$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json) Hash identifier: x06X42p1lzuRNd7VKd1XO9yXM+BrQX/q1nRCz/X4+6A= Subject key identifier: F7:56:CA:D8:3F:0F:2C:DB:34:4F:8A:43:0B:E9:5B:3B:2F:77:98:35 Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft Manifest number: B9 Signing time: Wed 05 Nov 2025 06:17:22 +0000 Manifest this update: Wed 05 Nov 2025 06:17:22 +0000 Manifest next update: Wed 12 Nov 2025 06:17:21 +0000 Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: qSHo4VMcuLuPjd5REnW7FH3JoykINYy0LWfhmV8AS+s=) 2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Validity Not Before: Nov 5 06:17:22 2025 GMT Not After : Nov 12 06:17:21 2025 GMT Subject: CN=690aebf2-c6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:3d:47:69:ff:55:d5:3b:23:88:ee:fb:e1: e3:6b:07:b7:ed:f8:d6:c7:b4:79:70:6f:19:7d:30: ab:e0:8c:b3:ac:72:36:f0:5f:f4:7e:b6:cb:b8:97: fc:78:65:3c:4b:02:ba:d6:d9:1a:8f:aa:a2:f1:40: 57:a1:32:68:27:15:52:57:44:da:d4:ba:b8:21:a8: 41:48:76:25:62:32:80:e0:4e:2e:60:62:de:ab:a4: 32:83:02:52:65:f5:6a:13:8d:05:25:e8:b4:77:9b: 54:cd:f8:e1:28:af:a2:52:ed:80:e3:c2:a7:0a:d6: 79:58:bf:44:71:dd:d7:97:22:d8:40:10:6a:18:3c: b0:c7:df:ed:10:15:cb:75:50:f9:69:bb:86:8d:93: 4a:1e:b1:8d:17:a9:8e:d0:96:56:d0:82:08:90:40: cf:9e:66:29:47:27:5a:66:8d:2a:fb:33:11:2d:a9: cd:ee:34:44:d1:8c:54:6e:2b:99:67:be:6e:47:b8: 2c:81:07:2b:55:d6:87:f2:00:6b:d8:fe:4f:1e:6d: eb:3f:17:70:4d:99:9d:76:3d:55:c0:9c:9b:1b:82: d8:c4:3b:de:7a:1d:07:3f:49:24:81:f9:47:c9:26: df:8a:ed:20:13:27:82:2f:e2:7e:7d:3d:fd:72:d5: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:56:CA:D8:3F:0F:2C:DB:34:4F:8A:43:0B:E9:5B:3B:2F:77:98:35 X509v3 Authority Key Identifier: keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:54:1c:d4:24:10:73:d9:37:3c:99:21:2c:12:9a:76:90:c8: 40:74:e2:07:75:c3:b1:cb:d3:9c:c0:49:db:9b:6a:25:8a:bc: 32:92:63:30:c8:b2:cb:0e:e8:e9:50:68:e9:6d:95:d7:4d:c5: fa:2a:77:8d:27:33:9a:74:b5:56:92:eb:3f:bc:b2:ca:14:0c: 0a:f5:1c:df:6f:af:60:fc:95:ab:f9:81:31:cd:df:3a:ab:45: 24:f3:f6:e0:2b:ee:7f:f1:1c:92:2e:ab:b1:a8:ed:e3:67:13: dc:51:50:15:28:fa:30:d6:63:aa:34:c1:5c:38:64:af:f9:b0: f3:0d:cc:be:68:ee:68:33:a8:ef:bf:f2:f1:cb:db:4c:7c:2f: 26:da:8f:12:67:24:56:8d:75:70:ec:3c:31:aa:66:b9:36:a7: eb:16:28:69:2a:3b:17:d0:a2:8b:1a:51:10:03:62:8e:37:d8: d4:9c:2b:42:af:05:8c:c2:b2:d4:fb:36:2a:f6:04:91:af:e8: 22:db:81:21:d3:be:5d:08:da:58:6a:52:60:82:c4:fc:cc:13: f2:44:70:ba:c0:56:2c:71:c5:48:69:89:78:69:ad:ff:b8:8d: 02:9a:23:8e:79:63:cd:79:82:3c:09:54:87:10:73:fc:bd:6a: 69:7c:a2:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4RDcxMTAvBgNVBAUTKDI2MjhFNkE4OTRDREZDOTM3M0YzREI5Q0ZDRkJDNTE0 M0ZGQTJBM0UwHhcNMjUxMTA1MDYxNzIyWhcNMjUxMTEyMDYxNzIxWjAYMRYwFAYD VQQDEw02OTBhZWJmMi1jNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWk9R2n/VdU7I4ju++Hjawe37fjWx7R5cG8ZfTCr4IyzrHI28F/0frbLuJf8 eGU8SwK61tkaj6qi8UBXoTJoJxVSV0Ta1Lq4IahBSHYlYjKA4E4uYGLeq6QygwJS ZfVqE40FJei0d5tUzfjhKK+iUu2A48KnCtZ5WL9Ecd3XlyLYQBBqGDywx9/tEBXL dVD5abuGjZNKHrGNF6mO0JZW0IIIkEDPnmYpRydaZo0q+zMRLanN7jRE0YxUbiuZ Z75uR7gsgQcrVdaH8gBr2P5PHm3rPxdwTZmddj1VwJybG4LYxDveeh0HP0kkgflH ySbfiu0gEyeCL+J+fT39ctUkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdWytg/ DyzbNE+KQwvpWzsvd5g1MB8GA1UdIwQYMBaAFCYo5qiUzfyTc/PbnPz7xRQ/+io+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThENy84NjIxQUU2MkE4 NzExMUVGQUVBMUM4MzFDNEY5QUUwMi9KaWptcUpUTl9KTno4OXVjX1B2RkZEXzZL ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppam1xSlROX0pOejg5dWNfUHZGRkRfNktqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThENy84NjIxQUU2MkE4NzExMUVGQUVBMUM4MzFDNEY5QUUwMi9KaWptcUpUTl9K Tno4OXVjX1B2RkZEXzZLajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9VBzUJBBz2Tc8mSEsEpp2kMhAdOIHdcOxy9OcwEnbm2olirwykmMw yLLLDujpUGjpbZXXTcX6KneNJzOadLVWkus/vLLKFAwK9Rzfb69g/JWr+YExzd86 q0Uk8/bgK+5/8RySLquxqO3jZxPcUVAVKPow1mOqNMFcOGSv+bDzDcy+aO5oM6jv v/Lxy9tMfC8m2o8SZyRWjXVw7Dwxqma5NqfrFihpKjsX0KKLGlEQA2KON9jUnCtC rwWMwrLU+zYq9gSRr+gi24Eh075dCNpYalJggsT8zBPyRHC6wFYsccVIaYl4aa3/ uI0CmiOOeWPNeYI8CVSHEHP8vWppfKJ4 -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:36 2025 by rpki-client