$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json) Hash identifier: oPPIJuealnO7srfd+45nxYIw/+yxgiqg0knvTq76Pn0= Subject key identifier: F7:5C:82:9D:83:9A:BA:8E:97:1C:A3:D9:D1:15:92:BE:04:DA:A7:48 Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft Manifest number: 70 Signing time: Sun 19 Oct 2025 10:15:18 +0000 Manifest this update: Sun 19 Oct 2025 10:15:18 +0000 Manifest next update: Sun 26 Oct 2025 10:15:18 +0000 Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: sJ+eTXDFC+gzVtBLgXWyH0iscewPU+y98lv4sdAQk4g=) 2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: nN3j+w7rACDpnsAZEw+b0JxCXf8pA/ucgK4YVC62zqE=) 3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: Dlt7c62t0hDVUYoo7gZi00Rxaa3RUeJ2v+Dxv4EEGtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Validity Not Before: Oct 19 10:15:18 2025 GMT Not After : Oct 26 10:15:18 2025 GMT Subject: CN=68f4ba36-57b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:74:68:77:bd:c1:e3:3e:7a:e5:6c:08:bb: 42:2c:c9:1f:83:d6:fb:fb:63:50:1c:be:a9:d5:40: b1:bf:40:10:7a:97:ab:0e:f3:f5:30:e9:a0:71:c2: d1:46:42:ad:50:60:2f:6b:4d:c1:06:16:50:57:0e: 08:07:1e:94:3e:37:c7:75:49:2d:2a:2a:12:8f:18: 7d:b4:b3:ac:5b:4c:0b:2c:be:04:02:80:4d:84:52: bc:f6:41:9c:c6:36:40:2a:7c:2a:68:98:4d:3b:ad: 0b:ac:80:cb:ca:9d:9f:a8:97:3c:67:f1:14:d3:0e: a9:1d:74:6f:36:d9:ae:fd:18:06:b8:d9:17:ae:b0: 9a:53:4a:fb:99:f2:bb:ac:90:28:9e:3d:e5:fd:bf: 6d:40:34:e4:14:99:51:5c:46:30:49:5d:f0:66:e6: cb:6c:88:04:71:0a:d5:2a:4c:95:0b:ca:59:9d:5b: 18:73:fe:ae:fc:d0:6d:cd:73:30:c1:13:c4:0d:bf: 4a:e6:8c:e9:cc:52:a9:48:1c:c8:3b:0e:d7:ae:9f: 37:ee:78:5a:2d:fe:80:9f:1e:a8:ba:65:bc:de:de: ee:52:3b:e3:47:95:99:03:97:bc:79:21:69:bc:4d: 97:98:97:4d:e8:c7:05:ec:cb:68:b3:fe:57:bc:f8: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5C:82:9D:83:9A:BA:8E:97:1C:A3:D9:D1:15:92:BE:04:DA:A7:48 X509v3 Authority Key Identifier: keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:b4:4b:1d:17:9c:45:0c:4a:9f:e8:05:81:8b:ed:0f:89:87: 8c:ce:30:c7:0c:a6:1d:7b:e9:1a:70:27:2f:35:40:c3:91:89: 68:ae:c7:30:fa:4f:f4:03:3f:96:02:e9:8a:62:15:5a:00:a8: ca:37:07:6b:01:97:5d:43:cd:71:0e:dc:ce:e8:dc:92:09:dd: 53:11:2e:de:46:46:e3:07:ee:86:0e:8e:c7:6f:6c:87:ec:9e: 7f:1f:22:76:c1:78:41:74:bb:46:e0:b8:98:67:62:f1:90:98: 18:04:e8:a2:38:e9:28:ea:07:d4:5e:ef:09:1c:59:2e:5f:cb: 0c:06:4c:82:f3:fc:cf:e8:c8:a6:c0:a1:c2:c5:5a:37:83:f0: ed:41:31:67:1c:68:af:c6:f8:8a:6b:28:68:34:b5:e2:27:13: 3c:c6:21:99:c9:c4:a6:20:03:b5:15:6c:87:11:36:b8:d7:73: c2:52:3b:7b:d3:22:6c:3c:3a:05:72:11:cf:e4:a1:7a:1f:93: 75:a2:0d:ae:08:92:fd:f3:d8:d4:d8:55:10:11:0c:59:d3:50: 39:a2:57:09:a4:ab:a2:cb:f2:b8:1e:9f:6a:cc:b3:f5:5d:59: bb:32:6e:b9:6d:e7:2c:e5:25:17:79:b1:f0:17:18:88:e9:3c: 63:34:3d:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjAxRDExMC8GA1UEBRMoREIxQjk2RTA1QTk4RDgyOEJGNTdFQTBBNzE1NUFGMUQz MzIyM0UyQzAeFw0yNTEwMTkxMDE1MThaFw0yNTEwMjYxMDE1MThaMBgxFjAUBgNV BAMTDTY4ZjRiYTM2LTU3YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0GHRod73B4z565WwIu0IsyR+D1vv7Y1AcvqnVQLG/QBB6l6sO8/Uw6aBxwtFG Qq1QYC9rTcEGFlBXDggHHpQ+N8d1SS0qKhKPGH20s6xbTAssvgQCgE2EUrz2QZzG NkAqfCpomE07rQusgMvKnZ+olzxn8RTTDqkddG822a79GAa42ReusJpTSvuZ8rus kCiePeX9v21ANOQUmVFcRjBJXfBm5stsiARxCtUqTJULylmdWxhz/q780G3NczDB E8QNv0rmjOnMUqlIHMg7DteunzfueFot/oCfHqi6Zbze3u5SO+NHlZkDl7x5IWm8 TZeYl03oxwXsy2iz/le8+H6zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU91yCnYOa uo6XHKPZ0RWSvgTap0gwHwYDVR0jBBgwFoAU2xuW4FqY2Ci/V+oKcVWvHTMiPiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMDFELzg1QjhDMjkwMDNG MTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnh1VzRGcVkyQ2lfVi1vS2NWV3ZIVE1pUGl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MDFELzg1QjhDMjkwMDNGMTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNp X1Ytb0tjVld2SFRNaVBpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMC0Sx0XnEUMSp/oBYGL7Q+Jh4zOMMcMph176RpwJy81QMORiWiuxzD6 T/QDP5YC6YpiFVoAqMo3B2sBl11DzXEO3M7o3JIJ3VMRLt5GRuMH7oYOjsdvbIfs nn8fInbBeEF0u0bguJhnYvGQmBgE6KI46SjqB9Re7wkcWS5fywwGTILz/M/oyKbA ocLFWjeD8O1BMWccaK/G+IprKGg0teInEzzGIZnJxKYgA7UVbIcRNrjXc8JSO3vT Imw8OgVyEc/koXofk3WiDa4Ikv3z2NTYVRARDFnTUDmiVwmkq6LL8rgen2rMs/Vd Wbsybrlt5yzlJRd5sfAXGIjpPGM0PQ4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:56 2025 by rpki-client