$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json) Hash identifier: elhx8whoYiD0lRdXhbJy9B5FGrGgiVdTIUs2Dq5mQ6c= Subject key identifier: C0:26:4C:9C:E4:12:39:DE:BE:A7:21:23:FD:D8:27:92:E5:8B:5F:8A Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft Manifest number: 3A Signing time: Sun 19 Oct 2025 11:15:40 +0000 Manifest this update: Sun 19 Oct 2025 11:15:39 +0000 Manifest next update: Sun 26 Oct 2025 11:15:39 +0000 Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: Mv7D/TDHYJMRnhNfnHk3XdgjKCu/agdLtoM8N0kjlko=) 2: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: F+R2fk0YjqijE6FasKZCYAmvjOnVu/mYSIbi31Ovw6o=) 3: 7D08B8F68FDF11F0B34EBA0BC4F9AE02.roa (hash: ziDdc7ON5gmiCX4Ym4QO/xFvs2ZmtqL0y4LOF+ZKS9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Validity Not Before: Oct 19 11:15:39 2025 GMT Not After : Oct 26 11:15:39 2025 GMT Subject: CN=68f4c85b-6109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:4a:a6:4e:55:76:05:7c:a6:67:83:ea:9a: c9:d8:cd:a4:7a:ad:c0:f6:1d:ea:fa:f7:06:0a:42: f4:0d:58:bb:f5:6b:75:93:01:ad:00:be:c4:f0:b7: 24:8b:c1:0b:a5:2e:e7:ac:75:67:e4:7f:cb:ab:2c: ad:28:98:60:3e:02:0f:45:8c:8f:3c:7e:c7:b2:27: dc:a1:e8:05:dc:bf:50:4a:08:bb:2f:50:a9:5d:8b: d4:c8:5c:ca:63:3f:ae:1d:f4:5f:7c:84:b1:9d:d5: 75:38:dd:f2:7f:46:6d:cd:94:b7:bc:79:95:1a:a7: d5:8a:58:12:26:b0:03:74:42:c8:83:f5:9b:a2:57: 38:d8:28:fa:a9:f8:ba:2b:f7:65:02:48:78:4d:b0: 13:d6:88:f6:bd:15:ce:56:c8:ae:6b:db:fe:e8:a0: 09:32:6d:7a:bd:96:a3:a5:37:9c:58:61:0e:58:51: 0a:b9:19:a3:66:a2:d5:36:cd:38:6a:da:ab:7d:3e: 8c:da:9c:a3:d2:32:4f:7f:93:69:28:96:ec:4b:16: d3:5b:df:8f:67:62:2f:0b:8e:8d:7e:57:f7:31:d3: a2:fe:e8:a9:eb:35:30:7b:df:f3:d1:81:67:c1:79: 7a:7d:4c:58:aa:22:84:32:3d:b4:f3:5a:78:8a:3f: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:26:4C:9C:E4:12:39:DE:BE:A7:21:23:FD:D8:27:92:E5:8B:5F:8A X509v3 Authority Key Identifier: keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:db:4b:c8:3d:0c:bf:dc:e2:d1:2a:00:a9:fc:b5:28:b8:5f: 64:1f:ae:2a:f7:e3:35:22:43:41:6d:9c:76:3b:08:d2:79:d3: ea:cb:ef:d1:fb:8e:59:d1:98:95:1a:f1:b4:84:3d:6c:34:c5: 15:c4:2b:d3:14:98:86:5f:21:74:21:c7:8d:be:ef:a4:15:52: 12:dd:e7:b7:6b:96:89:54:3a:64:f0:c6:32:25:40:24:9b:54: f1:49:0f:d4:d4:7b:97:19:a4:5f:70:78:b9:03:e2:12:1a:0a: 4d:57:fd:11:07:41:55:29:50:2e:6f:c6:f7:a7:41:7d:ea:14: 80:58:6b:11:95:5a:50:de:15:cc:08:e8:e9:c8:1e:4e:5a:8d: 4a:18:54:52:d2:c4:39:5c:54:78:9f:0f:0b:b1:df:4e:99:7e: 1a:d5:72:6d:1c:94:b6:85:e5:29:d9:dc:b3:64:77:bf:73:7b: c7:cb:8f:fc:30:13:9f:06:fb:8d:e4:8c:0c:4e:dd:9e:3c:d9: 11:ba:3b:03:c5:6a:d3:c0:15:99:a4:f3:2a:59:6b:c8:04:a7: 08:15:f1:b2:28:ca:56:9c:0e:68:d4:bb:b1:5f:5f:61:a0:10: f5:df:2e:9d:b1:19:e3:01:92:d5:39:6f:b3:7c:94:f1:0a:58: 4f:05:e3:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUNFMjExMC8GA1UEBRMoREFFMUNFMEFEQTY3QjQ0NzEzQzYxQjFGQUVDNEY1RDRE NjdBMTU5RjAeFw0yNTEwMTkxMTE1MzlaFw0yNTEwMjYxMTE1MzlaMBgxFjAUBgNV BAMTDTY4ZjRjODViLTYxMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm3UqmTlV2BXymZ4PqmsnYzaR6rcD2Her69wYKQvQNWLv1a3WTAa0AvsTwtySL wQulLuesdWfkf8urLK0omGA+Ag9FjI88fseyJ9yh6AXcv1BKCLsvUKldi9TIXMpj P64d9F98hLGd1XU43fJ/Rm3NlLe8eZUap9WKWBImsAN0QsiD9ZuiVzjYKPqp+Lor 92UCSHhNsBPWiPa9Fc5WyK5r2/7ooAkybXq9lqOlN5xYYQ5YUQq5GaNmotU2zThq 2qt9PozanKPSMk9/k2koluxLFtNb349nYi8Ljo1+V/cx06L+6KnrNTB73/PRgWfB eXp9TFiqIoQyPbTzWniKP8grAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwCZMnOQS Od6+pyEj/dgnkuWLX4owHwYDVR0jBBgwFoAU2uHOCtpntEcTxhsfrsT11NZ6FZ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQ0UyLzUxQ0Q3RkJBNzJD RTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZa OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnVIT0N0cG50RWNUeGhzZnJzVDExTlo2Rlo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB Q0UyLzUxQ0Q3RkJBNzJDRTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVj VHhoc2Zyc1QxMU5aNkZaOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIXbS8g9DL/c4tEqAKn8tSi4X2Qfrir34zUiQ0FtnHY7CNJ50+rL79H7 jlnRmJUa8bSEPWw0xRXEK9MUmIZfIXQhx42+76QVUhLd57drlolUOmTwxjIlQCSb VPFJD9TUe5cZpF9weLkD4hIaCk1X/REHQVUpUC5vxvenQX3qFIBYaxGVWlDeFcwI 6OnIHk5ajUoYVFLSxDlcVHifDwux306ZfhrVcm0clLaF5SnZ3LNkd79ze8fLj/ww E58G+43kjAxO3Z482RG6OwPFatPAFZmk8ypZa8gEpwgV8bIoylacDmjUu7FfX2Gg EPXfLp2xGeMBktU5b7N8lPEKWE8F44Q= -----END CERTIFICATE-----Generated at Mon Oct 20 07:59:13 2025 by rpki-client