$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: sCSARz9BNqWE0baJEg7CZELSpYGOvRs8CyLYmrcaLsk= Subject key identifier: E0:33:F5:56:B5:BF:3D:A8:7B:3E:A7:C1:F0:05:A1:7A:52:51:4C:0E Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 0688 Signing time: Tue 04 Nov 2025 22:31:21 +0000 Manifest this update: Tue 04 Nov 2025 22:31:20 +0000 Manifest next update: Tue 11 Nov 2025 22:31:20 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: Tx9TQxoshoCjBJWLd4zk8hdaG7wTGuM7WtU3B7OqIPM=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: Nov 4 22:31:20 2025 GMT Not After : Nov 11 22:31:20 2025 GMT Subject: CN=690a7eb8-e36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:ae:ec:69:30:e8:87:9e:c9:48:be:3c:8f: 69:5f:4b:68:d9:00:7c:14:3f:36:bf:43:49:51:ff: 13:a0:4c:7d:90:f2:e4:90:23:1b:bb:f3:60:11:a8: b5:f1:ed:9b:e6:70:00:f1:ef:d1:f3:5a:38:2f:00: 8d:48:20:72:00:33:03:dd:7b:a2:11:b9:51:32:4d: 8f:01:be:bd:92:c8:65:d2:f1:88:46:21:ac:aa:23: 05:06:cf:e1:2e:69:ef:43:52:59:d9:53:cf:e9:85: 1f:86:38:21:5c:1a:77:54:ca:52:d9:ca:b1:31:43: a8:cb:16:9d:28:e3:7b:c8:04:fb:af:25:83:33:85: 6b:d6:85:21:5f:c0:6a:e9:dd:56:47:5a:23:ea:24: ee:93:cd:0f:a9:14:1f:ac:29:4f:dd:7f:db:a3:97: 3a:bb:e6:9b:6c:c5:7d:e4:8e:ee:4e:74:6a:e8:9f: 5e:e5:3c:00:a1:72:30:16:4b:cb:4a:d2:a6:8e:20: e4:fa:74:c2:0d:52:67:90:2b:39:f1:b8:b1:19:e5: 08:28:5d:bf:c2:ad:36:49:50:ea:30:28:27:e0:5d: 46:2e:c7:83:16:ba:40:71:f8:a8:3c:57:03:fd:8c: 16:19:31:92:b1:87:9b:3b:b1:60:e7:10:a4:8e:92: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:33:F5:56:B5:BF:3D:A8:7B:3E:A7:C1:F0:05:A1:7A:52:51:4C:0E X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:de:aa:b8:90:e8:f0:69:48:90:93:2e:c1:74:6b:5c:e9:c4: f3:58:76:fd:96:68:ff:36:7e:de:8c:a6:44:2f:8f:f4:66:49: 91:43:30:95:3e:6e:94:6d:97:23:cd:ef:ef:96:31:c4:4c:b7: a9:05:24:f7:b1:3e:87:4c:38:cf:c8:86:b0:14:1f:ff:1c:15: 1b:31:a7:ce:d8:3c:a8:0f:7f:e1:09:e5:18:92:5c:27:64:78: 26:63:80:7a:e9:78:36:02:f1:d2:ee:68:84:4e:8b:aa:64:60: f1:35:d9:16:6e:bb:4d:95:97:6c:1a:34:43:08:a7:3e:29:b2: 08:b6:e0:bf:c9:cd:e8:fd:57:6d:1d:56:d5:a9:09:63:7e:7b: db:ee:04:c1:6a:3b:ac:45:23:20:a9:cd:3f:ce:85:e7:73:d6: a7:72:b0:35:c7:d9:eb:71:23:a6:3c:93:b2:0d:12:d3:f5:67: b0:50:df:4d:4d:9d:69:52:db:32:24:3b:27:07:4e:bb:eb:50: 5b:f3:0c:1c:13:af:c2:2d:c4:c1:04:b5:2a:6a:3e:10:1c:84: 8b:21:b7:bd:4d:54:9f:20:00:51:78:71:a8:ed:a4:f1:7f:8b: ce:8d:1e:7c:4e:60:fc:4e:0d:44:7b:fc:53:9e:ba:31:63:56: a3:f5:5e:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUxMTA0MjIzMTIwWhcNMjUxMTExMjIzMTIwWjAYMRYwFAYD VQQDEw02OTBhN2ViOC1lMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuuu7Gkw6IeeyUi+PI9pX0to2QB8FD82v0NJUf8ToEx9kPLkkCMbu/NgEai1 8e2b5nAA8e/R81o4LwCNSCByADMD3XuiEblRMk2PAb69kshl0vGIRiGsqiMFBs/h LmnvQ1JZ2VPP6YUfhjghXBp3VMpS2cqxMUOoyxadKON7yAT7ryWDM4Vr1oUhX8Bq 6d1WR1oj6iTuk80PqRQfrClP3X/bo5c6u+abbMV95I7uTnRq6J9e5TwAoXIwFkvL StKmjiDk+nTCDVJnkCs58bixGeUIKF2/wq02SVDqMCgn4F1GLseDFrpAcfioPFcD /YwWGTGSsYebO7Fg5xCkjpIu7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAz9Va1 vz2oez6nwfAFoXpSUUwOMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP3qq4kOjwaUiQky7BdGtc6cTzWHb9lmj/Nn7ejKZEL4/0ZkmRQzCV Pm6UbZcjze/vljHETLepBST3sT6HTDjPyIawFB//HBUbMafO2DyoD3/hCeUYklwn ZHgmY4B66Xg2AvHS7miETouqZGDxNdkWbrtNlZdsGjRDCKc+KbIItuC/yc3o/Vdt HVbVqQljfnvb7gTBajusRSMgqc0/zoXnc9ancrA1x9nrcSOmPJOyDRLT9WewUN9N TZ1pUtsyJDsnB06761Bb8wwcE6/CLcTBBLUqaj4QHISLIbe9TVSfIABReHGo7aTx f4vOjR58TmD8Tg1Ee/xTnroxY1aj9V65 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:53 2025 by rpki-client