$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: DkLX83ogZ1929p+E2td1KmicQvtZKT0RjPZI8bx07XY= Subject key identifier: 92:3A:56:4A:E7:4D:EC:22:E4:B8:9F:41:E5:79:5E:44:51:DF:C8:1C Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 0911 Signing time: Sat 18 Oct 2025 21:23:52 +0000 Manifest this update: Sat 18 Oct 2025 21:23:51 +0000 Manifest next update: Sat 25 Oct 2025 21:23:51 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: ZB0o1dD/7Tb7eH9p3z0IiFOM/y/qYY8AYHNtwM7CDiI=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: m3vZJbIZBtxTaQynxqIVLeVn+IvoTb+bYR9Z6G9kdLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Validity Not Before: Oct 18 21:23:51 2025 GMT Not After : Oct 25 21:23:51 2025 GMT Subject: CN=68f40568-7947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:99:45:92:ae:3d:2f:5f:36:29:cc:ab:11:77: 30:c2:9d:aa:06:c2:75:0b:83:b7:e0:2d:0e:8c:4e: 8a:f6:51:5f:b0:e1:30:28:78:8a:94:88:e7:55:0e: c7:ba:9a:e6:42:ca:18:26:40:d0:ba:24:d9:49:c8: f2:01:aa:e0:2c:e8:e5:24:53:a0:b5:1f:5a:18:90: 34:c0:6e:d7:5b:6e:8b:4d:3e:59:ae:75:17:0d:80: 3f:f7:06:23:f0:b3:db:b9:da:81:4a:2b:9f:37:fb: fb:7f:7a:dd:ad:40:27:8e:89:d0:90:35:0f:f6:a0: 2a:4f:81:83:11:50:21:3e:3f:32:c0:59:ce:d6:be: ab:6a:cb:5e:a9:bc:a8:ba:62:02:73:14:6a:5d:84: b2:de:40:0d:c1:a5:63:29:01:d3:19:90:46:85:1c: f4:8c:c9:41:2f:1c:b9:1b:19:de:e2:0c:d8:4d:a6: b0:95:40:16:b0:c1:6c:92:88:36:59:b9:46:bd:90: a0:9b:26:1d:3d:a4:77:9a:91:19:c7:73:b0:f2:b7: 62:02:8e:a0:fc:66:12:1a:47:89:2c:42:c7:cc:65: bf:5f:59:12:4e:12:e2:bb:36:ea:67:28:41:65:91: 86:09:f1:43:6d:a9:73:3f:2c:b7:4e:dc:34:ab:c0: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:56:4A:E7:4D:EC:22:E4:B8:9F:41:E5:79:5E:44:51:DF:C8:1C X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a7:e1:88:6a:3b:76:6d:a5:56:f1:d8:b2:bc:6b:ec:b1:bf: 8f:b6:3a:9d:ee:d6:d4:69:1d:4d:b6:1e:6e:05:2c:2e:99:50: 32:4b:5a:f0:8b:d5:77:d8:0e:24:86:c1:d9:22:57:92:de:f6: 69:ae:80:41:26:19:eb:52:aa:da:bb:56:9e:05:30:eb:93:f6: e0:76:dd:ea:6e:92:e0:81:bb:85:62:cd:66:0b:11:03:cd:9e: 57:7c:db:90:8f:e7:f8:4c:d8:49:95:ad:a0:21:d2:11:50:24: 70:8a:b5:a2:e6:99:de:88:34:81:82:e0:78:c5:4f:19:bd:81: dc:13:99:10:33:16:91:dc:a2:47:49:8d:84:5b:14:a0:9c:6f: c6:f3:a2:49:46:7e:53:4d:f1:a6:9d:0b:de:2f:7e:99:03:73: f9:ec:50:44:db:06:8c:18:00:3a:b8:83:4f:c1:ab:43:5d:a2: 0c:55:3b:5d:57:d2:5c:f3:20:25:ea:f8:ca:ba:6d:54:9b:8e: 96:7b:65:77:16:50:a5:1e:c8:ef:d1:4b:d2:49:e3:66:09:2c: e4:6c:1b:22:d2:11:ff:ba:11:58:70:5e:1c:14:cd:79:7b:82: 3a:77:77:ba:d4:fc:95:59:68:ce:e5:ae:32:f8:04:57:cc:1e: 34:fa:33:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjUxMDE4MjEyMzUxWhcNMjUxMDI1MjEyMzUxWjAYMRYwFAYD VQQDEw02OGY0MDU2OC03OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35lFkq49L182KcyrEXcwwp2qBsJ1C4O34C0OjE6K9lFfsOEwKHiKlIjnVQ7H uprmQsoYJkDQuiTZScjyAargLOjlJFOgtR9aGJA0wG7XW26LTT5ZrnUXDYA/9wYj 8LPbudqBSiufN/v7f3rdrUAnjonQkDUP9qAqT4GDEVAhPj8ywFnO1r6rasteqbyo umICcxRqXYSy3kANwaVjKQHTGZBGhRz0jMlBLxy5Gxne4gzYTaawlUAWsMFskog2 WblGvZCgmyYdPaR3mpEZx3Ow8rdiAo6g/GYSGkeJLELHzGW/X1kSThLiuzbqZyhB ZZGGCfFDbalzPyy3Ttw0q8Ai1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI6Vkrn Tewi5LifQeV5XkRR38gcMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxp+GIajt2baVW8diyvGvssb+Ptjqd7tbUaR1Nth5uBSwumVAyS1rw i9V32A4khsHZIleS3vZproBBJhnrUqrau1aeBTDrk/bgdt3qbpLggbuFYs1mCxED zZ5XfNuQj+f4TNhJla2gIdIRUCRwirWi5pneiDSBguB4xU8ZvYHcE5kQMxaR3KJH SY2EWxSgnG/G86JJRn5TTfGmnQveL36ZA3P57FBE2waMGAA6uINPwatDXaIMVTtd V9Jc8yAl6vjKum1Um46We2V3FlClHsjv0UvSSeNmCSzkbBsi0hH/uhFYcF4cFM15 e4I6d3e61PyVWWjO5a4y+ARXzB40+jND -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:22 2025 by rpki-client