$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: lE0nea4e5mDOXgjVL6IeUY5NieXqmSbZFJRhMgIXZyE= Subject key identifier: 16:C7:D1:9A:C5:13:1E:C4:23:F1:41:23:81:AB:46:D6:C5:10:2D:E8 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 09B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 09A1 Signing time: Tue 04 Nov 2025 20:08:14 +0000 Manifest this update: Tue 04 Nov 2025 20:08:13 +0000 Manifest next update: Tue 11 Nov 2025 20:08:13 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: z21EPaYT6wnSkLlOk/7D/QYi2XCv9DLnsKquYyKfY+w=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: G50IgyVtJtFjbRe7GXXuAS+YYFAlwWX6MNmoWMFn7H8=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: UDel8k9RgGctC+s9ZLuCO5lpL1soQPWhGXE8LLODT5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Nov 4 20:08:13 2025 GMT Not After : Nov 11 20:08:13 2025 GMT Subject: CN=690a5d2e-7036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:dc:ee:e8:85:38:a4:8c:5c:04:c7:e6:38: 5f:b9:37:9e:d5:53:fc:fd:ec:05:bf:7e:ef:d3:0b: 64:dc:18:9a:9f:35:bd:e9:21:5d:9e:54:95:0e:83: a6:ba:ad:6f:c1:df:47:79:d9:c0:6d:91:4d:2c:0e: 20:f3:cb:a9:2c:07:75:23:39:28:d1:c6:82:d5:39: c8:f7:3a:4a:e0:f3:75:56:fe:02:27:2d:95:ba:b1: 2b:ce:f2:d1:5d:8d:c0:b4:f7:59:4e:96:f3:64:12: ac:11:ab:8a:29:73:2d:cc:a1:69:c7:c9:23:2d:07: 00:cd:65:f2:1c:b7:aa:09:d7:c8:85:f4:07:25:51: 1a:20:c8:3a:27:e3:45:0a:9e:15:54:16:fb:47:91: a7:e7:48:2c:b7:c1:f7:e0:d6:22:50:6a:3e:38:b2: df:ef:3a:08:05:d8:23:0e:a0:f6:54:ec:4c:20:6f: 51:a8:1e:77:30:f5:89:d3:01:f1:b3:df:ea:3d:3f: 3a:56:67:3a:86:56:97:3a:e3:af:7b:5b:14:da:04: ce:cc:07:b0:64:82:08:d6:5b:be:cc:a2:41:45:6c: 80:3e:90:07:54:30:e3:48:15:ef:f6:80:51:9c:5a: 2a:ee:b7:8b:a7:a8:e7:de:de:2d:ef:a5:27:cd:f3: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:D1:9A:C5:13:1E:C4:23:F1:41:23:81:AB:46:D6:C5:10:2D:E8 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:67:cf:44:08:8a:64:82:6b:c8:06:2c:ac:b8:55:6f:f5:17: 7c:1b:e0:cd:d1:4b:a0:9f:3b:b6:b3:be:40:7f:75:2b:54:57: ab:70:99:9a:c3:4f:58:ba:21:e3:dc:08:ed:76:45:8e:4c:e1: 52:e2:32:81:26:2d:95:35:80:eb:c0:6f:5f:50:f2:5b:34:09: 70:44:ab:4e:29:69:9b:d1:a7:69:ae:aa:68:e0:32:d6:d4:21: 10:2f:d5:de:01:4a:eb:15:e2:0b:cb:65:53:ec:51:a2:60:c9: d2:21:fc:d2:bf:2d:a1:68:ea:9e:96:59:e9:f7:7c:e5:c8:19: 0a:0c:c8:5d:59:b4:18:10:20:1c:69:a8:c0:24:cb:46:64:94: e3:a6:ab:bf:9a:bc:95:89:3f:c6:bd:09:5c:fa:62:36:44:b7: 8a:81:86:b3:e6:65:35:4a:bb:77:db:22:3a:4f:93:85:80:19: c3:b4:9b:b9:06:06:1f:ef:0a:e2:d2:59:f1:00:54:b5:3b:56: c6:26:56:4e:e3:5b:5b:46:01:86:7e:2f:b6:e9:af:44:16:48: 16:c1:88:69:9f:4e:25:84:3c:e0:4d:c6:83:19:b2:32:6a:a2: 25:92:4d:34:22:5c:65:c8:1a:eb:bf:66:62:48:24:cb:1e:f9: 7c:24:0b:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUxMTA0MjAwODEzWhcNMjUxMTExMjAwODEzWjAYMRYwFAYD VQQDEw02OTBhNWQyZS03MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYXc7uiFOKSMXATH5jhfuTee1VP8/ewFv37v0wtk3BianzW96SFdnlSVDoOm uq1vwd9HednAbZFNLA4g88upLAd1Izko0caC1TnI9zpK4PN1Vv4CJy2VurErzvLR XY3AtPdZTpbzZBKsEauKKXMtzKFpx8kjLQcAzWXyHLeqCdfIhfQHJVEaIMg6J+NF Cp4VVBb7R5Gn50gst8H34NYiUGo+OLLf7zoIBdgjDqD2VOxMIG9RqB53MPWJ0wHx s9/qPT86Vmc6hlaXOuOve1sU2gTOzAewZIII1lu+zKJBRWyAPpAHVDDjSBXv9oBR nFoq7reLp6jn3t4t76UnzfMkhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbH0ZrF Ex7EI/FBI4GrRtbFEC3oMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGZ89ECIpkgmvIBiysuFVv9Rd8G+DN0Uugnzu2s75Af3UrVFercJma w09YuiHj3AjtdkWOTOFS4jKBJi2VNYDrwG9fUPJbNAlwRKtOKWmb0adprqpo4DLW 1CEQL9XeAUrrFeILy2VT7FGiYMnSIfzSvy2haOqellnp93zlyBkKDMhdWbQYECAc aajAJMtGZJTjpqu/mryViT/GvQlc+mI2RLeKgYaz5mU1Srt32yI6T5OFgBnDtJu5 BgYf7wri0lnxAFS1O1bGJlZO41tbRgGGfi+26a9EFkgWwYhpn04lhDzgTcaDGbIy aqIlkk00IlxlyBrrv2ZiSCTLHvl8JAtv -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:35 2025 by rpki-client