$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json) Hash identifier: /H5RJtTdyRxF2hcaNUDddE246IWY8PlJJjBRp2XxhAI= Subject key identifier: 30:6F:5E:79:A3:C1:37:37:B9:72:8C:92:B4:E8:B7:CF:42:4C:45:35 Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 0A08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft Manifest number: 0A00 Signing time: Sat 18 Oct 2025 20:52:21 +0000 Manifest this update: Sat 18 Oct 2025 20:52:20 +0000 Manifest next update: Sat 25 Oct 2025 20:52:20 +0000 Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: zMW8pt05Q/1UVw4qFXR5J42dHnomU+Ou8ByskRpDW2k=) 2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: qAQSazWUf2FePmcHd1Qj+eRlLm7Ky5QuPvw10+7M0lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2568 (0xa08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: Oct 18 20:52:20 2025 GMT Not After : Oct 25 20:52:20 2025 GMT Subject: CN=68f3fe05-b617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:71:d8:89:63:62:16:9b:39:af:6b:2f:00: e4:fe:cc:22:1d:81:c8:c4:44:3e:54:ee:7c:cc:5e: 28:93:07:1f:03:07:f6:87:7c:2a:1d:3f:bc:a0:da: dc:a3:2d:14:74:17:52:8e:98:15:53:f5:bb:f7:d3: f5:5b:62:96:58:35:c8:ea:ed:7e:32:64:ee:89:ab: 6a:62:5e:36:02:6d:2c:80:c3:12:21:07:c8:46:c7: a9:a9:b0:55:17:c6:35:f0:9f:59:4c:a9:24:c4:ae: ed:cc:d1:f2:35:95:23:ac:e5:dd:cd:12:d7:b3:23: 6c:7d:2c:e4:e3:ee:fb:2d:f3:42:65:50:e9:e6:48: 68:03:71:6d:ba:27:3c:0a:76:dd:15:12:f7:0e:c8: 2c:94:34:88:11:e2:9f:97:0f:05:1b:3d:38:e0:43: fe:bc:e4:b3:04:f8:fe:e3:67:c7:a8:57:fa:4c:48: af:a0:0a:c6:19:b5:55:60:b9:20:73:96:fd:29:a6: 66:5c:8d:96:a3:c8:e2:d6:9b:e6:41:10:af:ab:04: 77:25:7b:dc:74:b6:1f:d5:36:c8:31:5f:da:41:e6: ae:16:f7:9d:ed:09:f7:7e:70:83:12:0b:51:3a:db: 7a:33:af:90:a0:2b:54:71:bd:a0:68:f4:cb:4c:9a: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6F:5E:79:A3:C1:37:37:B9:72:8C:92:B4:E8:B7:CF:42:4C:45:35 X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bd:95:22:e3:34:b0:75:ec:63:06:c4:4f:7d:d9:31:88:da: f7:a7:3e:6c:72:f3:68:f7:91:11:aa:47:83:fb:46:13:79:e2: 07:01:90:5b:07:b2:7a:de:2a:6c:96:10:8b:92:b7:a3:69:58: 96:93:08:18:aa:28:f4:c1:38:e0:8d:76:35:ec:be:9c:3b:91: 47:e7:f4:2a:02:13:5b:96:d0:13:0e:f4:50:aa:b2:c7:bd:89: c0:ee:9a:e1:e8:4c:9c:f9:95:fe:59:c3:08:2a:87:e6:06:10: 1c:d3:fd:a2:8e:82:9c:4f:58:f8:f4:20:3b:c1:a8:07:c1:d9: 40:85:2c:e0:b3:f2:21:73:e5:11:c3:9a:70:26:e3:6d:eb:0f: ab:98:92:aa:9f:a5:68:6a:c7:df:8f:09:d0:4c:7b:5c:13:44: 12:49:a4:21:d9:33:2d:0a:1f:f8:89:f6:5c:91:09:0c:0c:93: 43:93:6d:63:05:91:ff:92:06:8c:79:f1:40:66:96:2e:44:97: 04:29:18:dd:8f:28:bb:36:4b:fd:73:04:54:24:68:3c:91:8d: 61:52:fd:a9:de:3f:8e:cc:03:3d:29:90:d8:c4:6f:33:b6:c7: 76:12:8f:dc:ea:ad:39:ec:69:9f:4c:91:37:63:1d:6f:5e:97: 3c:e2:26:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjUxMDE4MjA1MjIwWhcNMjUxMDI1MjA1MjIwWjAYMRYwFAYD VQQDEw02OGYzZmUwNS1iNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMtx2IljYhabOa9rLwDk/swiHYHIxEQ+VO58zF4okwcfAwf2h3wqHT+8oNrc oy0UdBdSjpgVU/W799P1W2KWWDXI6u1+MmTuiatqYl42Am0sgMMSIQfIRsepqbBV F8Y18J9ZTKkkxK7tzNHyNZUjrOXdzRLXsyNsfSzk4+77LfNCZVDp5khoA3Ftuic8 CnbdFRL3DsgslDSIEeKflw8FGz044EP+vOSzBPj+42fHqFf6TEivoArGGbVVYLkg c5b9KaZmXI2Wo8ji1pvmQRCvqwR3JXvcdLYf1TbIMV/aQeauFved7Qn3fnCDEgtR Ott6M6+QoCtUcb2gaPTLTJqqSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBvXnmj wTc3uXKMkrTot89CTEU1MB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDcxNy8zOTg4OTAwMDgzRTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2 aklIZmxmVktMTEtqanhQSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuvZUi4zSwdexjBsRPfdkxiNr3pz5scvNo95ERqkeD+0YTeeIHAZBb B7J63ipslhCLkrejaViWkwgYqij0wTjgjXY17L6cO5FH5/QqAhNbltATDvRQqrLH vYnA7prh6Eyc+ZX+WcMIKofmBhAc0/2ijoKcT1j49CA7wagHwdlAhSzgs/Ihc+UR w5pwJuNt6w+rmJKqn6VoasffjwnQTHtcE0QSSaQh2TMtCh/4ifZckQkMDJNDk21j BZH/kgaMefFAZpYuRJcEKRjdjyi7Nkv9cwRUJGg8kY1hUv2p3j+OzAM9KZDYxG8z tsd2Eo/c6q057GmfTJE3Yx1vXpc84ia1 -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:22 2025 by rpki-client