$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: YzCTFLfCwPCOFF89HtiDerZLRESkQyRNgyr+/jdkB70= Subject key identifier: 27:2B:18:E2:08:67:32:D9:4A:90:E1:BC:8B:D9:5E:9A:CD:C3:44:9B Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0EE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0ED9 Signing time: Sat 18 Oct 2025 18:15:38 +0000 Manifest this update: Sat 18 Oct 2025 18:15:37 +0000 Manifest next update: Sat 25 Oct 2025 18:15:37 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: rE18prS63N2Wc6ohHHfNwVrjFEl5DXC2RVClGVZd09E=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: KyrGSf7V5zfG9F8nLNaSQJ4n2vaZ8LBybDGS/PP9Wq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3811 (0xee3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Oct 18 18:15:37 2025 GMT Not After : Oct 25 18:15:37 2025 GMT Subject: CN=68f3d94a-486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:a6:60:58:3e:33:82:20:ff:23:88:d5:09: 1d:21:eb:34:a1:d1:c2:64:5c:3c:3c:1d:db:7b:b1: a8:69:ba:1e:c9:74:d5:48:fb:0d:ca:b9:a5:de:4e: e4:7a:64:79:85:2c:b3:ce:aa:14:3c:1f:24:cd:8d: 94:07:ed:cb:95:6a:a8:8e:64:de:fa:0f:09:57:6e: f0:2b:19:da:f6:9c:f2:d6:a5:c8:83:80:bf:77:e1: 15:f0:32:8e:24:bd:ad:8a:90:87:15:dd:24:be:f3: a3:c6:a6:41:da:16:04:f8:75:46:ab:ca:6b:88:b4: 27:3c:8e:bd:5d:69:e1:8b:6e:67:cf:0f:c7:7d:1b: 84:7a:6e:88:e9:d6:75:3f:66:3e:1b:0e:8f:f3:bb: 59:c1:13:3f:a7:bd:26:bf:8b:dd:91:42:f3:5e:7f: cb:2d:63:dd:88:7a:ba:ed:62:46:e4:4f:0c:c4:f4: cd:07:15:8f:36:5c:0c:b6:91:60:6c:37:4c:19:6c: aa:2b:f7:87:cd:13:95:48:e7:e3:1d:37:fa:32:3a: 65:91:dc:f0:13:8a:71:67:57:7e:09:05:f6:0d:88: a2:f5:e3:08:de:77:02:82:d6:94:33:12:e6:c3:b1: 29:26:13:bb:9c:10:14:3b:c2:39:59:89:f9:df:c7: 40:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:18:E2:08:67:32:D9:4A:90:E1:BC:8B:D9:5E:9A:CD:C3:44:9B X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:af:25:71:44:96:2c:13:4f:6f:f7:53:39:57:65:8a:de:5d: bd:4c:31:05:60:2b:e7:c3:35:39:6a:d0:80:0e:34:85:96:dc: d8:8c:9b:46:5a:9c:96:9e:7a:e6:bb:01:aa:ff:ad:73:45:c0: 8b:2b:a4:b1:4d:bf:05:ab:3f:21:5c:de:96:cf:58:fe:2a:d5: 2b:1a:a6:44:70:ce:48:5f:6d:74:05:16:38:75:f2:6b:f4:26: d9:4e:f0:85:ff:a1:0b:ac:87:98:b7:e7:76:09:bd:47:c7:b9: b9:91:69:db:ee:ce:72:43:17:33:e9:da:9b:d2:e0:c6:80:dc: aa:1d:98:9f:cf:df:20:0f:b7:25:22:8f:42:d7:16:c4:70:df: 66:6b:73:7a:2d:c6:73:6a:56:ff:47:6a:25:84:9a:93:2e:d9: 8d:03:72:d6:f6:7e:64:73:0f:53:61:ff:ca:66:a0:15:b5:3c: fd:12:c1:96:88:2a:81:9b:aa:be:39:02:4d:16:1d:33:6a:21: 5d:df:e9:a6:9d:c6:a2:68:c1:51:f9:10:c0:cb:86:99:b0:d6: 19:ed:b5:42:c4:fd:1e:4b:87:5b:e5:62:fa:9f:0d:6d:26:40: 66:9e:58:1f:fa:fb:b8:2a:27:31:63:63:06:01:e6:55:93:71: 51:9f:fd:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjUxMDE4MTgxNTM3WhcNMjUxMDI1MTgxNTM3WjAYMRYwFAYD VQQDEw02OGYzZDk0YS00ODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxumYFg+M4Ig/yOI1QkdIes0odHCZFw8PB3be7GoaboeyXTVSPsNyrml3k7k emR5hSyzzqoUPB8kzY2UB+3LlWqojmTe+g8JV27wKxna9pzy1qXIg4C/d+EV8DKO JL2tipCHFd0kvvOjxqZB2hYE+HVGq8priLQnPI69XWnhi25nzw/HfRuEem6I6dZ1 P2Y+Gw6P87tZwRM/p70mv4vdkULzXn/LLWPdiHq67WJG5E8MxPTNBxWPNlwMtpFg bDdMGWyqK/eHzROVSOfjHTf6MjplkdzwE4pxZ1d+CQX2DYii9eMI3ncCgtaUMxLm w7EpJhO7nBAUO8I5WYn538dAIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcrGOII ZzLZSpDhvIvZXprNw0SbMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwryVxRJYsE09v91M5V2WK3l29TDEFYCvnwzU5atCADjSFltzYjJtG WpyWnnrmuwGq/61zRcCLK6SxTb8Fqz8hXN6Wz1j+KtUrGqZEcM5IX210BRY4dfJr 9CbZTvCF/6ELrIeYt+d2Cb1Hx7m5kWnb7s5yQxcz6dqb0uDGgNyqHZifz98gD7cl Io9C1xbEcN9ma3N6LcZzalb/R2olhJqTLtmNA3LW9n5kcw9TYf/KZqAVtTz9EsGW iCqBm6q+OQJNFh0zaiFd3+mmncaiaMFR+RDAy4aZsNYZ7bVCxP0eS4db5WL6nw1t JkBmnlgf+vu4KicxY2MGAeZVk3FRn/1m -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:51 2025 by rpki-client