$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: kksbdW5vCetJh5ojSS0UoWMcmGxTFLxvdx0YOlnB2Kk= Subject key identifier: 16:13:92:3B:9E:F5:1D:5A:23:51:FA:4D:7E:5E:44:71:85:56:41:4F Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2A58 Signing time: Sat 18 Oct 2025 15:47:34 +0000 Manifest this update: Sat 18 Oct 2025 15:47:33 +0000 Manifest next update: Sat 25 Oct 2025 15:47:33 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: 5GLXa05KN42nifQnnOYLQLvKx1F4EyJAG5cuVGXQWiI=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10883 (0x2a83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Oct 18 15:47:33 2025 GMT Not After : Oct 25 15:47:33 2025 GMT Subject: CN=68f3b696-cc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:56:e7:ac:a7:45:46:a9:ff:f6:b2:d8:55: 33:ea:b9:6a:02:02:07:b8:81:b0:f2:46:21:29:9b: b4:0c:ac:dc:b2:81:9e:23:3a:ff:0c:75:d5:12:b2: 6f:f8:04:6d:2d:54:b7:dc:a5:e4:2e:1b:80:7b:7a: 4f:f8:3f:56:92:16:6f:0f:4d:70:3c:b0:18:2e:9d: a7:bc:ca:a4:7d:92:62:83:3b:b6:f4:03:81:36:9c: 74:d8:49:65:86:da:ba:89:97:17:2b:94:81:9b:b1: 3d:4a:06:50:4c:d1:44:c0:39:f9:c6:6c:4f:3c:0a: 9a:d1:b0:0b:37:9e:5e:3a:20:19:57:fe:c3:7d:d4: a8:0c:f0:de:14:ae:7e:07:2a:d7:c9:a1:a7:af:a0: b2:77:11:f2:9b:ef:10:03:9c:67:6c:74:c6:a3:cc: f2:e2:05:d2:a9:12:ba:8e:b0:ed:00:c5:a5:e1:97: 3c:71:bb:04:c1:0a:27:e6:8c:b2:08:68:a7:c9:25: 72:03:79:6a:30:02:9e:c0:23:4a:43:8f:4f:72:32: 1c:49:56:1b:dc:06:8e:b7:6c:b3:44:d4:99:1d:fd: 6d:29:af:c9:3e:ae:8a:e9:25:a3:3d:e6:7c:9c:a7: ef:14:b3:7e:9d:da:a8:26:20:84:47:01:09:77:fc: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:13:92:3B:9E:F5:1D:5A:23:51:FA:4D:7E:5E:44:71:85:56:41:4F X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:95:a1:b0:9d:24:01:c9:22:ca:f0:52:10:31:29:0f:c0:16: 64:2f:49:13:07:ad:a3:8b:be:b2:ae:08:fa:a1:d8:fd:b7:36: d2:9f:e6:e9:9d:ac:5d:6c:b8:71:e7:0d:89:e9:59:19:b5:d2: 10:05:fd:8d:cc:38:fe:0a:bd:ac:20:d6:ed:28:8b:14:8c:a1: 9a:2f:c0:31:40:6a:a7:4d:4f:13:4c:c7:aa:52:a5:61:c9:ff: 07:29:dc:f6:a9:79:42:45:ca:6d:24:79:fc:86:03:de:7d:bf: 91:7c:5c:90:fb:21:b7:af:cf:57:db:95:5e:f0:c0:89:5e:27: e1:c5:b6:5c:12:f3:35:d1:14:03:e0:6e:02:29:ca:12:a7:a4: 64:03:ab:55:a5:30:54:35:b9:c9:83:02:bf:ad:58:cf:7c:35: 41:ef:28:1f:7c:3c:3f:b6:1e:90:82:90:ac:77:5b:27:e9:0e: b0:f5:93:9e:c3:45:9c:a5:ba:26:28:c1:9c:b6:14:17:58:87: 8f:aa:05:68:0a:50:bb:c1:40:85:4d:ff:57:f7:28:5a:e8:b5: b6:db:e8:a2:02:e6:7c:5f:77:fe:04:fd:43:92:c4:56:13:c9: 14:24:58:9c:2f:c4:1d:aa:9e:1e:8d:5e:11:2d:89:26:b8:95: 6b:52:8a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUxMDE4MTU0NzMzWhcNMjUxMDI1MTU0NzMzWjAYMRYwFAYD VQQDEw02OGYzYjY5Ni1jYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQFW56ynRUap//ay2FUz6rlqAgIHuIGw8kYhKZu0DKzcsoGeIzr/DHXVErJv +ARtLVS33KXkLhuAe3pP+D9WkhZvD01wPLAYLp2nvMqkfZJigzu29AOBNpx02Ell htq6iZcXK5SBm7E9SgZQTNFEwDn5xmxPPAqa0bALN55eOiAZV/7DfdSoDPDeFK5+ ByrXyaGnr6CydxHym+8QA5xnbHTGo8zy4gXSqRK6jrDtAMWl4Zc8cbsEwQon5oyy CGinySVyA3lqMAKewCNKQ49PcjIcSVYb3AaOt2yzRNSZHf1tKa/JPq6K6SWjPeZ8 nKfvFLN+ndqoJiCERwEJd/wHLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYTkjue 9R1aI1H6TX5eRHGFVkFPMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtlaGwnSQBySLK8FIQMSkPwBZkL0kTB62ji76yrgj6odj9tzbSn+bp naxdbLhx5w2J6VkZtdIQBf2NzDj+Cr2sINbtKIsUjKGaL8AxQGqnTU8TTMeqUqVh yf8HKdz2qXlCRcptJHn8hgPefb+RfFyQ+yG3r89X25Ve8MCJXifhxbZcEvM10RQD 4G4CKcoSp6RkA6tVpTBUNbnJgwK/rVjPfDVB7ygffDw/th6QgpCsd1sn6Q6w9ZOe w0WcpbomKMGcthQXWIePqgVoClC7wUCFTf9X9yha6LW22+iiAuZ8X3f+BP1DksRW E8kUJFicL8Qdqp4ejV4RLYkmuJVrUoqC -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:03 2025 by rpki-client