$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: HRVzAogaGcPLwF9LXK2P/m7XkECcj1mtbJ2kc7SKAI8= Subject key identifier: D6:6C:78:71:A8:55:0B:AE:AB:CD:6C:00:59:93:1D:44:0F:1C:F9:64 Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 1FE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1F90 Signing time: Tue 04 Nov 2025 16:07:17 +0000 Manifest this update: Tue 04 Nov 2025 16:07:17 +0000 Manifest next update: Tue 11 Nov 2025 16:07:17 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: 2FOM0dlAwgzUZ66QB0OPDyReMUxKzFjvzI60fPOgirQ=) 2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ruc/xUwDnNEwkE2/jK0HE26pVyzAxl1jWbriA1MT2XI=) 3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: l81KZYm8B7McIqBnNG7M2LbcnjjotjoHq+OGQq2Xixo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8160 (0x1fe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Nov 4 16:07:17 2025 GMT Not After : Nov 11 16:07:17 2025 GMT Subject: CN=690a24b5-2d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:f3:f4:5c:36:eb:fe:4e:cb:4a:76:38:f2: e3:4f:71:15:24:8b:bd:e7:d8:15:7b:af:fc:a5:fb: 24:d4:8e:6b:cf:38:a2:5f:31:3d:d7:93:11:f5:b9: 84:d2:4a:d6:80:bf:5f:74:23:f7:f9:36:ef:b4:66: 91:6a:1e:04:b2:d6:60:04:32:8a:c0:88:f1:79:dc: 41:76:ac:d2:6f:e8:5d:65:a8:93:b0:64:3a:9d:14: 84:f0:87:a5:1f:3c:b4:82:1d:39:88:0c:dd:e8:83: 81:52:c1:2a:fd:be:30:c8:7e:0e:99:5e:ca:a7:83: bd:3e:e5:8a:fd:12:12:43:12:70:d9:7f:7a:6f:b1: df:98:87:e4:11:39:53:b9:82:19:04:a7:9f:41:a3: ed:5a:c9:c7:bb:1b:14:31:c8:c6:94:c0:5e:ea:98: f5:c0:e3:d3:81:c7:f8:b0:86:da:ea:84:5a:e3:38: 61:63:e5:c9:27:60:1e:9f:31:61:5e:fe:57:e7:c4: 79:a1:62:c8:a4:b5:b7:9c:bc:34:fa:2e:96:51:60: 22:8e:7e:66:46:90:64:68:e1:4d:b2:53:32:50:c6: 51:dc:b6:08:af:a5:c9:6e:c1:31:c3:1e:8a:18:a0: 2d:32:4c:2c:35:66:a3:0b:60:3e:d3:95:75:06:eb: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6C:78:71:A8:55:0B:AE:AB:CD:6C:00:59:93:1D:44:0F:1C:F9:64 X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:52:40:8a:fc:ca:67:3f:c8:3e:8c:00:8e:0c:85:a6:3d: 90:43:d5:ad:a3:ed:33:a5:1e:d0:e9:bf:37:80:f9:0e:43:88: f0:de:f4:a8:cd:93:53:1c:08:79:98:63:bd:a4:90:83:68:a6: bd:f1:70:ce:45:52:41:49:e4:cb:a3:e4:f1:cf:f3:cf:87:b7: c2:d8:8a:7c:b1:0d:4a:95:3b:e8:e9:85:38:df:7d:ae:27:45: 6b:90:9a:44:fa:9a:c5:c8:1b:ce:44:5a:a7:ec:97:9f:46:67: ce:03:9b:7f:ca:c6:f8:e7:a4:f9:b0:4d:00:c0:db:61:de:f3: 7a:55:36:e7:88:a2:9d:a2:f7:d4:96:4a:f6:14:fb:96:be:f5: 04:c8:cd:63:78:28:6d:b4:13:7b:c4:23:58:73:97:7f:4c:04: 96:8a:0e:73:13:a4:5e:8d:be:bd:bd:26:c7:4e:cf:16:43:b6: 77:17:be:59:43:85:8c:73:65:3f:b4:28:b0:15:40:9c:f2:35: a6:b2:f4:26:8d:e3:2d:74:a9:64:4f:b9:d2:3f:48:84:db:1c: f5:39:df:dd:09:30:8f:95:6f:3a:77:d4:38:2e:32:f8:a5:43: 38:27:45:4e:53:27:83:1d:60:db:8c:5c:5b:34:1c:3b:62:58: ab:c6:38:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjUxMTA0MTYwNzE3WhcNMjUxMTExMTYwNzE3WjAYMRYwFAYD VQQDEw02OTBhMjRiNS0yZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5Tz9Fw26/5Oy0p2OPLjT3EVJIu959gVe6/8pfsk1I5rzziiXzE915MR9bmE 0krWgL9fdCP3+TbvtGaRah4EstZgBDKKwIjxedxBdqzSb+hdZaiTsGQ6nRSE8Iel Hzy0gh05iAzd6IOBUsEq/b4wyH4OmV7Kp4O9PuWK/RISQxJw2X96b7HfmIfkETlT uYIZBKefQaPtWsnHuxsUMcjGlMBe6pj1wOPTgcf4sIba6oRa4zhhY+XJJ2AenzFh Xv5X58R5oWLIpLW3nLw0+i6WUWAijn5mRpBkaOFNslMyUMZR3LYIr6XJbsExwx6K GKAtMkwsNWajC2A+05V1ButzRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZseHGo VQuuq81sAFmTHUQPHPlkMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk9FJAivzKZz/IPowAjgyFpj2QQ9Wto+0zpR7Q6b83gPkOQ4jw3vSo zZNTHAh5mGO9pJCDaKa98XDORVJBSeTLo+Txz/PPh7fC2Ip8sQ1KlTvo6YU4332u J0VrkJpE+prFyBvORFqn7JefRmfOA5t/ysb456T5sE0AwNth3vN6VTbniKKdovfU lkr2FPuWvvUEyM1jeChttBN7xCNYc5d/TASWig5zE6Rejb69vSbHTs8WQ7Z3F75Z Q4WMc2U/tCiwFUCc8jWmsvQmjeMtdKlkT7nSP0iE2xz1Od/dCTCPlW86d9Q4LjL4 pUM4J0VOUyeDHWDbjFxbNBw7YlirxjhM -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:38 2025 by rpki-client