$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: VMS0Naai9J2dveqnqIf29PP1Aswia2bYmo/xiK0pTlw= Subject key identifier: E0:85:17:66:CC:F7:BB:94:C2:5B:CF:82:C0:9B:73:E2:71:9D:CF:D1 Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 047D Signing time: Sun 19 Oct 2025 01:56:10 +0000 Manifest this update: Sun 19 Oct 2025 01:56:09 +0000 Manifest next update: Sun 26 Oct 2025 01:56:09 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: RQnLFNYNeU6Ex6of+W/p8gWfM4bMI+6TcO7WbHNh66k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Oct 19 01:56:09 2025 GMT Not After : Oct 26 01:56:09 2025 GMT Subject: CN=68f44539-d52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:74:87:58:1b:35:44:38:1d:2c:91:ec:b6: 89:e0:55:a4:f5:58:0a:54:aa:35:ce:87:05:47:83: c9:a6:53:24:24:30:9e:f2:c7:b7:d4:39:6f:30:1e: 2d:98:b5:a1:02:9e:6a:38:44:36:3a:bf:b2:6c:89: 28:92:a1:58:61:62:5e:5c:54:ff:86:3f:62:97:39: 5d:45:91:15:dd:cb:75:97:50:0a:2b:e0:fa:53:e9: 6b:8a:e7:09:33:e0:14:82:f6:5c:4d:54:f6:bf:75: 85:38:86:fd:35:4d:f5:6a:e0:69:ad:04:90:52:da: b4:57:16:5b:0c:0c:95:2a:a6:37:7c:1c:1e:90:b5: e6:93:88:77:d5:f9:ab:7f:87:9b:cf:ee:ca:5f:3f: 92:cc:d1:d0:58:a3:bc:3b:ce:35:29:e0:e8:50:e6: ae:c3:b8:ad:1e:5e:da:29:eb:94:49:c6:57:98:33: a0:97:c3:91:00:d2:eb:a0:56:29:72:a8:b4:dd:fd: f2:15:8d:97:1a:f2:10:d1:11:cb:ad:57:e5:25:5b: 0c:ba:1d:3b:cc:68:91:ad:28:09:c1:07:e1:56:b7: d7:de:3e:a9:49:57:80:75:8f:99:9b:b2:af:d0:6e: 41:f8:59:ed:43:90:46:ee:32:30:d6:f3:f1:29:d7: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:85:17:66:CC:F7:BB:94:C2:5B:CF:82:C0:9B:73:E2:71:9D:CF:D1 X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:db:e4:4d:4e:fc:cf:b8:1b:dd:f3:0a:ce:d9:5b:ff:76:33: 13:55:21:b6:0f:0e:bf:a0:98:a6:b2:0a:6e:bf:93:4e:ae:46: 9e:2d:28:0c:77:93:ea:2a:5f:33:e6:26:49:d4:bc:d2:68:9e: 20:a5:b2:b2:22:51:db:69:65:03:f8:2a:4e:22:5c:e8:28:f7: 2f:da:f9:67:8d:09:9c:6b:4d:8b:1f:09:19:b7:6e:70:20:e5: d8:64:26:db:23:bf:31:45:68:52:fb:97:34:11:fb:9c:6d:e2: 4c:34:f4:45:7a:e7:72:aa:4b:d4:69:1d:69:40:90:17:33:92: 6d:25:c2:9b:22:96:db:d2:d3:cd:f5:df:a4:03:01:ca:b6:19: 56:14:a7:6e:8f:c7:56:35:c9:59:f9:7a:31:b4:d6:67:ae:56: 7f:b2:b4:b8:15:ec:40:f1:cc:3e:aa:fd:28:57:32:79:ee:df: 2a:9b:d8:67:f3:d5:b1:bc:da:ca:c7:94:3c:90:ca:e8:58:f8: 1d:a0:84:99:e3:e6:8c:ab:96:71:cf:10:64:9a:e7:a4:08:17: f3:02:b8:2a:80:b5:49:7e:16:3e:e2:d8:9b:bf:6b:b4:5e:a0: de:87:da:be:c7:f1:f9:e7:aa:ad:fb:92:af:3c:4a:ef:66:49: b4:29:e1:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjUxMDE5MDE1NjA5WhcNMjUxMDI2MDE1NjA5WjAYMRYwFAYD VQQDEw02OGY0NDUzOS1kNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVZ0h1gbNUQ4HSyR7LaJ4FWk9VgKVKo1zocFR4PJplMkJDCe8se31DlvMB4t mLWhAp5qOEQ2Or+ybIkokqFYYWJeXFT/hj9ilzldRZEV3ct1l1AKK+D6U+lriucJ M+AUgvZcTVT2v3WFOIb9NU31auBprQSQUtq0VxZbDAyVKqY3fBwekLXmk4h31fmr f4ebz+7KXz+SzNHQWKO8O841KeDoUOauw7itHl7aKeuUScZXmDOgl8ORANLroFYp cqi03f3yFY2XGvIQ0RHLrVflJVsMuh07zGiRrSgJwQfhVrfX3j6pSVeAdY+Zm7Kv 0G5B+FntQ5BG7jIw1vPxKdfqGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCFF2bM 97uUwlvPgsCbc+Jxnc/RMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn2+RNTvzPuBvd8wrO2Vv/djMTVSG2Dw6/oJimsgpuv5NOrkaeLSgM d5PqKl8z5iZJ1LzSaJ4gpbKyIlHbaWUD+CpOIlzoKPcv2vlnjQmca02LHwkZt25w IOXYZCbbI78xRWhS+5c0EfucbeJMNPRFeudyqkvUaR1pQJAXM5JtJcKbIpbb0tPN 9d+kAwHKthlWFKduj8dWNclZ+XoxtNZnrlZ/srS4FexA8cw+qv0oVzJ57t8qm9hn 89WxvNrKx5Q8kMroWPgdoISZ4+aMq5ZxzxBkmuekCBfzArgqgLVJfhY+4tibv2u0 XqDeh9q+x/H556qt+5KvPErvZkm0KeEw -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:13 2025 by rpki-client