$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: uytCn5jPOCMvz4qNDGoiigosJD1bm/6MMzF0TE6JMmg= Subject key identifier: A7:10:20:5B:F1:C5:BF:E7:51:51:2F:36:31:11:CE:74:6E:08:0F:6A Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: F7 Signing time: Sun 19 Oct 2025 08:11:40 +0000 Manifest this update: Sun 19 Oct 2025 08:11:39 +0000 Manifest next update: Sun 26 Oct 2025 08:11:39 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: oQNQ+TC9tbXe387VXwhdGbEbKCmpQm3aNd7EGYdqr3U=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Oct 19 08:11:39 2025 GMT Not After : Oct 26 08:11:39 2025 GMT Subject: CN=68f49d3c-d0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:7c:86:4f:73:6c:df:3e:b3:3d:96:71:c2: 7b:d2:59:be:91:26:f5:ba:1c:ae:5d:79:bd:fc:e2: 9a:c3:0b:c6:07:53:ad:0e:6f:4d:39:5c:bd:e6:9b: 7d:a5:dd:ff:fd:f1:37:34:49:5a:37:82:e0:11:1b: 38:fa:f2:4f:d2:57:b2:71:a3:7e:f7:e8:1e:36:29: a4:f7:c0:c2:04:02:a9:35:4f:8f:98:35:d2:f9:51: d0:b9:5b:64:31:4a:3f:e3:1c:7d:8a:ff:a9:de:1b: 6f:4e:21:da:e9:39:eb:27:2a:b6:e0:98:26:d8:07: 46:ff:c8:24:69:11:9e:7c:97:f9:e5:1f:b6:ee:b3: b1:78:a7:89:7a:b8:b4:48:45:3b:43:83:87:e3:2a: ba:c3:bb:70:f1:cd:a4:b1:e2:0e:e0:9d:8c:9b:04: ac:12:69:4d:6a:29:f6:0c:28:f3:76:49:d8:6d:96: 15:77:4c:32:6f:7b:82:f9:ce:17:2e:50:9a:e1:74: 8c:cb:a2:fa:1d:2e:63:fc:ad:07:7d:a2:03:db:b5: d4:8b:9b:c4:1f:b6:04:f6:0f:38:80:0e:74:af:f7: b5:c4:51:73:7f:2f:73:36:76:f2:80:18:8e:c3:ab: 5b:27:c4:b3:5c:61:8b:d7:50:22:01:ae:dd:ee:b9: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:10:20:5B:F1:C5:BF:E7:51:51:2F:36:31:11:CE:74:6E:08:0F:6A X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:45:41:28:fa:d6:bf:9c:57:58:0c:9d:2a:f4:28:ca:b3:80: 80:1b:49:e5:8b:17:67:4a:0a:a9:b6:da:f2:bf:ff:b7:53:96: 35:3e:e4:6e:4f:fa:64:42:28:80:fc:93:32:71:9d:be:59:e3: e2:af:01:04:fc:4e:da:14:84:af:c9:61:5e:45:22:23:90:32: fa:fc:b8:32:70:e1:dc:d4:1e:7d:ff:1d:7f:43:04:72:af:ca: 05:55:b6:41:d8:81:de:19:3b:ff:8c:fa:11:90:ae:db:5d:00: e7:82:a4:a6:58:4f:aa:f0:98:e3:c0:42:ed:77:a7:dc:14:9a: 45:11:72:97:36:ce:89:35:c3:59:27:c4:a0:d7:8d:4e:5b:3f: 28:1f:dc:6e:8b:8b:77:3e:53:aa:ed:46:95:a3:eb:f7:15:b1: 7f:81:64:45:2b:2a:78:1b:29:2d:d2:2d:2b:e9:4c:89:26:4a: f1:92:6f:ac:d9:af:04:e0:f5:40:46:1e:64:36:0b:dd:b4:6d: 89:bd:3f:1a:54:f8:59:c4:0e:f4:93:29:16:16:ae:cc:a5:4b: 4a:b7:a9:81:16:53:fe:49:55:dd:ee:dd:5d:ec:7b:9f:1b:90: 0e:64:ef:28:a4:43:61:63:49:78:4a:c4:9d:67:e3:6f:c4:a6: f5:f3:1d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUxMDE5MDgxMTM5WhcNMjUxMDI2MDgxMTM5WjAYMRYwFAYD VQQDEw02OGY0OWQzYy1kMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr18hk9zbN8+sz2WccJ70lm+kSb1uhyuXXm9/OKawwvGB1OtDm9NOVy95pt9 pd3//fE3NElaN4LgERs4+vJP0leycaN+9+geNimk98DCBAKpNU+PmDXS+VHQuVtk MUo/4xx9iv+p3htvTiHa6TnrJyq24Jgm2AdG/8gkaRGefJf55R+27rOxeKeJeri0 SEU7Q4OH4yq6w7tw8c2kseIO4J2MmwSsEmlNain2DCjzdknYbZYVd0wyb3uC+c4X LlCa4XSMy6L6HS5j/K0HfaID27XUi5vEH7YE9g84gA50r/e1xFFzfy9zNnbygBiO w6tbJ8SzXGGL11AiAa7d7rnKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcQIFvx xb/nUVEvNjERznRuCA9qMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFRUEo+ta/nFdYDJ0q9CjKs4CAG0nlixdnSgqpttryv/+3U5Y1PuRu T/pkQiiA/JMycZ2+WePirwEE/E7aFISvyWFeRSIjkDL6/LgycOHc1B59/x1/QwRy r8oFVbZB2IHeGTv/jPoRkK7bXQDngqSmWE+q8JjjwELtd6fcFJpFEXKXNs6JNcNZ J8Sg141OWz8oH9xui4t3PlOq7UaVo+v3FbF/gWRFKyp4Gykt0i0r6UyJJkrxkm+s 2a8E4PVARh5kNgvdtG2JvT8aVPhZxA70kykWFq7MpUtKt6mBFlP+SVXd7t1d7Huf G5AOZO8opENhY0l4SsSdZ+NvxKb18x1S -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:33 2025 by rpki-client