$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: vNgcWc/BH4sKa61VsbC+0Gy4vvJOS8d2zMlQdiMB9lk= Subject key identifier: D5:22:42:E2:08:46:07:CC:06:9A:8C:40:C8:0F:C8:B1:A5:01:3F:47 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 0158 Signing time: Wed 05 Nov 2025 04:15:09 +0000 Manifest this update: Wed 05 Nov 2025 04:15:09 +0000 Manifest next update: Wed 12 Nov 2025 04:15:09 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: 6Kv1uxfUqPdDpJfj2HXsAddEsDzpwCgHW1P3Yxms4vg=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: 9jHu3pObxxfWdzGy7pK2inH03eaLWHZ7GI2Hxp0P/hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Nov 5 04:15:09 2025 GMT Not After : Nov 12 04:15:09 2025 GMT Subject: CN=690acf4d-b33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:d1:82:bd:e5:aa:c0:d0:61:55:b7:4b:d6: 17:70:c2:fc:b6:07:4d:42:b6:0e:ac:b6:10:28:89: 26:7a:f3:e8:e9:f6:e6:e8:63:a0:7d:dc:7a:7b:f2: 70:50:ab:4e:26:5b:22:0c:97:3d:87:85:c4:4f:20: 22:f1:81:6b:96:20:e4:71:89:a6:d5:0e:db:61:b6: a9:ad:3b:4f:2f:d7:d6:6b:8f:ff:4e:9b:fe:b6:68: 65:11:17:f9:30:d6:88:11:41:48:b3:bf:10:a0:f2: 51:aa:d7:ea:dd:cb:d8:4f:78:36:35:64:3b:6a:65: 3e:cb:8d:45:64:d7:2a:90:a4:7a:19:00:08:1f:6f: af:b8:0b:c1:ef:4b:3d:a6:86:4f:d0:33:54:a1:3a: 3f:a8:49:24:f0:2d:31:9e:1f:1f:d1:d8:b3:ae:91: 59:b4:89:0a:15:88:08:af:af:d4:89:f0:f5:b5:bd: ee:8a:68:33:a9:94:51:69:07:28:63:f8:52:a3:fa: 36:b2:bf:3e:62:74:a0:77:05:88:6a:2f:f9:17:74: 5f:80:41:87:e0:74:58:e1:81:fa:43:57:06:d4:48: ed:61:a4:1d:d9:3f:f0:20:62:08:18:52:a0:22:aa: ff:88:dc:a7:3f:10:0d:2a:e3:a2:97:80:a2:38:4d: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:22:42:E2:08:46:07:CC:06:9A:8C:40:C8:0F:C8:B1:A5:01:3F:47 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:bb:db:6d:ae:5b:2c:ac:28:75:d4:df:47:2a:3d:59:ca:7b: 20:5c:19:5e:bb:51:b7:01:45:b1:2a:f9:33:d3:58:da:5a:9d: 1b:76:0e:e4:ab:32:83:cf:18:24:56:5f:25:e7:36:33:d5:68: 35:d7:f3:9c:c0:58:39:fa:ea:40:cd:2c:ed:37:ae:52:70:bc: 06:79:0d:3d:c0:a1:a7:a9:9a:6b:d0:bb:cf:48:22:10:5c:58: 68:d4:bd:23:73:8d:b0:c6:3b:7a:34:33:9f:08:57:40:6f:42: 20:98:51:e5:f6:04:05:6f:6c:cb:cb:5c:9e:15:d0:e4:3c:19: 13:40:74:24:cb:bc:27:0f:9c:fe:7c:44:6c:cf:e9:63:b7:0d: 4d:e8:8d:b2:b1:21:cf:89:8b:7b:3a:28:d9:82:78:c3:fa:2c: 01:41:a7:b7:7a:c7:56:aa:66:3f:c1:0f:42:ba:44:92:c7:13: f7:2a:1e:04:b2:05:ab:52:60:a9:d8:a1:ac:01:46:7a:54:c7: 98:d6:4c:37:44:8d:1d:48:b6:17:2e:cc:f2:84:b9:91:8f:d1: 0b:91:a3:e4:35:6f:3d:3d:a2:fb:40:e7:46:40:0e:b9:b9:d9: cd:a2:7b:c8:fe:17:30:e5:6a:fc:69:44:26:5e:ff:7e:15:82: d7:28:89:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUxMTA1MDQxNTA5WhcNMjUxMTEyMDQxNTA5WjAYMRYwFAYD VQQDEw02OTBhY2Y0ZC1iMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pzRgr3lqsDQYVW3S9YXcML8tgdNQrYOrLYQKIkmevPo6fbm6GOgfdx6e/Jw UKtOJlsiDJc9h4XETyAi8YFrliDkcYmm1Q7bYbaprTtPL9fWa4//Tpv+tmhlERf5 MNaIEUFIs78QoPJRqtfq3cvYT3g2NWQ7amU+y41FZNcqkKR6GQAIH2+vuAvB70s9 poZP0DNUoTo/qEkk8C0xnh8f0dizrpFZtIkKFYgIr6/UifD1tb3uimgzqZRRaQco Y/hSo/o2sr8+YnSgdwWIai/5F3RfgEGH4HRY4YH6Q1cG1EjtYaQd2T/wIGIIGFKg Iqr/iNynPxANKuOil4CiOE2yvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUiQuII RgfMBpqMQMgPyLGlAT9HMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVu9ttrlssrCh11N9HKj1ZynsgXBleu1G3AUWxKvkz01jaWp0bdg7k qzKDzxgkVl8l5zYz1Wg11/OcwFg5+upAzSztN65ScLwGeQ09wKGnqZpr0LvPSCIQ XFho1L0jc42wxjt6NDOfCFdAb0IgmFHl9gQFb2zLy1yeFdDkPBkTQHQky7wnD5z+ fERsz+ljtw1N6I2ysSHPiYt7OijZgnjD+iwBQae3esdWqmY/wQ9CukSSxxP3Kh4E sgWrUmCp2KGsAUZ6VMeY1kw3RI0dSLYXLszyhLmRj9ELkaPkNW89PaL7QOdGQA65 udnNonvI/hcw5Wr8aUQmXv9+FYLXKIm/ -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:31 2025 by rpki-client