$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft File: JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json) Hash identifier: ugHlQr74jrnjpm6TOlWZonFUD1UJNQEb4aBVtR5Z3zc= Subject key identifier: D7:C3:84:DB:2E:54:44:B7:69:55:BA:D2:4D:84:A1:D3:7B:D8:6F:CD Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 Certificate issuer: /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft Manifest number: 47EE Signing time: Tue 04 Nov 2025 14:21:11 +0000 Manifest this update: Tue 04 Nov 2025 14:21:11 +0000 Manifest next update: Tue 11 Nov 2025 14:21:11 +0000 Files and hashes: 1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: r35P7RdprU5zymvmgtJ3P8xcaQQUU0ZF5D1JDzJBJXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Validity Not Before: Nov 4 14:21:11 2025 GMT Not After : Nov 11 14:21:11 2025 GMT Subject: CN=690a0bd7-12b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b1:63:f1:5c:c3:21:44:cd:c1:1b:e6:eb:cb: 9f:21:1e:4b:d6:41:7b:c2:50:39:24:52:fc:cb:bf: 7d:af:e5:e9:85:c1:d8:96:a2:eb:f2:60:3e:2c:c6: 76:2e:34:26:a0:63:68:19:e7:63:e1:d6:d7:e0:8e: ab:4b:e9:be:1e:67:0e:e1:e6:93:57:1c:64:5a:ab: ff:72:80:a1:01:dc:fc:70:d3:1a:42:02:de:bc:37: 65:74:39:2c:c1:ff:cc:40:d2:ea:d2:c3:b6:a5:15: f1:fb:3f:de:f8:d8:b8:6e:26:d6:67:ef:01:1e:7c: db:f0:f8:94:79:ad:59:a7:01:cc:d7:62:ef:22:84: d6:9f:ce:f6:99:75:42:57:e0:00:d7:28:42:cb:c8: 55:77:db:38:6b:1c:6b:df:c2:d1:a9:51:19:da:21: bf:85:00:db:8f:66:c0:20:57:5f:cc:66:2f:fc:45: a5:1c:db:49:43:96:6e:2b:a2:21:9c:2b:bb:bb:cc: 5b:86:9f:43:11:7f:76:19:b8:b3:a9:13:0f:58:5a: b5:d1:4e:77:50:f3:06:20:e8:ff:95:b8:3a:4e:e8: c4:5a:65:ce:1b:6e:97:5c:5e:e2:98:c5:ab:17:4a: 7a:48:ae:cb:16:fd:39:1a:a5:00:d4:85:6a:cb:59: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C3:84:DB:2E:54:44:B7:69:55:BA:D2:4D:84:A1:D3:7B:D8:6F:CD X509v3 Authority Key Identifier: keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b3:24:50:c1:82:c6:2c:58:87:a9:cd:4b:a2:79:a1:7f:9a: 83:69:0f:2e:b9:e1:1b:7c:ec:d5:db:36:13:b1:4c:46:87:9b: 73:af:07:ed:24:6e:b7:b5:b0:1a:33:24:8d:d6:e0:b4:86:e8: 98:96:a2:5a:74:8c:5e:43:73:00:56:19:69:90:4b:5c:5a:a6: 1d:d6:e1:7b:ea:99:d8:7f:3c:7d:67:88:18:18:a7:f0:7b:83: 8c:08:0c:90:1a:52:72:ab:bf:29:64:7c:7e:b1:7a:b8:39:70: db:49:9a:71:6b:ed:53:a4:94:2e:87:78:b0:9f:d4:5a:be:b9: cc:ac:db:11:36:2f:a5:69:5d:09:bc:cc:32:31:a5:8e:fa:7b: f3:bd:8e:97:3f:6f:6f:6f:b1:87:1a:12:6f:82:17:82:4c:3f: be:7e:5d:82:f4:d2:61:c4:cb:69:ee:65:07:66:b4:25:5d:f8: 27:24:00:48:29:13:bc:f7:64:c6:5d:73:ac:e8:64:ee:2e:41: 73:d8:cf:ea:40:ab:f3:dc:db:b9:32:45:6d:71:2b:b3:2b:05: 1c:97:fd:fb:87:f6:de:e3:55:f5:c6:62:4d:fe:48:e2:46:7f: 9c:ad:e3:03:cf:3c:d8:3b:8d:99:04:5b:92:47:5a:fa:43:92: f5:7e:d9:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDI3MjMwN0IyMjc5MzZEQjNFRTNCNjU0MDYwMkMzMkQ5 NTgzMDlGNjEwHhcNMjUxMTA0MTQyMTExWhcNMjUxMTExMTQyMTExWjAYMRYwFAYD VQQDEw02OTBhMGJkNy0xMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rFj8VzDIUTNwRvm68ufIR5L1kF7wlA5JFL8y799r+XphcHYlqLr8mA+LMZ2 LjQmoGNoGedj4dbX4I6rS+m+HmcO4eaTVxxkWqv/coChAdz8cNMaQgLevDdldDks wf/MQNLq0sO2pRXx+z/e+Ni4bibWZ+8BHnzb8PiUea1ZpwHM12LvIoTWn872mXVC V+AA1yhCy8hVd9s4axxr38LRqVEZ2iG/hQDbj2bAIFdfzGYv/EWlHNtJQ5ZuK6Ih nCu7u8xbhp9DEX92GbizqRMPWFq10U53UPMGIOj/lbg6TujEWmXOG26XXF7imMWr F0p6SK7LFv05GqUA1IVqy1kBcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfDhNsu VES3aVW60k2EodN72G/NMB8GA1UdIwQYMBaAFCcjB7Ink22z7jtlQGAsMtlYMJ9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJiUHVPMlZBWUN3eTJWZ3du MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0p5TUhzaWVUYmJQdU8yVkFZQ3d5MlZnd24yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJi UHVPMlZBWUN3eTJWZ3duMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLsyRQwYLGLFiHqc1Lonmhf5qDaQ8uueEbfOzV2zYTsUxGh5tzrwft JG63tbAaMySN1uC0huiYlqJadIxeQ3MAVhlpkEtcWqYd1uF76pnYfzx9Z4gYGKfw e4OMCAyQGlJyq78pZHx+sXq4OXDbSZpxa+1TpJQuh3iwn9RavrnMrNsRNi+laV0J vMwyMaWO+nvzvY6XP29vb7GHGhJvgheCTD++fl2C9NJhxMtp7mUHZrQlXfgnJABI KRO892TGXXOs6GTuLkFz2M/qQKvz3Nu5MkVtcSuzKwUcl/37h/be41X1xmJN/kji Rn+creMDzzzYO42ZBFuSR1r6Q5L1ftmc -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:48 2025 by rpki-client