$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: PptgM4OjMvdlJ6a85ZixB4X8ieZXXD2DmPacpXcuf50= Subject key identifier: D0:13:81:D4:60:7B:F2:73:8D:23:E5:2F:DA:89:91:24:D0:73:22:63 Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 34CB Signing time: Sat 18 Oct 2025 14:55:26 +0000 Manifest this update: Sat 18 Oct 2025 14:55:25 +0000 Manifest next update: Sat 25 Oct 2025 14:55:25 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: 1d6UFfbeMlLWulZjM2au5vpuVa2vNrpJMWXFycixJJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: Oct 18 14:55:25 2025 GMT Not After : Oct 25 14:55:25 2025 GMT Subject: CN=68f3aa5d-c0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:b7:89:02:47:7a:8d:3f:2d:22:dd:12:04: 82:88:21:85:2c:44:1e:5d:59:10:86:5f:93:83:9b: d3:90:8a:1f:d5:2b:ec:cc:96:97:74:7e:e4:f4:a9: 6b:22:8a:4f:72:70:41:1b:5f:43:96:e2:9f:ea:1b: d1:03:a3:50:a2:3d:ca:32:fa:37:53:81:00:5a:be: 6a:85:4a:4b:31:6d:5a:c5:c0:2c:6a:11:4c:89:9d: a7:62:76:6e:58:3d:89:e7:75:21:08:20:a0:c1:91: 8b:71:67:b5:87:1f:bf:6a:44:e8:55:8b:7c:8a:28: 78:56:20:b3:45:85:50:8f:ff:7f:cc:92:94:2f:dd: f7:c8:fc:4c:6b:00:53:3d:30:c7:de:93:5e:9d:73: fa:0d:dd:86:f4:ef:d6:3c:d6:76:18:a3:5b:d7:27: 67:8b:01:a6:b2:65:20:c5:b2:c6:3f:34:45:00:42: f1:f2:4d:56:50:cb:47:9f:fc:6a:93:09:d6:07:76: 32:ca:fc:77:2f:8c:d4:6e:c3:2f:a0:76:d1:2b:a8: 0a:41:6e:26:98:cd:2e:0f:47:f3:14:fb:63:dc:4e: 4a:39:5a:f8:1a:39:1a:08:5e:d8:98:71:1f:28:20: 28:c1:c9:ff:b3:e1:14:6e:c1:94:f0:22:24:48:b2: e4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:13:81:D4:60:7B:F2:73:8D:23:E5:2F:DA:89:91:24:D0:73:22:63 X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:12:0e:7e:38:9b:76:9d:1f:d5:c2:24:0c:77:9f:2e:ee:4f: 0b:38:30:c0:d4:c8:a0:88:6c:50:3f:c2:bd:c5:d9:ae:98:3a: 54:bd:81:dc:b7:5b:2a:52:d6:4c:71:2d:e0:a8:b0:78:32:c1: 00:3c:37:ad:dc:41:d7:25:18:b3:87:94:d1:e2:22:15:47:ed: 80:93:1e:8b:22:d6:51:9e:ea:92:39:39:06:6a:18:08:d2:e7: 1b:47:93:ce:b9:9b:df:7f:5e:e8:fd:fb:8c:2d:f2:ba:00:f7: 19:6e:e9:16:aa:09:f8:b3:8f:9c:1c:85:9f:fc:a8:0f:71:f4: f9:8a:2b:9f:95:83:b3:92:a4:09:f4:15:8c:af:ac:b5:0c:17: 21:40:99:35:f8:61:a4:89:7d:14:b8:56:e8:e0:2e:23:d1:4c: 0c:68:7f:eb:bc:28:f2:60:08:4d:d2:92:3b:a7:ad:cf:1a:f4: 57:9b:0f:1d:c5:6b:44:1e:3f:cc:e7:8e:1f:2c:db:4e:e0:c4: 1f:41:33:fd:08:8e:2f:77:50:92:df:86:fb:c2:5a:60:5b:ba: 0b:4f:3c:89:e9:7a:b3:a5:93:fd:e9:af:41:ee:c6:42:f1:71: c3:b1:29:57:9a:18:49:c0:68:a8:8c:9d:c0:48:c4:36:aa:cb: a7:36:ed:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjUxMDE4MTQ1NTI1WhcNMjUxMDI1MTQ1NTI1WjAYMRYwFAYD VQQDEw02OGYzYWE1ZC1jMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNy3iQJHeo0/LSLdEgSCiCGFLEQeXVkQhl+Tg5vTkIof1SvszJaXdH7k9Klr IopPcnBBG19DluKf6hvRA6NQoj3KMvo3U4EAWr5qhUpLMW1axcAsahFMiZ2nYnZu WD2J53UhCCCgwZGLcWe1hx+/akToVYt8iih4ViCzRYVQj/9/zJKUL933yPxMawBT PTDH3pNenXP6Dd2G9O/WPNZ2GKNb1ydniwGmsmUgxbLGPzRFAELx8k1WUMtHn/xq kwnWB3Yyyvx3L4zUbsMvoHbRK6gKQW4mmM0uD0fzFPtj3E5KOVr4GjkaCF7YmHEf KCAowcn/s+EUbsGU8CIkSLLkBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNATgdRg e/JzjSPlL9qJkSTQcyJjMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVEg5+OJt2nR/VwiQMd58u7k8LODDA1MigiGxQP8K9xdmumDpUvYHc t1sqUtZMcS3gqLB4MsEAPDet3EHXJRizh5TR4iIVR+2Akx6LItZRnuqSOTkGahgI 0ucbR5POuZvff17o/fuMLfK6APcZbukWqgn4s4+cHIWf/KgPcfT5iiuflYOzkqQJ 9BWMr6y1DBchQJk1+GGkiX0UuFbo4C4j0UwMaH/rvCjyYAhN0pI7p63PGvRXmw8d xWtEHj/M544fLNtO4MQfQTP9CI4vd1CS34b7wlpgW7oLTzyJ6XqzpZP96a9B7sZC 8XHDsSlXmhhJwGiojJ3ASMQ2qsunNu0b -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:35 2025 by rpki-client