$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: UBSLf40q/fey/81PJ3cjQFperdKtXQOJNkVx1bsOC+g= Subject key identifier: 65:0F:0C:3E:F8:1A:97:11:47:D4:8D:A4:8C:94:96:0C:5B:54:61:91 Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 0500 Signing time: Sun 19 Oct 2025 01:25:10 +0000 Manifest this update: Sun 19 Oct 2025 01:25:09 +0000 Manifest next update: Sun 26 Oct 2025 01:25:09 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: J71oTLmcZ9IGtkKz+pa0jPvjPaQIMGMbb8embXk/2oA=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: 4OzF15EHWUJWQROMnU+Ow7V0ACuwuCPbuqKLd0rV0bw=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: HFOpeRCt7KhrBfeMokpcxjR3KWcuUKe5Td59DEe/ljE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Oct 19 01:25:09 2025 GMT Not After : Oct 26 01:25:09 2025 GMT Subject: CN=68f43df6-c20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:84:fb:52:73:9e:93:c0:ea:17:6a:f7:01: c8:dc:4b:e2:eb:b4:8e:78:fb:4e:03:85:6f:3b:94: d1:e0:a5:68:10:41:67:4d:06:18:8d:1b:bb:b1:64: 47:38:1a:e4:34:be:59:30:1e:3c:24:c8:ec:03:22: aa:c7:7e:51:cd:38:84:e4:0a:20:89:26:0d:18:02: e6:fb:fd:78:48:e7:9d:0d:12:88:5d:57:02:6d:62: 4a:09:47:a9:48:ee:35:64:ce:f7:06:73:67:e7:c0: 70:0b:74:a9:98:ad:af:82:26:d9:74:24:44:88:48: e6:a2:8c:6e:a9:ec:ad:8f:07:c2:1d:aa:d1:96:77: 54:ab:fe:c3:09:e8:86:96:75:d2:87:17:43:f4:fb: 25:7e:14:d5:0b:a9:05:83:52:ab:74:41:1f:88:b9: f7:54:5a:22:66:ca:33:22:2a:cd:38:ee:e6:a6:6c: 4c:5d:2b:26:20:91:b3:b0:cd:3b:2b:a0:bb:d5:d9: 87:4b:c1:28:9d:6f:02:e3:df:f2:30:c9:b5:c7:01: be:bb:57:73:00:f4:78:3c:80:ab:48:48:37:3f:8e: 30:47:a7:ea:31:a5:d9:01:81:75:ae:1b:fc:15:72: 67:1a:96:c8:05:a3:22:4d:a5:3f:17:38:c1:ef:c0: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:0C:3E:F8:1A:97:11:47:D4:8D:A4:8C:94:96:0C:5B:54:61:91 X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:df:de:4c:ab:4d:cb:ff:71:a1:e2:ba:78:23:e6:14:aa:2a: dd:64:35:31:18:c2:41:30:59:a4:04:a4:3e:bd:dc:a6:98:e3: 37:1f:cb:99:83:47:e5:59:0a:47:f8:3e:cb:ae:a2:1b:0a:60: 5c:3b:be:e6:7b:98:b3:39:51:97:7a:f5:74:4d:0e:92:34:97: e0:51:9b:d5:33:5f:6f:c6:cc:b8:32:ed:bf:a3:0c:2a:d6:9b: 13:85:79:fb:cd:07:2d:45:43:07:e0:d8:ec:52:76:22:14:38: 61:b7:fa:c0:24:1b:4a:ac:ad:24:53:17:4a:27:f1:fc:42:d6: 7c:ee:03:74:62:8c:8c:26:44:4a:7c:cb:c7:13:c4:07:f0:3f: 7e:44:36:a7:ae:76:29:0d:a1:ac:ac:69:8f:27:e9:8d:22:af: b0:38:7f:58:14:da:1d:15:76:d6:1e:e9:79:9a:73:b5:b3:5e: ac:59:d4:75:e0:61:11:e8:2b:45:93:10:53:8b:c8:73:78:4c: e5:ab:38:a5:23:89:b8:65:68:0c:dc:42:e6:71:ed:3d:99:4d: 20:11:b6:c4:aa:f4:91:44:5d:55:1a:93:f5:96:20:8c:3f:3b: de:ca:79:a7:a8:fb:85:aa:b2:e9:c8:a8:06:1b:7f:c7:37:5c: 73:fb:b5:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjUxMDE5MDEyNTA5WhcNMjUxMDI2MDEyNTA5WjAYMRYwFAYD VQQDEw02OGY0M2RmNi1jMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR2E+1JznpPA6hdq9wHI3Evi67SOePtOA4VvO5TR4KVoEEFnTQYYjRu7sWRH OBrkNL5ZMB48JMjsAyKqx35RzTiE5AogiSYNGALm+/14SOedDRKIXVcCbWJKCUep SO41ZM73BnNn58BwC3SpmK2vgibZdCREiEjmooxuqeytjwfCHarRlndUq/7DCeiG lnXShxdD9PslfhTVC6kFg1KrdEEfiLn3VFoiZsozIirNOO7mpmxMXSsmIJGzsM07 K6C71dmHS8EonW8C49/yMMm1xwG+u1dzAPR4PICrSEg3P44wR6fqMaXZAYF1rhv8 FXJnGpbIBaMiTaU/FzjB78DX3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUPDD74 GpcRR9SNpIyUlgxbVGGRMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa395Mq03L/3Gh4rp4I+YUqirdZDUxGMJBMFmkBKQ+vdymmOM3H8uZ g0flWQpH+D7LrqIbCmBcO77me5izOVGXevV0TQ6SNJfgUZvVM19vxsy4Mu2/owwq 1psThXn7zQctRUMH4NjsUnYiFDhht/rAJBtKrK0kUxdKJ/H8QtZ87gN0YoyMJkRK fMvHE8QH8D9+RDanrnYpDaGsrGmPJ+mNIq+wOH9YFNodFXbWHul5mnO1s16sWdR1 4GER6CtFkxBTi8hzeEzlqzilI4m4ZWgM3ELmce09mU0gEbbEqvSRRF1VGpP1liCM PzveynmnqPuFqrLpyKgGG3/HN1xz+7W5 -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:28 2025 by rpki-client