$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json) Hash identifier: 4Ue3WOZK0sagzHraRpy0KC2hXroE8xsdAv86CnX06VE= Subject key identifier: 60:C4:56:D6:B5:98:E1:2E:08:00:F1:3B:AC:E9:F7:BE:66:2E:44:37 Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft Manifest number: 0670 Signing time: Sun 02 Nov 2025 22:34:56 +0000 Manifest this update: Sun 02 Nov 2025 22:34:56 +0000 Manifest next update: Sun 09 Nov 2025 22:34:56 +0000 Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: 2JhRprk4vRlyQU5mi5tIkmJVn7FKsPWvnKCFbRSwIIY=) 2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: R1Y6eiOJRngWNoMb/hZgB+WoPatpFv2M5OZIAKAIm84=) 3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: HVmlfUboreM+5lOMQKNuZ66xB592Xa6SyHAFupxeouM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Validity Not Before: Nov 2 22:34:56 2025 GMT Not After : Nov 9 22:34:56 2025 GMT Subject: CN=6907dc90-4dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:8c:b5:fb:5b:a5:5d:2c:9b:31:87:94:8c: fc:18:04:0e:d1:82:a0:5d:00:55:fd:86:73:06:0b: 6e:cf:05:33:af:c9:bb:d0:d5:05:83:9e:76:38:f9: ef:45:54:37:92:16:56:ad:eb:11:20:ca:ef:ed:5a: 90:bb:b1:c3:ad:9d:c5:54:37:47:aa:8f:4a:53:49: 0b:76:72:69:1e:77:98:81:6b:d3:95:b9:a3:10:58: 69:f7:6b:7d:84:8c:82:8f:bb:09:74:82:26:4a:64: 51:c4:b7:76:f0:1c:f1:17:29:a8:e5:db:3d:14:cf: 67:66:23:1d:8e:b9:46:c1:af:dd:e0:9b:df:06:82: 69:41:69:a1:d2:e5:5a:9c:44:4f:7c:1e:ea:55:fd: 9f:b4:0d:32:bd:23:c5:41:77:de:d5:3d:e5:96:98: cd:b1:e4:53:6d:69:67:18:f1:e9:61:12:f9:cc:45: 94:48:37:5e:4d:a0:03:1a:19:1e:0b:a5:ec:4d:20: f0:af:fb:78:98:9d:fa:02:83:fa:bf:8a:df:2e:aa: a3:e9:c1:4b:4c:d1:c2:51:2b:c1:4a:00:54:f1:71: 7b:b1:1e:12:65:a8:79:90:28:df:07:f2:32:70:51: 4c:41:fa:f5:7d:77:d1:7e:1d:82:2b:42:b8:40:5a: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C4:56:D6:B5:98:E1:2E:08:00:F1:3B:AC:E9:F7:BE:66:2E:44:37 X509v3 Authority Key Identifier: keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e9:cb:ae:cc:a6:f4:7c:4f:60:d6:f3:21:90:66:97:63:9f: 6b:d6:ff:ba:d8:07:1b:1c:f1:49:f2:41:38:5c:34:d6:74:e0: 2a:47:69:ef:5f:45:45:48:4f:70:af:ac:f9:c8:77:dd:31:e1: 36:e1:e1:b0:73:70:13:34:b2:3f:68:d5:1e:80:a9:a9:e9:67: f6:7e:38:28:07:82:63:8d:79:c5:25:87:5f:f0:91:f5:71:3c: 1d:9d:ee:f7:3f:d1:3b:f7:3f:fb:b1:e3:2b:37:84:7a:f4:02: 14:7f:df:d6:36:30:ea:60:50:ef:0d:2a:a6:55:82:ff:bc:e6: ea:47:14:e3:d3:81:91:80:e9:fc:1e:0f:47:bc:d1:70:6c:ba: a3:3f:7d:28:03:84:1f:e9:bd:53:d6:de:b1:ac:55:7a:8f:7c: 1a:dd:a4:4a:4b:23:76:07:82:54:12:02:23:ca:80:b6:bf:8d: bc:91:98:76:75:b7:b4:b8:b8:b3:a0:7c:b7:72:63:29:97:ba: 17:3b:92:62:de:18:49:8e:43:01:f4:25:84:8a:b2:6a:f9:92: 82:ea:5a:98:42:d9:aa:16:4e:b3:1e:39:87:26:47:fc:d4:d5: 4b:ab:82:b7:38:e6:8a:f9:9a:51:7e:d9:39:10:45:58:79:48: ce:95:a6:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3 QUIyQjNCMkUwHhcNMjUxMTAyMjIzNDU2WhcNMjUxMTA5MjIzNDU2WjAYMRYwFAYD VQQDEw02OTA3ZGM5MC00ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswOMtftbpV0smzGHlIz8GAQO0YKgXQBV/YZzBgtuzwUzr8m70NUFg552OPnv RVQ3khZWresRIMrv7VqQu7HDrZ3FVDdHqo9KU0kLdnJpHneYgWvTlbmjEFhp92t9 hIyCj7sJdIImSmRRxLd28BzxFymo5ds9FM9nZiMdjrlGwa/d4JvfBoJpQWmh0uVa nERPfB7qVf2ftA0yvSPFQXfe1T3llpjNseRTbWlnGPHpYRL5zEWUSDdeTaADGhke C6XsTSDwr/t4mJ36AoP6v4rfLqqj6cFLTNHCUSvBSgBU8XF7sR4SZah5kCjfB/Iy cFFMQfr1fXfRfh2CK0K4QFruewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDEVta1 mOEuCADxO6zp975mLkQ3MB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm6cuuzKb0fE9g1vMhkGaXY59r1v+62AcbHPFJ8kE4XDTWdOAqR2nv X0VFSE9wr6z5yHfdMeE24eGwc3ATNLI/aNUegKmp6Wf2fjgoB4JjjXnFJYdf8JH1 cTwdne73P9E79z/7seMrN4R69AIUf9/WNjDqYFDvDSqmVYL/vObqRxTj04GRgOn8 Hg9HvNFwbLqjP30oA4Qf6b1T1t6xrFV6j3wa3aRKSyN2B4JUEgIjyoC2v428kZh2 dbe0uLizoHy3cmMpl7oXO5Ji3hhJjkMB9CWEirJq+ZKC6lqYQtmqFk6zHjmHJkf8 1NVLq4K3OOaK+ZpRftk5EEVYeUjOlaZP -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:00 2025 by rpki-client