$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: hPnAs3WtVY1KjYoGzG5EFFn9YSMsEUcNGC/CWkg5ZeY= Subject key identifier: 41:57:0A:57:C3:63:B1:AC:D3:0D:D0:C9:B5:48:BD:D0:B2:FB:B2:BD Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 09B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 0996 Signing time: Tue 04 Nov 2025 20:12:03 +0000 Manifest this update: Tue 04 Nov 2025 20:12:02 +0000 Manifest next update: Tue 11 Nov 2025 20:12:02 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: S7BAtQkJ6sZHmQlSI0EkqLTcKBKXp7ClDXDmRMYHZZk=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: X16lFY6K2nhljbiLaCzlwi3FHh2sWAR/KpBd/NkhGQQ=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2488 (0x9b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: Nov 4 20:12:02 2025 GMT Not After : Nov 11 20:12:02 2025 GMT Subject: CN=690a5e12-ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:bc:36:06:76:67:b5:31:ee:71:34:f6:2e: 1b:a4:44:54:6c:6b:d8:19:5e:0b:c1:9c:85:55:33: 20:a4:d9:74:a7:78:7d:d5:cb:d8:b3:cc:03:c5:90: 9f:23:d0:a6:27:87:8b:0d:b2:53:c3:30:b3:a8:96: 6b:19:11:ba:ec:d2:b3:ac:5f:9c:11:59:a1:7c:eb: 4b:6b:66:08:98:0c:0f:9a:3e:f9:34:ac:94:08:c5: 39:93:96:f7:c9:dd:b5:f5:0b:29:0d:bf:f4:61:16: 48:20:64:7d:f6:4c:b3:e9:23:67:c4:d0:f5:19:21: 83:73:99:48:20:ee:75:bc:26:ce:3d:ca:ed:3f:de: 0a:71:35:24:ab:86:4d:34:ef:9a:a2:fa:f2:5f:c5: de:fb:98:0f:3d:d3:d9:c3:45:98:2f:3d:eb:93:47: 2a:56:d6:0d:59:89:8e:31:af:2a:9c:f3:f1:f8:12: 23:46:f1:49:c5:0e:96:23:1e:d3:fa:1a:6a:77:cb: 9b:30:de:6b:3c:e0:11:75:ba:df:59:b0:b9:32:df: 43:fc:6a:0f:78:19:8a:dc:0e:55:b0:74:30:10:24: 47:04:7f:80:a2:ad:20:f8:2d:8f:4d:78:84:88:18: 81:5a:70:d2:29:00:b4:1b:07:df:1b:e6:19:42:a0: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:0A:57:C3:63:B1:AC:D3:0D:D0:C9:B5:48:BD:D0:B2:FB:B2:BD X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b2:b9:d1:f0:d5:f6:b2:60:92:4c:5d:b0:50:f6:03:2f:77: df:a7:27:6d:91:9b:c5:31:9d:53:ff:51:00:3a:bc:69:9f:8b: 81:89:38:1e:61:d6:5b:3e:b4:2c:f9:4c:e6:c4:69:30:1c:86: 69:dc:d6:7f:f0:f0:d8:7e:42:c1:1a:4f:55:d7:52:37:f8:52: 09:fa:04:8b:e6:d8:5e:39:b2:cb:c1:8c:ef:fc:99:f0:08:9d: 94:17:17:55:17:2b:29:a7:36:7c:7d:51:b7:05:2c:1c:5f:42: 7d:96:08:26:f7:02:af:e1:2b:f2:bb:22:5c:c4:15:f4:c5:75: b0:cb:4a:d7:94:79:5a:e6:f9:3d:c8:fc:54:cf:f5:26:0d:63: b2:e5:90:06:93:1d:77:49:f5:c7:9a:9b:ff:ce:3d:05:30:39: de:1c:da:6e:bd:17:08:3e:6a:d7:bc:b3:06:91:c4:90:24:18: 13:61:0d:ae:3f:1a:ae:06:af:47:4c:46:bf:d7:2a:b2:3c:22: 7e:aa:32:c9:96:9d:5b:de:35:8e:f3:7d:0a:a3:23:00:be:c8: 07:f5:41:9b:ed:f1:b2:e6:46:b5:67:05:ce:3a:70:6f:9f:f0: c0:92:48:1f:83:ee:1c:b5:7e:31:cd:2a:0e:4c:e2:ce:18:ab: 91:34:71:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjUxMTA0MjAxMjAyWhcNMjUxMTExMjAxMjAyWjAYMRYwFAYD VQQDEw02OTBhNWUxMi1lZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqA+8NgZ2Z7Ux7nE09i4bpERUbGvYGV4LwZyFVTMgpNl0p3h91cvYs8wDxZCf I9CmJ4eLDbJTwzCzqJZrGRG67NKzrF+cEVmhfOtLa2YImAwPmj75NKyUCMU5k5b3 yd219QspDb/0YRZIIGR99kyz6SNnxND1GSGDc5lIIO51vCbOPcrtP94KcTUkq4ZN NO+aovryX8Xe+5gPPdPZw0WYLz3rk0cqVtYNWYmOMa8qnPPx+BIjRvFJxQ6WIx7T +hpqd8ubMN5rPOARdbrfWbC5Mt9D/GoPeBmK3A5VsHQwECRHBH+Aoq0g+C2PTXiE iBiBWnDSKQC0GwffG+YZQqCpVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFXClfD Y7Gs0w3QybVIvdCy+7K9MB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTsrnR8NX2smCSTF2wUPYDL3ffpydtkZvFMZ1T/1EAOrxpn4uBiTge YdZbPrQs+UzmxGkwHIZp3NZ/8PDYfkLBGk9V11I3+FIJ+gSL5theObLLwYzv/Jnw CJ2UFxdVFysppzZ8fVG3BSwcX0J9lggm9wKv4SvyuyJcxBX0xXWwy0rXlHla5vk9 yPxUz/UmDWOy5ZAGkx13SfXHmpv/zj0FMDneHNpuvRcIPmrXvLMGkcSQJBgTYQ2u PxquBq9HTEa/1yqyPCJ+qjLJlp1b3jWO830KoyMAvsgH9UGb7fGy5ka1ZwXOOnBv n/DAkkgfg+4ctX4xzSoOTOLOGKuRNHH8 -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:53 2025 by rpki-client