$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json) Hash identifier: /7JgJOZqjf4x6xQIxUNL4EAyZsV1hxftaS5ZJ94vqbU= Subject key identifier: D5:47:23:7A:CC:86:2A:1C:1C:14:60:AC:3A:CB:3E:7E:C2:F7:86:6B Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 1062 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft Manifest number: 1026 Signing time: Sat 18 Oct 2025 18:04:48 +0000 Manifest this update: Sat 18 Oct 2025 18:04:47 +0000 Manifest next update: Sat 25 Oct 2025 18:04:47 +0000 Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: ucbe4SSWx7Kpy0kUFcNtdz3+rHxofP3UUHZbBj2cJew=) 2: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: uKLFwAF6OPU48tvtT2EBR+YQZKAwbAGiUD5OlNlMeM8=) 3: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=) 4: 3AA7BC60818D11F0BBDB1314C4F9AE02.roa (hash: Y+3y48bqaUxF+K9WiQLSi+R8dX2P6kaRh5bC6H+qDqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4194 (0x1062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Oct 18 18:04:47 2025 GMT Not After : Oct 25 18:04:47 2025 GMT Subject: CN=68f3d6bf-2863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a5:40:fe:1c:d9:15:b1:df:7b:bd:ad:ba:3a: b7:27:0a:5c:4d:2d:e0:6a:bd:91:b3:af:58:19:a3: 26:fc:8e:09:82:86:1a:0a:b5:c7:df:b4:6c:d0:1c: a4:0e:c7:37:d1:c2:c2:9b:a2:09:94:46:30:69:2a: d7:dd:34:53:6f:49:8d:98:7e:58:9b:ad:d2:f3:81: 89:8f:55:83:76:98:70:e7:1b:41:b4:05:39:5d:03: 80:8b:42:c1:28:a8:99:0b:93:de:93:04:62:a0:3a: cb:6e:4d:b7:e8:b0:db:6f:84:79:fa:61:f3:86:49: 12:45:02:fc:8c:6d:e1:8e:34:34:54:19:6b:77:af: 32:eb:95:b1:ad:5b:1c:a3:33:d6:cc:39:0f:6b:67: 1c:6f:19:e5:1c:da:f2:f4:26:f2:9c:24:2a:db:82: 79:ea:8b:99:c6:cc:46:f1:bf:6b:c5:7f:45:21:93: c8:f7:30:bc:73:cf:9c:ee:1f:c0:ad:fd:97:5a:9a: 43:97:a4:85:fb:f6:2b:17:bc:6e:34:bd:11:46:57: 9e:73:fe:72:6e:eb:91:ae:64:ff:c5:45:2c:ca:1a: 6a:b4:42:d4:64:02:bc:df:f3:7d:95:ed:4e:41:67: 72:bc:c5:1c:98:4e:7f:f6:ef:32:37:a2:5e:1a:56: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:47:23:7A:CC:86:2A:1C:1C:14:60:AC:3A:CB:3E:7E:C2:F7:86:6B X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:06:2f:42:2a:e4:91:53:05:39:27:63:b6:15:f5:98:f5:14: 4d:27:66:12:a1:81:12:5e:e8:a0:a5:1a:d0:77:ed:f3:a7:ef: 8c:59:72:e6:80:ab:e3:d0:c1:9c:56:10:28:26:7c:0b:6a:43: 86:6c:99:93:b5:1c:bf:72:16:97:18:68:44:db:5f:f0:2d:bc: 57:50:23:94:48:e4:f5:4e:fa:75:14:12:43:f3:eb:81:d1:71: 7b:33:5a:8a:0e:8b:d2:1e:70:de:6a:9d:6b:72:ba:af:5b:75: 5d:22:bd:eb:d4:60:92:ea:73:32:ea:4c:30:22:93:4b:2f:01: 99:cf:50:6d:88:f2:d7:4b:66:ad:97:3c:32:b2:43:33:ad:04: 5c:69:78:96:3a:ef:2c:af:f6:e7:5b:9c:29:48:88:f9:af:f3: 01:06:de:30:e6:f9:7a:99:5c:98:0c:1d:61:a5:11:9c:a9:a1: d8:a9:14:cd:0e:8b:53:66:08:50:4c:d4:9e:d1:cd:bb:6c:45: ab:73:ad:f5:e6:41:69:79:c6:7b:62:58:9a:74:99:da:28:84: 38:77:10:b7:e9:0c:d1:48:88:66:57:b7:63:06:4c:cd:6a:fa: f9:af:ef:51:fa:b0:5d:c5:df:9d:2f:80:0c:e5:93:f2:ab:c2: b1:7e:41:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUxMDE4MTgwNDQ3WhcNMjUxMDI1MTgwNDQ3WjAYMRYwFAYD VQQDEw02OGYzZDZiZi0yODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aVA/hzZFbHfe72tujq3JwpcTS3gar2Rs69YGaMm/I4JgoYaCrXH37Rs0Byk Dsc30cLCm6IJlEYwaSrX3TRTb0mNmH5Ym63S84GJj1WDdphw5xtBtAU5XQOAi0LB KKiZC5PekwRioDrLbk236LDbb4R5+mHzhkkSRQL8jG3hjjQ0VBlrd68y65WxrVsc ozPWzDkPa2ccbxnlHNry9CbynCQq24J56ouZxsxG8b9rxX9FIZPI9zC8c8+c7h/A rf2XWppDl6SF+/YrF7xuNL0RRleec/5ybuuRrmT/xUUsyhpqtELUZAK83/N9le1O QWdyvMUcmE5/9u8yN6JeGlau+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVHI3rM hiocHBRgrDrLPn7C94ZrMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx RkppbF9LVThoZHFtRExtakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjBi9CKuSRUwU5J2O2FfWY9RRNJ2YSoYESXuigpRrQd+3zp++MWXLm gKvj0MGcVhAoJnwLakOGbJmTtRy/chaXGGhE21/wLbxXUCOUSOT1Tvp1FBJD8+uB 0XF7M1qKDovSHnDeap1rcrqvW3VdIr3r1GCS6nMy6kwwIpNLLwGZz1BtiPLXS2at lzwyskMzrQRcaXiWOu8sr/bnW5wpSIj5r/MBBt4w5vl6mVyYDB1hpRGcqaHYqRTN DotTZghQTNSe0c27bEWrc6315kFpecZ7YliadJnaKIQ4dxC36QzRSIhmV7djBkzN avr5r+9R+rBdxd+dL4AM5ZPyq8KxfkFk -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:53 2025 by rpki-client