$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: 08tZ1mwetMAcs8bUPrnxl2bFMpxiCjM2nu2w69/01ps= Subject key identifier: BF:75:CB:BC:DF:2B:B1:1A:54:6C:87:E3:36:B0:CE:10:D6:27:F3:E6 Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 0164 Signing time: Sun 19 Oct 2025 06:40:24 +0000 Manifest this update: Sun 19 Oct 2025 06:40:24 +0000 Manifest next update: Sun 26 Oct 2025 06:40:24 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: 3uSatmrA/hI0HtNH+tH/O/3QJwGH8TjZ7wMjI4Y7xcQ=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Oct 19 06:40:24 2025 GMT Not After : Oct 26 06:40:24 2025 GMT Subject: CN=68f487d8-d8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:8b:c0:f3:d6:b0:af:4a:64:4f:1d:35:0d: 96:f7:57:16:31:16:88:dd:82:ad:24:bd:83:ac:51: 1f:ac:bc:dc:0d:19:97:47:1d:e9:0f:7a:f5:14:17: 3c:bd:5d:d9:3f:d2:20:ff:ac:57:a3:b8:da:93:0d: 0e:56:43:7f:77:17:42:b0:8d:de:33:23:97:3f:92: 55:85:e4:e8:82:c9:14:24:2a:ab:79:13:10:d0:5b: d0:f8:d8:d4:0c:0b:49:27:fc:a4:43:a7:f5:23:cc: c5:04:0c:10:e9:95:4b:9f:34:b0:78:87:9e:16:8b: c4:b2:1b:fe:9a:47:4b:f1:d3:17:80:4b:13:93:37: 58:6e:32:db:00:72:12:95:b1:16:32:93:55:a0:21: ad:12:0a:0a:c5:e9:dd:77:80:84:73:f3:1e:ef:3a: 6b:55:dc:9a:17:de:14:4b:2c:8d:0d:dc:47:88:c1: e0:77:01:f2:6b:91:d3:47:9a:93:4c:28:18:e6:0a: 47:de:58:84:34:29:bf:dd:50:81:90:33:51:88:01: fd:1d:d9:a2:f5:78:43:6c:9e:67:bb:7b:89:1a:13: 82:8a:4b:ab:56:12:70:ee:54:62:8a:68:e0:15:26: 6a:b0:84:81:c9:0c:aa:a2:8a:1a:cd:51:f9:7f:ab: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:CB:BC:DF:2B:B1:1A:54:6C:87:E3:36:B0:CE:10:D6:27:F3:E6 X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:aa:c5:68:f1:2a:21:00:59:38:5d:c1:2b:cc:79:e7:9d:e4: f5:1b:17:f1:6c:ea:3f:76:03:88:dc:42:8b:77:e1:61:f6:35: fc:ee:bf:e7:ab:49:89:2a:fc:9a:a5:f8:c1:c5:87:88:a5:17: 9e:88:f5:17:7e:33:52:56:d8:7b:01:ff:81:02:67:80:32:00: a6:27:2e:cb:22:03:84:f2:42:2e:1a:f4:90:d4:5d:05:b4:24: 86:e4:9f:88:23:5a:a4:d1:82:fd:b3:87:cc:08:0d:46:3c:1f: 47:b2:8c:44:ef:43:e2:be:fe:54:89:81:6f:25:1c:99:e3:0d: d8:82:ac:15:50:5e:02:ae:85:4e:79:e8:b1:59:d0:b1:92:3e: 50:0d:09:0c:09:91:75:fc:23:93:c2:2a:51:c3:a1:85:c0:fd: c1:d4:e8:0a:10:24:94:af:15:e0:f5:30:c5:29:1f:e4:c0:a7: 7f:4f:48:7e:2d:99:3c:6e:f5:69:04:b5:75:3e:cc:7d:d3:73: 16:5d:92:8d:75:b0:e9:39:ba:83:b2:ac:ed:7f:37:aa:ea:7a: 91:fc:cb:6e:45:63:e1:bf:42:bf:4c:fb:51:10:80:90:aa:11: 34:bb:ca:32:f0:19:a1:b3:b8:23:95:c6:fc:ae:8a:6b:b7:ee: f0:ab:51:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUxMDE5MDY0MDI0WhcNMjUxMDI2MDY0MDI0WjAYMRYwFAYD VQQDEw02OGY0ODdkOC1kOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6GLwPPWsK9KZE8dNQ2W91cWMRaI3YKtJL2DrFEfrLzcDRmXRx3pD3r1FBc8 vV3ZP9Ig/6xXo7jakw0OVkN/dxdCsI3eMyOXP5JVheTogskUJCqreRMQ0FvQ+NjU DAtJJ/ykQ6f1I8zFBAwQ6ZVLnzSweIeeFovEshv+mkdL8dMXgEsTkzdYbjLbAHIS lbEWMpNVoCGtEgoKxendd4CEc/Me7zprVdyaF94USyyNDdxHiMHgdwHya5HTR5qT TCgY5gpH3liENCm/3VCBkDNRiAH9Hdmi9XhDbJ5nu3uJGhOCikurVhJw7lRiimjg FSZqsISByQyqoooazVH5f6s6kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL91y7zf K7EaVGyH4zawzhDWJ/PmMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeqsVo8SohAFk4XcErzHnnneT1GxfxbOo/dgOI3EKLd+Fh9jX87r/n q0mJKvyapfjBxYeIpReeiPUXfjNSVth7Af+BAmeAMgCmJy7LIgOE8kIuGvSQ1F0F tCSG5J+II1qk0YL9s4fMCA1GPB9HsoxE70Pivv5UiYFvJRyZ4w3YgqwVUF4CroVO eeixWdCxkj5QDQkMCZF1/COTwipRw6GFwP3B1OgKECSUrxXg9TDFKR/kwKd/T0h+ LZk8bvVpBLV1Psx903MWXZKNdbDpObqDsqztfzeq6nqR/MtuRWPhv0K/TPtREICQ qhE0u8oy8Bmhs7gjlcb8roprt+7wq1ER -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:26 2025 by rpki-client