:d7:e1:9f:04:04:73:33:b0: fe:e8:36:1a:02:4e:c3:25:c1:d8:71:25:63:8a:d9: f5:7a:1b:c8:5b:ed:cc:9a:37:fe:9e:c2:49:6b:80: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5F:A6:07:2D:AD:DC:CE:D5:EF:DB:B7:CD:61:20:A9:6D:0A:3A:40 X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ee:ba:24:e9:40:25:d2:89:e6:4b:14:bd:e8:88:7e:24:ad: b1:3a:e7:7b:c3:34:f3:d0:e3:0e:3c:31:62:39:aa:88:41:2e: f4:d3:e6:cb:80:f7:d6:cb:de:48:e3:ba:3e:1d:18:47:14:b5: 3e:ce:b5:7f:88:00:3f:57:5e:82:1a:e8:8d:63:a0:79:75:0e: 44:35:f2:bd:ab:c5:ff:97:2b:7d:80:24:b0:d6:db:da:af:96: 9c:e6:0d:74:f0:d6:13:75:f5:05:cd:7c:20:d9:b9:91:fb:e2: 09:9f:75:ca:5b:85:15:d8:5a:5e:5f:1d:11:b1:62:ec:96:71: f5:e5:78:6a:f2:84:8a:73:db:1d:6d:58:55:d4:19:2b:3c:7d: 90:b7:79:be:9a:72:3b:d2:d2:7b:9e:6d:08:7c:6a:6d:cd:89: 32:9f:95:1e:1b:f3:77:b3:57:b2:6c:43:5c:88:b8:5d:1b:8c: 0b:6e:6f:d7:b6:13:f8:c7:1a:fc:fc:d2:09:74:21:f3:39:25: 79:4d:55:28:ce:bc:56:df:46:9a:0a:f6:77:ea:7f:4b:79:54: ae:9d:06:ec:d0:ce:b1:19:c3:6a:16:13:c1:1e:50:6b:7e:86: f9:ff:8f:3c:d1:be:ca:d1:e8:20:0a:8f:dd:8a:0e:96:b9:2f: e5:8c:72:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjUxMTA0MTkzODE2WhcNMjUxMTExMTkzODE2WjAYMRYwFAYD VQQDEw02OTBhNTYyOC0xMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5amgdtAtjbgN4gRU1faozObGJvOg6wkjh8mzLHRqxpB+a87s8+5GQJPvNum e2Z/K5NzHNBG57t2fb+BDV9wb4ys9GVBcrCpyaFPWVDDOIaJ4iQFzIdvDCfv9hkJ XirYGV5k7I33wKn0M0wsv6lKuOIODaYGhy4S3/RvDAvmdswqMb6tF2hh/nL0mgqt 1TzH382wR1ZTifbxjRZ2VAVzAc5876OZ9MKxTOuuY0gVjXeO+IRHgEY6mVz6aT8J zur0ir1GNPSLfUwnVCv2EFqCmMkCFow26uvR1+GfBARzM7D+6DYaAk7DJcHYcSVj itn1ehvIW+3Mmjf+nsJJa4BiQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFfpgct rdzO1e/bt81hIKltCjpAMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv7rok6UAl0onmSxS96Ih+JK2xOud7wzTz0OMOPDFiOaqIQS700+bL gPfWy95I47o+HRhHFLU+zrV/iAA/V16CGuiNY6B5dQ5ENfK9q8X/lyt9gCSw1tva r5ac5g108NYTdfUFzXwg2bmR++IJn3XKW4UV2FpeXx0RsWLslnH15Xhq8oSKc9sd bVhV1BkrPH2Qt3m+mnI70tJ7nm0IfGptzYkyn5UeG/N3s1eybENciLhdG4wLbm/X thP4xxr8/NIJdCHzOSV5TVUozrxW30aaCvZ36n9LeVSunQbs0M6xGcNqFhPBHlBr fob5/4880b7K0eggCo/dig6WuS/ljHK9 -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:20 2025 by rpki-client