$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json) Hash identifier: hcbaGGYHFby56TD4U54koHkgzJ82iPc+9YUkT0l7fW8= Subject key identifier: 12:04:47:35:93:04:3E:C5:16:B8:27:D0:46:52:16:96:21:8E:22:1B Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft Manifest number: 06DD Signing time: Tue 04 Nov 2025 22:10:00 +0000 Manifest this update: Tue 04 Nov 2025 22:09:59 +0000 Manifest next update: Tue 11 Nov 2025 22:09:59 +0000 Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: xl2GvHhtzl+QzjOvsO1k45kaMho2zWqSXtl6MqJc4wE=) 2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: +e3HUlovKDRpOXqB7/PZlzff1isIhCZMYZe5Pc4VAfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Validity Not Before: Nov 4 22:09:59 2025 GMT Not After : Nov 11 22:09:59 2025 GMT Subject: CN=690a79b7-5717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:77:42:82:05:37:8a:62:73:ae:f6:c5:61: ae:ea:b2:99:51:b0:2f:51:2f:1a:91:50:5e:1e:a8: 1c:8d:fb:ee:be:8b:ce:ff:34:ac:c2:e5:62:e5:99: ca:e5:c3:e9:47:2f:c5:de:39:c0:11:e7:8a:23:f6: 2a:b2:d2:04:8f:e9:fd:a5:18:ec:bb:eb:54:ea:33: 82:71:79:17:4a:9f:c5:ab:99:08:ec:00:d8:cc:75: eb:c5:28:e5:75:7b:bc:4e:92:55:85:7d:82:97:d3: e8:b6:bc:69:8e:d7:5c:d4:44:5b:7b:06:be:84:d7: 13:8c:cc:65:e1:d0:3f:d5:47:1f:10:06:dd:0e:8d: f3:ba:08:fe:41:1d:80:58:92:d5:01:6a:4d:96:c7: c7:e3:05:27:0f:7c:52:8d:ff:d2:78:4d:7f:0d:dc: 0b:45:e5:97:af:e8:bd:e2:1e:d3:8b:76:6e:d9:96: df:68:80:ea:bf:7b:70:57:c1:34:53:95:b0:8e:ff: 65:43:d4:90:4e:24:8c:1d:fb:5e:c5:06:97:33:a7: f6:2e:f0:fa:e7:76:4e:8a:1b:ca:31:f9:2f:f4:27: d2:f0:06:2b:40:cc:f9:de:84:15:94:9e:b1:11:c4: 75:b8:1e:c9:2c:7c:d4:ac:63:2f:d9:16:93:51:c3: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:04:47:35:93:04:3E:C5:16:B8:27:D0:46:52:16:96:21:8E:22:1B X509v3 Authority Key Identifier: keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6e:f6:e4:0b:d2:90:08:ed:d8:2f:05:21:e0:03:08:ae:6f: ce:28:1f:1e:f8:32:b4:d0:91:8a:d9:e5:3f:4e:1d:0b:18:74: 88:92:4a:03:7b:d6:35:b2:82:ba:03:6a:f0:6e:f6:47:ce:cd: ab:5d:73:f0:e7:c5:96:cb:0d:1d:f5:91:4a:ab:d7:3b:d3:a9: a2:c8:7a:df:4d:83:c5:8c:d5:47:b6:2a:83:af:c0:25:9d:a0: 89:5a:48:24:3c:cd:a0:83:f5:c2:e7:53:ee:bf:b2:fc:2d:39: a9:db:e1:d2:d8:3d:93:80:a5:70:ef:f1:3e:5c:21:72:d4:fd: f3:d3:6d:b4:47:4e:40:bd:f2:1f:01:f7:33:20:fd:be:43:b3: 62:a8:c5:78:92:5a:1c:a9:66:e5:20:26:e5:6a:8c:73:f2:55: dd:48:eb:5f:92:fc:47:e3:06:07:d1:10:f4:75:4a:bd:06:2b: 76:9b:30:2e:53:fa:4e:3a:a8:09:cc:f2:0a:91:38:bd:d3:ef: 95:48:76:c0:5f:02:e5:9f:3e:29:ed:64:1b:21:82:8b:3e:61: d9:a9:80:c8:c8:17:17:4f:69:65:01:bf:8f:57:59:c3:7b:51: 9c:be:ea:5b:bd:d7:d9:a9:aa:ec:6f:1c:28:5d:06:8a:5f:91: 90:28:8e:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMjcxMTAvBgNVBAUTKDI2NTlDRUQxNTI3RDJDQUJEOEIyQzUzMDc1RUNDRDk0 RUQ3MUZFOTgwHhcNMjUxMTA0MjIwOTU5WhcNMjUxMTExMjIwOTU5WjAYMRYwFAYD VQQDEw02OTBhNzliNy01NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKp3QoIFN4pic672xWGu6rKZUbAvUS8akVBeHqgcjfvuvovO/zSswuVi5ZnK 5cPpRy/F3jnAEeeKI/YqstIEj+n9pRjsu+tU6jOCcXkXSp/Fq5kI7ADYzHXrxSjl dXu8TpJVhX2Cl9Potrxpjtdc1ERbewa+hNcTjMxl4dA/1UcfEAbdDo3zugj+QR2A WJLVAWpNlsfH4wUnD3xSjf/SeE1/DdwLReWXr+i94h7Ti3Zu2ZbfaIDqv3twV8E0 U5Wwjv9lQ9SQTiSMHftexQaXM6f2LvD653ZOihvKMfkv9CfS8AYrQMz53oQVlJ6x EcR1uB7JLHzUrGMv2RaTUcMhewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIERzWT BD7FFrgn0EZSFpYhjiIbMB8GA1UdIwQYMBaAFCZZztFSfSyr2LLFMHXszZTtcf6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIyNy80RkNGNTY4RTdC MDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxLdllzc1V3ZGV6TmxPMXhf cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psbk8wVko5TEt2WXNzVXdkZXpObE8xeF9wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIyNy80RkNGNTY4RTdCMDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxL dllzc1V3ZGV6TmxPMXhfcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKbvbkC9KQCO3YLwUh4AMIrm/OKB8e+DK00JGK2eU/Th0LGHSIkkoD e9Y1soK6A2rwbvZHzs2rXXPw58WWyw0d9ZFKq9c706miyHrfTYPFjNVHtiqDr8Al naCJWkgkPM2gg/XC51Puv7L8LTmp2+HS2D2TgKVw7/E+XCFy1P3z0220R05AvfIf AfczIP2+Q7NiqMV4klocqWblICblaoxz8lXdSOtfkvxH4wYH0RD0dUq9Bit2mzAu U/pOOqgJzPIKkTi90++VSHbAXwLlnz4p7WQbIYKLPmHZqYDIyBcXT2llAb+PV1nD e1GcvupbvdfZqarsbxwoXQaKX5GQKI5z -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:17 2025 by rpki-client