$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: 2YAwoGZ+HW8Aj93c0/kKETP5+At7GSdlGXwWtxW2HSI= Subject key identifier: AC:55:80:83:EB:06:99:1E:5B:57:F6:73:F7:4B:7E:80:96:5C:F1:65 Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 028A Signing time: Wed 05 Nov 2025 02:11:53 +0000 Manifest this update: Wed 05 Nov 2025 02:11:53 +0000 Manifest next update: Wed 12 Nov 2025 02:11:53 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: 6meTST2rPsdPyUUthZ0Jtds5F8R79Ci+ffrt3IOaXlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Nov 5 02:11:53 2025 GMT Not After : Nov 12 02:11:53 2025 GMT Subject: CN=690ab269-995b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:c3:69:92:be:a6:c1:a3:b6:42:a2:23:d7: 8d:b8:af:26:42:c4:b7:c8:6c:b8:96:12:5e:bf:73: 44:f7:d4:f8:07:b0:d0:13:c2:fc:52:b9:d4:24:9a: c0:ff:9d:b8:f5:cb:dc:d0:13:74:d5:9d:cc:49:64: 73:e7:80:cf:78:6a:83:b9:3d:fc:44:43:e4:89:e8: 1c:7b:1e:b8:8c:d6:15:28:f5:d2:2b:b3:d5:3a:89: 7d:c6:cd:00:64:8c:25:dc:32:df:03:60:4e:bf:e4: 93:fd:09:ce:88:46:24:08:cb:f5:6b:2f:b3:a6:ea: cf:c3:bc:8c:e5:13:f7:b6:9d:5d:48:9c:14:b7:91: 7b:d8:60:0e:b4:bb:9a:36:70:a7:6c:95:1d:57:7f: 18:a2:b2:83:59:6f:0f:bf:2e:d1:af:1b:ef:e5:41: 32:b0:6d:cd:8d:b2:15:45:ae:cc:72:63:d7:d7:d7: fd:5a:aa:60:d4:67:57:76:ba:1b:f0:10:b5:84:ba: 69:e9:da:3c:1c:6f:a8:8d:33:e8:e4:c2:6a:87:de: 22:94:cf:fd:78:16:e0:9d:d7:1c:ce:e3:c9:f0:21: f6:97:bb:12:dc:55:4c:65:03:a3:fb:a4:db:df:31: 0d:ec:9a:b8:ae:bc:67:a9:53:ef:26:ee:d8:70:dc: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:55:80:83:EB:06:99:1E:5B:57:F6:73:F7:4B:7E:80:96:5C:F1:65 X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:82:42:e9:95:79:75:c2:cd:aa:05:7b:8b:d6:89:34:2d:14: 01:76:f4:46:c3:12:8b:01:ec:10:43:62:7d:49:3f:1b:56:4a: 49:84:3b:cb:d8:7b:42:91:10:16:1f:18:c1:10:60:6c:10:26: 73:56:ef:02:da:7f:6b:3a:64:5e:88:c0:b0:d9:b5:be:66:10: 18:d5:f8:44:1c:6e:3c:8d:8a:76:d7:b1:5e:54:fb:e0:6e:e9: 12:76:39:90:7e:dd:2e:04:15:7c:35:08:9b:23:85:f0:cd:29: 29:31:10:f8:22:1a:e1:e5:50:cc:aa:db:29:87:7f:73:a7:dd: a1:09:80:66:39:4f:fd:c2:28:47:e4:bb:ed:4b:45:9d:52:1a: c5:03:4a:f0:d5:ac:b0:fc:5c:0e:7d:bb:bc:eb:07:23:25:fa: 8e:83:a8:1b:c8:65:79:0d:ad:a2:f7:a6:8e:b9:73:2d:f9:3e: 8d:02:47:30:8a:bf:b8:0c:a3:5c:c9:2a:cc:0a:2a:f1:63:c3: e8:0d:06:12:70:74:41:c9:df:c6:5c:a8:f2:01:e2:9b:f6:86: bf:e2:44:c9:11:ae:d4:4a:41:d1:09:de:03:0b:65:f0:28:a6: 1d:6f:51:b1:d7:9a:14:98:14:7d:c2:35:2a:02:6c:f2:b8:06: a8:95:66:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUxMTA1MDIxMTUzWhcNMjUxMTEyMDIxMTUzWjAYMRYwFAYD VQQDEw02OTBhYjI2OS05OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37XDaZK+psGjtkKiI9eNuK8mQsS3yGy4lhJev3NE99T4B7DQE8L8UrnUJJrA /5249cvc0BN01Z3MSWRz54DPeGqDuT38REPkiegcex64jNYVKPXSK7PVOol9xs0A ZIwl3DLfA2BOv+ST/QnOiEYkCMv1ay+zpurPw7yM5RP3tp1dSJwUt5F72GAOtLua NnCnbJUdV38YorKDWW8Pvy7Rrxvv5UEysG3NjbIVRa7McmPX19f9Wqpg1GdXdrob 8BC1hLpp6do8HG+ojTPo5MJqh94ilM/9eBbgndcczuPJ8CH2l7sS3FVMZQOj+6Tb 3zEN7Jq4rrxnqVPvJu7YcNwg9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxVgIPr BpkeW1f2c/dLfoCWXPFlMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4gkLplXl1ws2qBXuL1ok0LRQBdvRGwxKLAewQQ2J9ST8bVkpJhDvL 2HtCkRAWHxjBEGBsECZzVu8C2n9rOmReiMCw2bW+ZhAY1fhEHG48jYp217FeVPvg bukSdjmQft0uBBV8NQibI4XwzSkpMRD4Ihrh5VDMqtsph39zp92hCYBmOU/9wihH 5LvtS0WdUhrFA0rw1ayw/FwOfbu86wcjJfqOg6gbyGV5Da2i96aOuXMt+T6NAkcw ir+4DKNcySrMCirxY8PoDQYScHRByd/GXKjyAeKb9oa/4kTJEa7USkHRCd4DC2Xw KKYdb1Gx15oUmBR9wjUqAmzyuAaolWaa -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:07 2025 by rpki-client