$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json) Hash identifier: YdB7mUmr5md4g9zp1UAk4VvDhok7m7H3ZEOIjBCN500= Subject key identifier: AC:14:8A:68:40:2F:0A:FC:8E:E4:B2:02:92:9F:ED:82:27:CC:8D:11 Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft Manifest number: 0950 Signing time: Tue 04 Nov 2025 20:15:35 +0000 Manifest this update: Tue 04 Nov 2025 20:15:34 +0000 Manifest next update: Tue 11 Nov 2025 20:15:34 +0000 Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: wNEoMr2Eo2gQot88Fluwv9jAe54VMW69RMxqtX+yYII=) 2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: hBbziGq3cc8hGTM4JIZcIJ31hPsOyUFUIPkanCNnaOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: Nov 4 20:15:34 2025 GMT Not After : Nov 11 20:15:34 2025 GMT Subject: CN=690a5ee7-6859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:64:2b:1c:ee:48:ab:42:44:94:97:80:ae: cd:6a:85:ba:7e:01:ef:79:a0:db:e2:00:d6:d0:66: 91:17:ce:3b:cb:c0:35:48:56:9c:a7:78:05:10:72: 7f:89:07:fd:bc:f3:ef:f9:ef:f2:cc:5d:95:8a:a3: b1:3f:13:73:74:4b:a1:84:ae:e3:a1:6e:0c:09:a3: 8f:71:83:8d:21:cb:85:1f:6a:57:50:44:c4:42:3e: e6:37:5a:a8:f5:cc:f5:77:40:9e:77:82:00:bc:2a: 97:29:b3:65:f7:74:08:2a:ec:20:28:63:54:3d:1d: 91:98:51:5a:dc:31:da:f8:9c:a4:04:8d:51:29:4e: 66:aa:ad:ac:35:32:45:8f:1a:36:2d:87:20:ad:5d: b0:81:7f:3b:a0:f4:4c:a8:fe:4d:39:ec:7c:ce:e2: 16:2b:a7:2a:bd:ec:f4:ba:88:c2:64:b6:46:1e:36: 8c:6d:5a:fd:13:94:12:00:2f:e3:3a:d3:93:66:4f: 06:e6:ba:99:d7:ba:5e:a9:f0:db:9c:2f:88:e4:b4: 7c:79:e6:a9:e8:42:b0:be:7d:0a:e1:81:b9:a3:ff: 34:ef:ee:49:8e:d6:ed:5c:3d:e2:b3:5f:55:6d:2f: dc:42:76:b7:70:f8:35:9c:85:4b:4f:bc:39:71:d3: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:8A:68:40:2F:0A:FC:8E:E4:B2:02:92:9F:ED:82:27:CC:8D:11 X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c0:c9:a9:a1:1f:8d:6e:65:b8:d9:6f:c3:2a:6a:65:1e:d9: 22:ac:74:28:f0:9e:76:ca:14:9f:65:8c:0f:fe:3f:6d:a3:d8: 0b:62:79:ce:95:6e:58:a7:98:87:31:12:a9:5e:d4:c6:3f:e8: ad:85:3b:1e:f3:4c:c9:d4:7d:a9:4f:cb:ce:b5:38:87:e3:03: 0d:76:e2:5a:e3:84:9b:96:ec:7f:63:44:2b:f4:96:5e:f0:0c: 78:3b:7b:b4:48:eb:b9:01:32:e9:1f:4e:d0:bb:99:c7:dc:35: d8:8f:1a:9a:45:f3:39:c1:b6:a4:62:85:00:2b:4a:16:bd:4c: 96:48:aa:d5:aa:9a:ef:7d:1a:5d:1d:db:af:e9:fd:1d:f2:f6: dd:a1:0c:17:d5:a8:53:4d:ef:13:f7:80:34:3c:32:51:87:e2: fa:bc:95:55:49:4e:08:fc:d0:d7:b3:40:5f:ee:17:25:91:a1: e3:a9:6b:28:5a:c5:96:89:a1:57:e4:e8:63:5f:1f:73:26:94: 05:ac:d2:d5:19:3a:a0:90:1c:7a:10:55:22:7e:9a:da:bd:ba: 2e:4f:58:84:53:f8:f5:98:61:32:75:fb:0d:cb:18:c6:92:f5: ac:22:93:0e:71:72:64:64:9c:a5:5e:13:c1:69:22:aa:58:a6: 52:e4:de:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjUxMTA0MjAxNTM0WhcNMjUxMTExMjAxNTM0WjAYMRYwFAYD VQQDEw02OTBhNWVlNy02ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fpkKxzuSKtCRJSXgK7NaoW6fgHveaDb4gDW0GaRF847y8A1SFacp3gFEHJ/ iQf9vPPv+e/yzF2ViqOxPxNzdEuhhK7joW4MCaOPcYONIcuFH2pXUETEQj7mN1qo 9cz1d0Ced4IAvCqXKbNl93QIKuwgKGNUPR2RmFFa3DHa+JykBI1RKU5mqq2sNTJF jxo2LYcgrV2wgX87oPRMqP5NOex8zuIWK6cqvez0uojCZLZGHjaMbVr9E5QSAC/j OtOTZk8G5rqZ17peqfDbnC+I5LR8eeap6EKwvn0K4YG5o/807+5JjtbtXD3is19V bS/cQna3cPg1nIVLT7w5cdNigQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwUimhA Lwr8juSyApKf7YInzI0RMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYxMS84RUEyNDc1QUE5RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4 TV8tOHB3ejM5cXI3QXoxM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlwMmpoR+NbmW42W/DKmplHtkirHQo8J52yhSfZYwP/j9to9gLYnnO lW5Yp5iHMRKpXtTGP+ithTse80zJ1H2pT8vOtTiH4wMNduJa44Sblux/Y0Qr9JZe 8Ax4O3u0SOu5ATLpH07Qu5nH3DXYjxqaRfM5wbakYoUAK0oWvUyWSKrVqprvfRpd Hduv6f0d8vbdoQwX1ahTTe8T94A0PDJRh+L6vJVVSU4I/NDXs0Bf7hclkaHjqWso WsWWiaFX5OhjXx9zJpQFrNLVGTqgkBx6EFUifpravbouT1iEU/j1mGEydfsNyxjG kvWsIpMOcXJkZJylXhPBaSKqWKZS5N61 -----END CERTIFICATE-----Generated at Wed Nov 5 06:27:46 2025 by rpki-client