$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: ShPFq/5fOupy1uZbw+XXBY4kDKr443jBA4RKq+zgt0U= Subject key identifier: E1:BE:5B:D8:AF:5C:31:4A:AB:3E:3E:26:15:66:C3:50:D6:CF:F4:0E Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 01C6 Signing time: Sun 19 Oct 2025 05:28:21 +0000 Manifest this update: Sun 19 Oct 2025 05:28:20 +0000 Manifest next update: Sun 26 Oct 2025 05:28:20 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: /VPQuGe+nb7GqHBpD216xQSRbIS1wkayZ9LD+Fs5U64=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Oct 19 05:28:20 2025 GMT Not After : Oct 26 05:28:20 2025 GMT Subject: CN=68f476f5-c981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:3d:09:96:b9:a2:0e:37:5b:08:6f:6d:8f: 6e:23:d0:08:03:b6:df:bb:54:67:01:33:ef:31:46: 8a:90:54:2d:b4:81:53:66:8e:f7:0b:c4:0c:f6:f8: e9:3f:1e:14:c9:9c:31:cc:2e:f3:a7:bc:55:06:e6: f6:17:00:73:f7:f8:3a:56:4a:f5:be:60:b5:14:33: 32:2b:90:cc:84:12:e3:09:57:b3:f0:3d:b4:a4:0a: b7:8a:cf:2f:1d:ce:49:8d:fe:67:a3:65:fa:f3:98: c5:a0:e8:78:65:2b:4e:c1:ee:d1:88:2f:6f:37:55: 21:98:18:62:7b:cb:da:8e:d7:e4:cb:ca:80:b0:56: 41:a0:1c:3e:5e:46:b7:57:52:6a:87:7b:0a:ce:7c: 12:e4:fb:54:5d:8e:a2:de:18:82:9c:0b:e4:a4:fa: bb:ec:69:33:a7:d3:f1:c1:66:4e:91:5e:67:1c:5e: 5b:3d:27:c0:42:df:a5:21:ae:1f:07:0b:b5:48:93: 37:c5:c6:90:30:0c:1e:ce:45:33:cd:b4:8b:36:75: f7:51:9a:70:28:13:47:ca:cb:4b:77:de:d2:6c:5c: be:25:ac:93:e8:55:27:57:a6:0b:65:ef:7d:e8:cf: e6:62:ce:05:cc:7f:af:9a:50:5b:58:6a:8f:40:04: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BE:5B:D8:AF:5C:31:4A:AB:3E:3E:26:15:66:C3:50:D6:CF:F4:0E X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c6:6a:64:a2:43:7a:29:a4:53:47:3a:3c:12:17:13:5a:37: 49:7d:35:71:95:7b:a0:4b:b6:55:fb:36:81:64:d5:2a:33:7e: bc:f4:f8:5d:26:46:f1:4d:e5:3f:6f:1b:73:ee:98:ce:d0:fe: 6b:c7:df:79:a6:b7:f9:05:0d:51:7d:f5:31:aa:0a:ef:5b:3d: ef:88:f1:1a:c8:23:d4:c3:40:11:a7:7a:b4:89:16:65:51:5c: 54:06:0b:ac:5e:6c:9d:3b:e0:b3:a4:4d:5b:f7:e7:05:2f:bc: 0b:5c:f4:a3:22:c6:46:1d:cd:7d:f0:bc:65:86:72:56:8c:19: 8c:a7:ce:3e:fb:b8:68:92:0d:a0:56:1a:09:ff:ff:2b:fe:44: 0f:73:ea:58:12:35:1c:8f:ff:ed:e7:35:9e:63:72:29:cc:32: fa:bb:02:01:fc:18:52:af:0b:49:06:b0:50:41:22:fb:4c:19: 29:9b:42:0e:f1:6a:e9:52:65:23:85:ee:2d:5b:a5:20:81:1e: bd:8a:19:4b:07:c0:ff:52:74:a7:7b:2c:94:5f:76:70:09:99: 63:55:03:a2:25:b2:a6:cb:4a:db:00:79:a4:a1:57:10:ee:41: 2e:f6:36:72:f2:14:95:78:3b:1c:d3:6d:81:67:a1:84:b2:ac: f0:62:3a:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUxMDE5MDUyODIwWhcNMjUxMDI2MDUyODIwWjAYMRYwFAYD VQQDEw02OGY0NzZmNS1jOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYc9CZa5og43WwhvbY9uI9AIA7bfu1RnATPvMUaKkFQttIFTZo73C8QM9vjp Px4UyZwxzC7zp7xVBub2FwBz9/g6Vkr1vmC1FDMyK5DMhBLjCVez8D20pAq3is8v Hc5Jjf5no2X685jFoOh4ZStOwe7RiC9vN1UhmBhie8vajtfky8qAsFZBoBw+Xka3 V1Jqh3sKznwS5PtUXY6i3hiCnAvkpPq77Gkzp9PxwWZOkV5nHF5bPSfAQt+lIa4f Bwu1SJM3xcaQMAwezkUzzbSLNnX3UZpwKBNHystLd97SbFy+JayT6FUnV6YLZe99 6M/mYs4FzH+vmlBbWGqPQATOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOG+W9iv XDFKqz4+JhVmw1DWz/QOMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtxmpkokN6KaRTRzo8EhcTWjdJfTVxlXugS7ZV+zaBZNUqM3689Phd JkbxTeU/bxtz7pjO0P5rx995prf5BQ1RffUxqgrvWz3viPEayCPUw0ARp3q0iRZl UVxUBgusXmydO+CzpE1b9+cFL7wLXPSjIsZGHc198LxlhnJWjBmMp84++7hokg2g VhoJ//8r/kQPc+pYEjUcj//t5zWeY3IpzDL6uwIB/BhSrwtJBrBQQSL7TBkpm0IO 8WrpUmUjhe4tW6UggR69ihlLB8D/UnSneyyUX3ZwCZljVQOiJbKmy0rbAHmkoVcQ 7kEu9jZy8hSVeDsc022BZ6GEsqzwYjqn -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:00 2025 by rpki-client