$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json) Hash identifier: xnarVWDlxjXJcurz/xFi0uTt0AcHGAgf7PulhkUcnk4= Subject key identifier: CF:AA:FF:EC:74:3C:25:85:F9:8B:B5:3B:DD:4C:0A:A1:6B:FD:B2:F8 Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft Manifest number: AD Signing time: Wed 05 Nov 2025 06:21:10 +0000 Manifest this update: Wed 05 Nov 2025 06:21:09 +0000 Manifest next update: Wed 12 Nov 2025 06:21:09 +0000 Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: wEaHLvxX47gSTtPAVhJcnrd3Rx+1ajb7Hd3PLColxuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Validity Not Before: Nov 5 06:21:09 2025 GMT Not After : Nov 12 06:21:09 2025 GMT Subject: CN=690aecd5-352e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:08:96:eb:db:b8:7c:99:3e:1b:7a:8e:16: 0e:7a:75:d1:1e:89:a9:8a:a3:53:84:75:6e:95:f7: 01:5e:2c:40:fc:7b:3a:ae:06:85:b9:45:b1:e6:e2: 94:0d:05:c5:85:05:88:3b:a5:d2:8f:56:bd:d2:a1: 8d:33:b6:03:c6:cd:4e:e1:42:d0:19:91:c6:19:af: c5:67:95:be:d7:8d:cb:ff:c2:33:fa:8b:31:16:16: fd:dc:c3:24:d3:9a:b7:dd:94:37:ae:11:bb:e2:f7: 00:82:2a:8d:16:0a:85:c5:dd:e6:09:79:c2:7e:f6: f8:47:1a:ba:71:42:f6:4b:9d:4a:70:d2:07:28:22: 73:33:6f:9e:d8:64:6c:49:47:7b:1d:48:08:8d:07: b8:3f:38:e2:43:40:99:f3:07:bf:a4:e7:ab:ad:f0: 14:90:dd:d4:4f:83:3d:9b:a7:1e:5d:03:fe:1f:84: 53:3f:61:58:aa:37:21:80:09:0c:04:52:ae:b2:f8: 52:75:db:c3:a6:dc:37:40:10:28:83:cb:ce:67:02: ab:a2:92:83:c9:8b:8c:9f:7e:04:0e:94:fa:0c:1d: 64:6a:34:34:e0:d5:ef:b4:0b:e5:38:6e:0c:93:11: d5:5d:a4:d5:7d:13:ba:b4:87:72:62:fc:51:b1:2d: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AA:FF:EC:74:3C:25:85:F9:8B:B5:3B:DD:4C:0A:A1:6B:FD:B2:F8 X509v3 Authority Key Identifier: keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:89:7c:dd:86:51:92:0a:13:b4:88:5c:49:ca:2f:09:27:f7: 92:66:f6:24:0f:66:6d:d4:42:fb:bb:3a:7e:83:aa:28:01:2c: 08:a9:20:5a:48:2d:8a:90:40:92:c3:7a:4b:83:24:a1:fb:23: bc:27:ef:4a:4e:82:d1:51:db:17:8f:d0:3f:31:c0:eb:8f:cb: 49:62:a4:7d:f1:c2:58:60:ca:60:b9:dc:14:c6:a5:e5:46:4a: 4d:5f:90:85:d1:fc:75:bf:5d:b1:a9:9d:ae:e5:71:31:ae:54: 57:54:43:73:bd:61:85:22:1b:85:d5:65:3e:e4:10:f5:cd:fa: fa:33:f7:57:51:e8:36:e4:49:9b:65:a1:b9:82:ee:7d:04:6c: 69:9b:b1:c8:73:55:23:de:97:61:c3:27:71:03:03:75:7e:71: d0:e6:0f:03:7c:a6:22:5f:97:9d:91:33:97:c3:69:9d:fc:69: 08:35:f3:84:be:97:c6:5d:32:f8:5b:43:19:5b:99:55:5b:58: 77:01:a2:41:ac:7c:07:b7:12:24:66:14:cc:35:97:e1:15:16: d3:c7:60:33:f5:1f:1e:4f:ab:7d:2d:eb:4c:d1:12:f3:65:77: 9f:10:d1:7b:a2:a4:9a:6e:93:83:67:55:42:b5:34:19:ef:af: 2e:e8:64:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzNjMxMTAvBgNVBAUTKDhFMUNDMURCRkFCRDQwQjY0MTRDMjNFM0RGRDg5MTQ1 NTI3REYzMjEwHhcNMjUxMTA1MDYyMTA5WhcNMjUxMTEyMDYyMTA5WjAYMRYwFAYD VQQDEw02OTBhZWNkNS0zNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OgIluvbuHyZPht6jhYOenXRHompiqNThHVulfcBXixA/Hs6rgaFuUWx5uKU DQXFhQWIO6XSj1a90qGNM7YDxs1O4ULQGZHGGa/FZ5W+143L/8Iz+osxFhb93MMk 05q33ZQ3rhG74vcAgiqNFgqFxd3mCXnCfvb4Rxq6cUL2S51KcNIHKCJzM2+e2GRs SUd7HUgIjQe4PzjiQ0CZ8we/pOerrfAUkN3UT4M9m6ceXQP+H4RTP2FYqjchgAkM BFKusvhSddvDptw3QBAog8vOZwKropKDyYuMn34EDpT6DB1kajQ04NXvtAvlOG4M kxHVXaTVfRO6tIdyYvxRsS0YiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+q/+x0 PCWF+Yu1O91MCqFr/bL4MB8GA1UdIwQYMBaAFI4cwdv6vUC2QUwj49/YkUVSffMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CRDg2M0Q3MkFG QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFMWkJUQ1BqMzlpUlJWSjk4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM2My9CRDg2M0Q3MkFGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFM WkJUQ1BqMzlpUlJWSjk4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoiXzdhlGSChO0iFxJyi8JJ/eSZvYkD2Zt1EL7uzp+g6ooASwIqSBa SC2KkECSw3pLgySh+yO8J+9KToLRUdsXj9A/McDrj8tJYqR98cJYYMpgudwUxqXl RkpNX5CF0fx1v12xqZ2u5XExrlRXVENzvWGFIhuF1WU+5BD1zfr6M/dXUeg25Emb ZaG5gu59BGxpm7HIc1Uj3pdhwydxAwN1fnHQ5g8DfKYiX5edkTOXw2md/GkINfOE vpfGXTL4W0MZW5lVW1h3AaJBrHwHtxIkZhTMNZfhFRbTx2Az9R8eT6t9LetM0RLz ZXefENF7oqSabpODZ1VCtTQZ768u6GQb -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:03 2025 by rpki-client