$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: 529nd2h/5g/CTi5yphrL65Lnun/rxyfHhpR+J4klrio= Subject key identifier: 1E:D2:62:BA:FC:3F:AC:26:F6:E0:53:4D:E6:B7:53:05:3D:55:F0:C7 Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 069A Signing time: Sat 18 Oct 2025 23:51:25 +0000 Manifest this update: Sat 18 Oct 2025 23:51:25 +0000 Manifest next update: Sat 25 Oct 2025 23:51:25 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: 2ytWgrMMAsYuptE3B/pP/VMiDVblLLR0fVeUy3avIUo=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: fSfAPi/bUi9k15IOKds7b6yXEktxoZjFwfG44RAp5IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: Oct 18 23:51:25 2025 GMT Not After : Oct 25 23:51:25 2025 GMT Subject: CN=68f427fd-ee41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:34:e7:8f:39:84:aa:1a:1a:81:49:0c:f8: be:77:84:c7:11:25:99:0d:ee:9e:b5:f7:28:21:e1: f6:dc:b0:f0:09:fc:bf:25:0c:ed:fd:e0:85:c5:1f: a8:59:11:91:be:53:a7:a3:8d:86:4a:be:b0:05:9f: e3:cd:cd:6e:b6:41:a5:02:ae:d7:e2:b8:9b:ed:a9: a9:e4:0c:3a:5b:36:5d:77:d7:e6:91:c2:83:46:d8: 7c:80:56:af:24:4a:68:1b:14:fa:dd:2f:d6:ff:09: f6:b5:da:10:1f:a0:8c:96:35:e1:55:0b:1d:00:89: 33:20:50:a4:0b:02:3f:e8:97:02:d3:98:86:11:01: 83:c6:6b:a1:16:b2:60:16:10:5c:2a:5b:77:6e:91: a5:77:c7:22:7d:c1:49:7e:ce:4a:dc:da:5d:56:aa: 0d:27:dd:00:f2:a5:8a:81:db:ec:cf:27:d0:76:58: d3:a1:bd:e3:3f:80:ec:de:b9:c8:31:b1:a0:d6:00: 23:4a:83:5f:50:51:fd:69:8b:85:4b:e1:72:d8:3f: ab:ef:b8:48:97:e7:fa:66:04:21:a1:b3:0e:08:8a: cf:64:fc:07:be:fa:e4:bc:35:2f:9f:63:03:4d:4e: 98:1d:97:f2:c1:7d:f0:93:b8:50:0a:67:ea:90:64: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D2:62:BA:FC:3F:AC:26:F6:E0:53:4D:E6:B7:53:05:3D:55:F0:C7 X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e2:db:6d:7d:a0:5f:a4:3d:c9:be:16:99:f0:c5:c1:ce:5d: 85:34:a5:3e:f2:cd:83:f4:f4:b4:2b:9d:62:db:83:46:b2:77: cb:a7:29:92:03:40:c6:2e:f7:7c:8d:ac:22:2c:40:6a:fb:1d: 1d:d9:98:84:30:6c:9f:81:f6:21:fd:47:9a:5e:43:95:b1:9d: 9f:f0:71:d6:1f:2c:77:40:ca:0b:4b:d2:0a:2f:97:10:b1:41: 97:b8:e6:2d:26:70:df:6b:85:c7:f3:36:87:98:06:48:e6:85: b6:37:90:5a:f5:a7:d6:b2:17:69:6c:5a:cf:4d:f8:a3:0b:1c: ae:da:00:a6:1b:28:9a:83:64:2a:75:fe:91:a0:d9:7a:14:c4: db:56:df:b8:d2:de:cc:7a:b1:5a:55:0d:99:a6:ff:d8:c4:07: 27:86:f7:89:23:a6:20:e2:cd:0a:27:52:bd:bf:1a:90:05:fe: f3:32:aa:56:54:f7:76:68:72:26:e8:74:cc:84:8d:8a:bb:83: 83:42:ee:3a:b2:28:ac:22:54:3d:2d:06:5f:0b:de:26:36:73: 76:b1:a6:b5:7e:b9:8d:9a:2e:96:20:b3:d8:9d:dd:80:3e:00: 62:15:83:8b:71:f0:0b:f4:fc:c3:ca:7a:ee:26:8b:66:8b:b5: 98:8e:06:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjUxMDE4MjM1MTI1WhcNMjUxMDI1MjM1MTI1WjAYMRYwFAYD VQQDEw02OGY0MjdmZC1lZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzM05485hKoaGoFJDPi+d4THESWZDe6etfcoIeH23LDwCfy/JQzt/eCFxR+o WRGRvlOno42GSr6wBZ/jzc1utkGlAq7X4rib7amp5Aw6WzZdd9fmkcKDRth8gFav JEpoGxT63S/W/wn2tdoQH6CMljXhVQsdAIkzIFCkCwI/6JcC05iGEQGDxmuhFrJg FhBcKlt3bpGld8cifcFJfs5K3NpdVqoNJ90A8qWKgdvszyfQdljTob3jP4Ds3rnI MbGg1gAjSoNfUFH9aYuFS+Fy2D+r77hIl+f6ZgQhobMOCIrPZPwHvvrkvDUvn2MD TU6YHZfywX3wk7hQCmfqkGSaZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7SYrr8 P6wm9uBTTea3UwU9VfDHMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ4tttfaBfpD3JvhaZ8MXBzl2FNKU+8s2D9PS0K51i24NGsnfLpymS A0DGLvd8jawiLEBq+x0d2ZiEMGyfgfYh/UeaXkOVsZ2f8HHWHyx3QMoLS9IKL5cQ sUGXuOYtJnDfa4XH8zaHmAZI5oW2N5Ba9afWshdpbFrPTfijCxyu2gCmGyiag2Qq df6RoNl6FMTbVt+40t7MerFaVQ2Zpv/YxAcnhveJI6Yg4s0KJ1K9vxqQBf7zMqpW VPd2aHIm6HTMhI2Ku4ODQu46siisIlQ9LQZfC94mNnN2saa1frmNmi6WILPYnd2A PgBiFYOLcfAL9PzDynruJotmi7WYjgYa -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:44 2025 by rpki-client