$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json) Hash identifier: HYY8/p8Bt+VVBayglVfEh0D9QoCjDmbFt8QzjPyIeE4= Subject key identifier: D1:61:3D:03:6B:E2:D1:63:79:4C:67:DD:9B:25:2C:36:FB:23:76:0A Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Certificate serial: 0828 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft Manifest number: 080A Signing time: Tue 04 Nov 2025 21:04:23 +0000 Manifest this update: Tue 04 Nov 2025 21:04:23 +0000 Manifest next update: Tue 11 Nov 2025 21:04:23 +0000 Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: fBLQ6Qa2loIXMBfJsaDhptCcbwJfvHEiv+GikeLC63o=) 2: 7AE0B322AFEB11F08458536FC4F9AE02.roa (hash: bL0DFCoelj0kIlJ7veAcHaSNypZLRoUp9tJOGV1SdK4=) 3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: rNG/S4CrPkj2l4/nFyQbAqYhT+CYTnzGNO/LJ9nLYW4=) 4: F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa (hash: B5QdsVlzbl80LQARM/fiRxHLc8iMGfxeDuLnDMTQheg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Validity Not Before: Nov 4 21:04:23 2025 GMT Not After : Nov 11 21:04:23 2025 GMT Subject: CN=690a6a57-02e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:9c:c0:94:59:0b:d1:f0:d7:2b:5b:b3:b5: a9:38:b1:5b:0e:04:58:26:d2:3a:47:7e:cf:a4:37: c1:1d:91:78:fe:22:0f:40:40:77:82:21:be:1f:32: 5f:bf:ab:95:19:ee:93:11:a3:84:9b:dd:30:06:eb: b9:b8:a0:4f:d6:21:55:7a:b9:89:f9:49:e5:6d:0f: 85:e0:ec:10:82:66:25:a9:be:54:1a:dd:cc:54:80: fa:39:dd:e0:c2:bf:24:35:ff:9e:99:fa:fd:fd:b3: 39:7c:7f:66:09:37:1e:77:b8:a5:99:72:a0:88:3f: aa:e1:93:68:ec:39:88:f7:6a:ea:69:78:a5:1d:18: 1c:7c:c8:5a:80:e9:a6:3e:10:49:e9:f1:57:de:5f: 79:18:b8:cb:2d:f2:e5:c3:ed:08:18:ac:0d:08:64: 3a:d2:41:ca:87:84:9e:f9:da:59:6d:8a:b1:7d:e5: 66:92:29:b4:d8:fd:3c:e5:43:7c:29:66:57:30:d8: cc:6d:28:f1:f2:7f:14:94:f0:c1:d4:ba:7d:ae:e5: fc:bc:26:c0:b8:cb:98:c8:11:ec:21:f4:52:b8:21: 1f:a0:17:fb:d2:2b:28:17:c0:9b:f6:6c:d2:87:ae: a9:88:f5:a1:df:49:2f:05:fb:49:0c:97:92:a6:d3: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:61:3D:03:6B:E2:D1:63:79:4C:67:DD:9B:25:2C:36:FB:23:76:0A X509v3 Authority Key Identifier: keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:93:95:ff:69:7d:77:49:5c:ea:7b:dd:3b:70:12:1f:eb:22: 49:1e:87:4f:2a:c9:7d:a3:a3:01:c6:ce:38:c7:2e:21:49:cb: 9d:07:71:61:bd:8b:f0:d1:f7:31:b2:81:ab:44:3c:f1:30:62: 2d:48:88:0b:63:42:4b:81:f6:74:82:af:e9:5d:2f:88:af:1a: dc:db:14:20:fd:e7:b4:aa:5d:84:c8:28:dd:d2:cf:f3:aa:83: 63:a6:f0:04:2a:e8:01:ab:42:9f:34:07:75:42:62:68:03:31: a0:3e:19:0d:4c:9b:08:c6:8a:a9:28:44:9a:23:01:26:ae:fe: df:c8:46:b7:0d:f8:95:6a:d9:f6:1d:41:39:55:58:85:2b:31: d0:3d:37:81:e5:3a:bb:5f:36:bc:99:7f:48:ab:fd:b3:b1:72: cb:9a:57:ff:e8:3c:33:82:95:53:fc:fd:f3:78:b5:1f:5f:72: e0:8b:d0:88:d9:2d:39:bb:ca:0a:14:b7:c6:82:4e:c7:55:2b: 9a:73:a8:47:13:d8:bb:62:62:be:fd:71:bb:c5:76:39:50:ff: 28:9b:ff:d2:bf:3f:d8:83:f0:20:51:f4:f1:9d:85:e1:85:5f: fa:4c:b2:cb:d7:f0:1b:62:3d:d6:96:d2:5b:a2:b5:3a:f0:af: f3:e3:10:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0 OTg2RERGMDgwHhcNMjUxMTA0MjEwNDIzWhcNMjUxMTExMjEwNDIzWjAYMRYwFAYD VQQDEw02OTBhNmE1Ny0wMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmq+cwJRZC9Hw1ytbs7WpOLFbDgRYJtI6R37PpDfBHZF4/iIPQEB3giG+HzJf v6uVGe6TEaOEm90wBuu5uKBP1iFVermJ+UnlbQ+F4OwQgmYlqb5UGt3MVID6Od3g wr8kNf+emfr9/bM5fH9mCTced7ilmXKgiD+q4ZNo7DmI92rqaXilHRgcfMhagOmm PhBJ6fFX3l95GLjLLfLlw+0IGKwNCGQ60kHKh4Se+dpZbYqxfeVmkim02P085UN8 KWZXMNjMbSjx8n8UlPDB1Lp9ruX8vCbAuMuYyBHsIfRSuCEfoBf70isoF8Cb9mzS h66piPWh30kvBftJDJeSptPxrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFhPQNr 4tFjeUxn3ZslLDb7I3YKMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsk5X/aX13SVzqe907cBIf6yJJHodPKsl9o6MBxs44xy4hScudB3Fh vYvw0fcxsoGrRDzxMGItSIgLY0JLgfZ0gq/pXS+Irxrc2xQg/ee0ql2EyCjd0s/z qoNjpvAEKugBq0KfNAd1QmJoAzGgPhkNTJsIxoqpKESaIwEmrv7fyEa3DfiVatn2 HUE5VViFKzHQPTeB5Tq7Xza8mX9Iq/2zsXLLmlf/6DwzgpVT/P3zeLUfX3Lgi9CI 2S05u8oKFLfGgk7HVSuac6hHE9i7YmK+/XG7xXY5UP8om//Svz/Yg/AgUfTxnYXh hV/6TLLL1/AbYj3WltJborU68K/z4xC0 -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:06 2025 by rpki-client