$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: 7Z4ov77Aabhcjf9lhF4urZ4qx+ACOLM1GXspAOfUne8= Subject key identifier: 2B:40:62:3F:AC:4A:28:13:CA:5A:FB:2D:3E:98:14:AC:5B:36:08:B3 Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 0209 Signing time: Wed 05 Nov 2025 02:25:53 +0000 Manifest this update: Wed 05 Nov 2025 02:25:52 +0000 Manifest next update: Wed 12 Nov 2025 02:25:52 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: JRX2blKZ2TVu9NO85dly8LX0pGyZNMPkKYRI44mVIdo=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Nov 5 02:25:52 2025 GMT Not After : Nov 12 02:25:52 2025 GMT Subject: CN=690ab5b0-c953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:29:1a:51:4d:ee:4c:98:ef:3b:17:78:81: a7:ec:ed:3a:11:7a:a3:5c:e1:5d:fd:d4:a5:71:3a: d2:c1:a3:6f:a2:3c:68:04:f5:86:c6:3e:f9:dc:43: 40:f2:76:a0:a6:5c:2b:c0:0c:b9:a4:f7:0b:1c:14: bf:3f:78:f3:fd:55:43:8c:55:11:87:df:23:16:86: 25:63:e0:9c:26:b4:26:c0:5f:33:f8:30:89:c8:e5: 1b:79:1d:c9:ea:61:9a:e2:22:eb:14:60:71:50:5e: 2d:5a:a5:ee:41:31:04:24:65:32:b2:1b:56:8c:15: 8e:58:cd:75:78:2a:a8:c6:d2:c3:fb:1c:9a:88:e3: 09:87:28:ee:1e:19:65:9e:08:6a:34:1c:99:de:ed: a0:c0:83:4f:79:75:0d:0f:b2:ca:be:f8:67:2c:44: c6:a0:14:1a:9f:81:1e:3c:4b:24:3a:a8:fd:00:d2: 8d:b7:c3:44:62:ed:f1:8e:a7:5c:a7:ac:45:6a:e6: 76:2e:ba:f1:18:23:30:ea:d3:cd:07:2d:df:52:56: fd:57:fe:0e:1b:b6:bb:97:dc:a2:8f:80:c8:77:f0: 11:09:0c:33:7b:93:96:9a:2e:37:e6:7f:52:fe:44: a6:45:cf:fe:31:07:00:6a:5d:ee:e5:6a:da:e5:27: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:62:3F:AC:4A:28:13:CA:5A:FB:2D:3E:98:14:AC:5B:36:08:B3 X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:a2:58:06:18:86:5d:40:16:aa:a5:4e:6a:33:76:e5:d4:97: 8f:d4:12:d7:4e:b2:02:85:6a:74:a2:d9:0c:74:1f:0f:5a:4e: 0c:f5:90:33:16:cd:e3:8a:e8:ef:c1:95:e1:18:b3:54:20:6a: 12:55:93:94:78:27:bf:03:95:b8:da:6d:fa:0e:b6:37:97:04: 8b:55:3e:f2:31:f9:7f:76:29:45:31:00:e3:ad:37:04:c0:51: e5:75:e5:f2:c6:cb:89:59:51:60:1c:27:57:f4:7c:35:b6:6b: e5:86:d0:c3:22:ee:1f:30:77:14:18:77:38:89:6c:f7:6c:e2: ff:2d:59:5c:e4:50:b6:50:58:40:2e:27:b6:44:9e:b1:54:08: a4:c1:29:74:a4:0e:55:f3:61:e2:a4:a4:08:c3:26:80:e3:e4: f9:48:61:91:25:56:60:94:7e:bb:92:76:68:f5:c7:b9:55:3f: 5c:12:c9:63:bb:59:60:63:20:cf:90:29:96:43:3e:88:ae:03: e0:8d:d9:6d:4b:4a:be:b0:78:13:dd:6b:43:f6:25:b7:12:94: a3:01:86:dc:60:00:e4:1d:5b:01:23:eb:9d:1d:b3:18:97:0d: 43:52:08:c9:9a:66:90:3d:b4:91:cc:20:10:9c:be:27:87:da: 27:56:88:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUxMTA1MDIyNTUyWhcNMjUxMTEyMDIyNTUyWjAYMRYwFAYD VQQDEw02OTBhYjViMC1jOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1ApGlFN7kyY7zsXeIGn7O06EXqjXOFd/dSlcTrSwaNvojxoBPWGxj753ENA 8nagplwrwAy5pPcLHBS/P3jz/VVDjFURh98jFoYlY+CcJrQmwF8z+DCJyOUbeR3J 6mGa4iLrFGBxUF4tWqXuQTEEJGUyshtWjBWOWM11eCqoxtLD+xyaiOMJhyjuHhll nghqNByZ3u2gwINPeXUND7LKvvhnLETGoBQan4EePEskOqj9ANKNt8NEYu3xjqdc p6xFauZ2LrrxGCMw6tPNBy3fUlb9V/4OG7a7l9yij4DId/ARCQwze5OWmi435n9S /kSmRc/+MQcAal3u5Wra5SeK4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtAYj+s SigTylr7LT6YFKxbNgizMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6olgGGIZdQBaqpU5qM3bl1JeP1BLXTrIChWp0otkMdB8PWk4M9ZAz Fs3jiujvwZXhGLNUIGoSVZOUeCe/A5W42m36DrY3lwSLVT7yMfl/dilFMQDjrTcE wFHldeXyxsuJWVFgHCdX9Hw1tmvlhtDDIu4fMHcUGHc4iWz3bOL/LVlc5FC2UFhA Lie2RJ6xVAikwSl0pA5V82HipKQIwyaA4+T5SGGRJVZglH67knZo9ce5VT9cEslj u1lgYyDPkCmWQz6IrgPgjdltS0q+sHgT3WtD9iW3EpSjAYbcYADkHVsBI+udHbMY lw1DUgjJmmaQPbSRzCAQnL4nh9onVogW -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:49 2025 by rpki-client