$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: PamtgUTJCTqysf/40L4Ele+vFm0tTZdGVm7ZoXxsCfM= Subject key identifier: 94:6C:1C:7D:F1:73:82:3B:A3:CD:5F:D8:23:6B:E1:CF:E9:95:86:99 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 12E6 Signing time: Tue 04 Nov 2025 19:38:43 +0000 Manifest this update: Tue 04 Nov 2025 19:38:43 +0000 Manifest next update: Tue 11 Nov 2025 19:38:43 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: mmpVM8lkjBa3MPr3jF96MEjNF0cMjR4wczivNJc9/rA=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Nov 4 19:38:43 2025 GMT Not After : Nov 11 19:38:43 2025 GMT Subject: CN=690a5643-54eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:50:26:76:7c:6b:3f:2a:a0:c5:76:32:d9: cb:de:df:39:74:8d:af:6b:04:9f:24:88:5b:06:2e: 71:ee:99:8f:e0:ca:79:4d:2f:be:6c:c2:85:22:a8: 96:0e:31:44:c3:9c:0e:5a:39:f8:cb:3f:4c:2f:7c: 17:df:34:13:2d:4b:5c:22:ab:52:8a:bb:b7:cc:97: a3:af:ad:76:da:07:41:9f:9b:6e:0a:48:ed:96:02: cc:9b:35:af:12:e5:56:80:01:aa:f4:48:6c:3a:6b: dd:8b:58:39:35:5f:61:e0:bf:02:9f:2f:c4:69:c3: e4:c3:87:ba:8d:d0:7c:d8:b0:82:ef:77:79:da:aa: 2c:63:ea:72:1f:01:77:ee:1e:98:67:65:18:c5:7a: 6b:0a:82:41:fb:12:a7:82:b8:79:94:33:90:3b:84: 1b:a1:87:9a:34:62:ea:87:7c:4c:fa:b2:f5:f7:17: 17:71:73:da:fd:58:b5:72:2a:9d:62:be:ca:df:73: a6:9d:4c:db:aa:89:00:e3:df:8e:ac:c0:ed:15:06: dd:e3:58:d9:2e:5e:0f:1c:e7:e0:cb:69:3c:31:90: 30:02:20:96:0a:50:b2:24:59:db:68:e3:da:5b:23: 26:85:13:ab:be:d3:02:42:07:0f:1a:4e:1d:04:d6: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6C:1C:7D:F1:73:82:3B:A3:CD:5F:D8:23:6B:E1:CF:E9:95:86:99 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:41:25:28:f9:32:17:42:1a:7b:9e:fa:3f:5e:f6:86:91:0f: e9:97:22:87:c2:eb:cb:6b:24:4b:cf:ae:2c:1d:8d:2f:f7:f1: c4:d8:72:8c:ae:c9:e3:e9:9f:86:03:eb:2c:39:17:84:3d:df: 52:48:51:08:db:56:40:5e:80:05:e6:99:f7:10:34:f8:22:50: 13:a6:31:33:f2:32:a6:b6:4c:03:46:2e:4f:36:41:08:3d:5c: 3a:0c:d4:f3:6e:9f:d0:26:41:59:8f:aa:a1:b9:07:f4:b0:2e: 00:ff:84:57:62:7e:2d:36:12:86:ac:e0:07:c1:83:79:b0:a1: cb:b2:6f:cc:a5:3c:31:85:97:04:bc:5b:9f:c0:55:4b:48:ab: c7:c6:2f:47:42:d1:9e:c4:81:3b:d9:f2:8a:85:0a:67:93:ef: 63:39:f3:31:03:cf:af:a0:b6:f3:b5:09:23:d3:b0:0e:4e:97: f8:4e:f5:9b:2e:34:bd:4d:1f:49:e9:24:cc:ab:b1:fc:fa:25: a7:a7:ef:bb:41:22:65:16:75:0e:5a:72:dd:fe:95:29:7f:be: 65:63:6b:94:80:65:a5:78:95:6f:d9:54:d8:35:07:3d:4f:31: 5f:7d:81:c6:f5:99:2b:47:51:ca:37:b1:91:34:88:9c:a4:9f: e4:08:1c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUxMTA0MTkzODQzWhcNMjUxMTExMTkzODQzWjAYMRYwFAYD VQQDEw02OTBhNTY0My01NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvBQJnZ8az8qoMV2MtnL3t85dI2vawSfJIhbBi5x7pmP4Mp5TS++bMKFIqiW DjFEw5wOWjn4yz9ML3wX3zQTLUtcIqtSiru3zJejr6122gdBn5tuCkjtlgLMmzWv EuVWgAGq9EhsOmvdi1g5NV9h4L8Cny/EacPkw4e6jdB82LCC73d52qosY+pyHwF3 7h6YZ2UYxXprCoJB+xKngrh5lDOQO4QboYeaNGLqh3xM+rL19xcXcXPa/Vi1ciqd Yr7K33OmnUzbqokA49+OrMDtFQbd41jZLl4PHOfgy2k8MZAwAiCWClCyJFnbaOPa WyMmhROrvtMCQgcPGk4dBNbBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRsHH3x c4I7o81f2CNr4c/plYaZMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1QSUo+TIXQhp7nvo/XvaGkQ/plyKHwuvLayRLz64sHY0v9/HE2HKM rsnj6Z+GA+ssOReEPd9SSFEI21ZAXoAF5pn3EDT4IlATpjEz8jKmtkwDRi5PNkEI PVw6DNTzbp/QJkFZj6qhuQf0sC4A/4RXYn4tNhKGrOAHwYN5sKHLsm/MpTwxhZcE vFufwFVLSKvHxi9HQtGexIE72fKKhQpnk+9jOfMxA8+voLbztQkj07AOTpf4TvWb LjS9TR9J6STMq7H8+iWnp++7QSJlFnUOWnLd/pUpf75lY2uUgGWleJVv2VTYNQc9 TzFffYHG9ZkrR1HKN7GRNIicpJ/kCBwI -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:27 2025 by rpki-client