$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: eYD1CfYFbKTrFmF65+JCTTS916FEf48HdpAEnv99h8s= Subject key identifier: 11:EB:48:C0:7A:D6:A3:77:1D:B0:56:4A:86:B7:7B:C8:4D:45:D8:C9 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 049C Signing time: Sun 19 Oct 2025 01:48:52 +0000 Manifest this update: Sun 19 Oct 2025 01:48:51 +0000 Manifest next update: Sun 26 Oct 2025 01:48:51 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: 1n3YlPU8xHiaNHceqclE2Dzg+/o76dTHfzPtJfV/A7g=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Oct 19 01:48:51 2025 GMT Not After : Oct 26 01:48:51 2025 GMT Subject: CN=68f44383-c2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:ab:1e:95:e5:21:39:de:b7:21:76:84:84: 86:a6:b2:ad:0f:02:2e:b9:34:97:a8:1f:f1:b8:45: 09:54:83:84:f8:72:93:0b:31:ed:05:6e:16:00:aa: f9:11:a5:73:e5:34:d6:57:ae:61:0f:07:f9:1e:1a: 31:a8:7f:28:10:04:75:db:78:4e:79:a0:01:86:88: 18:8e:d6:ee:88:c2:2a:8c:1c:ea:ca:ff:77:0d:b6: 2c:6a:6a:63:b4:b4:3f:e2:ce:a1:b5:0d:22:1c:82: 7a:ec:eb:57:07:0d:24:2f:6a:50:5f:3c:69:1d:87: da:8d:01:93:98:c0:f9:cf:70:02:12:16:18:52:cb: 2b:41:33:fc:27:57:98:9e:30:f1:15:8b:ea:d9:64: c1:3c:6c:f4:5c:db:db:62:ee:2e:ee:d0:61:7d:28: 1a:78:7f:35:2d:79:6f:f8:0f:b4:d8:2b:b7:57:c9: a6:86:04:80:e9:d2:37:0f:26:55:e1:24:ff:2c:a8: ab:4a:ac:eb:96:a9:1b:17:40:c1:bb:ed:7e:33:f2: b4:e6:01:95:93:88:61:a3:01:79:83:bd:37:fa:73: 20:e4:02:9b:f7:0f:cc:47:10:9b:8c:51:da:2a:7a: 74:e4:b6:06:a8:f1:c8:e2:3b:6c:bc:a8:d9:14:91: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EB:48:C0:7A:D6:A3:77:1D:B0:56:4A:86:B7:7B:C8:4D:45:D8:C9 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6c:e8:74:17:3b:b7:29:83:5d:35:30:74:c0:5a:79:66:95: 43:54:7e:e9:85:77:c0:a6:07:27:4c:5d:dd:31:9a:98:c6:33: d9:b3:fa:13:5f:1c:6a:85:e4:33:47:8b:5c:f6:a9:86:03:49: 4c:90:ca:e7:23:5a:6e:ba:43:f8:68:36:74:f0:8f:48:b9:6a: 8b:37:b2:43:64:60:97:2a:47:0a:a0:48:c0:d4:08:40:eb:aa: bd:5a:84:8f:74:63:89:67:e0:08:51:8f:2b:f7:35:6b:14:de: e8:93:b8:a0:07:d9:9f:5b:05:83:1a:ef:59:5d:8f:c5:b0:b4: 7c:a0:d1:33:01:36:f5:5b:f8:34:31:fe:25:24:24:a8:bf:64: c5:18:93:91:6b:56:00:07:38:f2:a9:e3:30:4f:bf:b1:02:f6: 59:9e:d6:c0:3b:51:98:db:59:a0:b4:e9:46:74:d1:02:3d:9a: 93:f6:ae:44:43:7f:d8:5d:03:20:55:47:87:5e:7f:4d:26:77: 8c:41:c5:8f:27:65:1b:5e:b6:c8:1b:93:8a:13:97:1d:57:89: 0a:96:0e:23:b9:1e:7c:06:14:dc:c7:d1:af:17:8e:dd:8c:14: a0:b4:12:db:5d:bd:6a:2c:ec:60:0a:f1:33:64:e2:a0:d1:73: 24:18:b5:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUxMDE5MDE0ODUxWhcNMjUxMDI2MDE0ODUxWjAYMRYwFAYD VQQDEw02OGY0NDM4My1jMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7OrHpXlITnetyF2hISGprKtDwIuuTSXqB/xuEUJVIOE+HKTCzHtBW4WAKr5 EaVz5TTWV65hDwf5HhoxqH8oEAR123hOeaABhogYjtbuiMIqjBzqyv93DbYsampj tLQ/4s6htQ0iHIJ67OtXBw0kL2pQXzxpHYfajQGTmMD5z3ACEhYYUssrQTP8J1eY njDxFYvq2WTBPGz0XNvbYu4u7tBhfSgaeH81LXlv+A+02Cu3V8mmhgSA6dI3DyZV 4ST/LKirSqzrlqkbF0DBu+1+M/K05gGVk4hhowF5g703+nMg5AKb9w/MRxCbjFHa Knp05LYGqPHI4jtsvKjZFJH8owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHrSMB6 1qN3HbBWSoa3e8hNRdjJMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBabOh0Fzu3KYNdNTB0wFp5ZpVDVH7phXfApgcnTF3dMZqYxjPZs/oT XxxqheQzR4tc9qmGA0lMkMrnI1puukP4aDZ08I9IuWqLN7JDZGCXKkcKoEjA1AhA 66q9WoSPdGOJZ+AIUY8r9zVrFN7ok7igB9mfWwWDGu9ZXY/FsLR8oNEzATb1W/g0 Mf4lJCSov2TFGJORa1YABzjyqeMwT7+xAvZZntbAO1GY21mgtOlGdNECPZqT9q5E Q3/YXQMgVUeHXn9NJneMQcWPJ2UbXrbIG5OKE5cdV4kKlg4juR58BhTcx9GvF47d jBSgtBLbXb1qLOxgCvEzZOKg0XMkGLUp -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:33 2025 by rpki-client