$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: s9BMhkUaNLtx3XUORQVRESBvXJmQPMoS3SKo+FZijVs= Subject key identifier: 7A:7B:C9:34:10:26:B1:54:48:02:2D:77:30:4D:90:7E:5E:58:E3:6E Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0983 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 097A Signing time: Sat 18 Oct 2025 21:09:55 +0000 Manifest this update: Sat 18 Oct 2025 21:09:54 +0000 Manifest next update: Sat 25 Oct 2025 21:09:54 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: uKYfY+CpMVHrlSQNGWrvGok1lA7MGF4LK77Vo+v7/4w=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 4ExF2O2Frz9RSsUL7YBwRkgASJlP9BcJdkByxRonGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2435 (0x983) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Oct 18 21:09:54 2025 GMT Not After : Oct 25 21:09:54 2025 GMT Subject: CN=68f40222-fbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:aa:75:fa:53:2b:ee:c1:fc:10:ee:a2:9d:c4: 96:b8:2c:05:cb:a6:f5:6b:21:62:88:ca:78:f0:66: 3c:6e:f7:68:a9:a3:0a:a1:cd:0e:cd:5a:b7:e0:e8: 4f:d0:43:05:e3:4b:b8:08:59:36:b3:e4:b2:da:c4: 1c:7f:cf:79:88:2f:7f:3f:7e:13:e5:79:ea:0d:11: c5:92:c3:d3:2f:81:49:ce:34:b3:46:d2:a7:63:59: 10:f7:62:60:b6:6f:26:0b:73:00:d7:36:d2:dc:3e: 1c:70:ba:93:f7:81:ae:7e:7a:c3:ed:ef:d5:a1:a5: fb:9d:b5:8d:55:74:60:ce:62:c0:d4:68:62:93:69: 38:e4:64:ac:f2:26:c8:41:04:c9:a1:8d:68:4c:49: f8:01:d2:19:ef:71:fb:f0:01:98:5b:bd:15:fc:06: 7b:1a:ec:51:93:57:96:e9:20:57:39:8a:aa:f4:33: 2b:b5:15:34:27:a4:f4:05:ff:f4:59:a9:38:0c:d6: 1c:6d:b4:ff:a6:61:ae:23:85:44:f2:70:7c:bf:f2: c2:3c:74:eb:75:2b:c6:06:e9:cf:f8:e4:e8:96:42: f7:10:28:3f:db:5e:cd:bd:91:dd:6c:bd:42:f9:c6: 9e:01:d8:89:3b:26:c6:d5:c1:30:e9:29:8d:25:08: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7B:C9:34:10:26:B1:54:48:02:2D:77:30:4D:90:7E:5E:58:E3:6E X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ab:20:66:10:cc:6d:7d:11:1b:04:d5:cd:20:ac:53:da:1b: 17:30:ac:b0:0a:b8:fa:37:5d:f2:19:99:62:6f:fa:7f:d2:cd: 2a:6a:53:e1:6e:28:06:dd:76:d6:6e:15:61:d4:ea:49:af:8f: 9c:2e:c8:5d:1a:c0:21:aa:d3:c8:bb:50:1b:e2:19:23:c7:f5: c9:37:76:87:82:13:3a:b4:06:90:2a:43:0c:c4:df:cb:c4:6f: e8:ec:97:c8:33:01:a8:ed:86:8d:ec:16:e8:68:42:c6:51:e5: 65:cd:69:d3:95:8d:e0:8f:51:9c:5e:1d:88:6f:8f:73:ff:2b: 5d:de:0f:08:46:2f:4c:26:be:13:68:2d:4d:05:d4:5d:29:bf: 15:5d:62:99:17:4b:e4:ad:1e:6c:cf:27:28:5b:ce:cb:9d:26: 01:55:bd:66:c1:64:28:bb:b8:ab:04:39:3c:7c:a7:53:55:ab: 4f:96:70:77:8d:54:38:8e:ee:c1:a8:db:1c:27:ba:e0:8b:0b: 68:68:30:6a:23:2d:32:51:03:62:c8:47:85:7d:d3:04:bb:96: 45:1d:ab:13:e2:41:79:6d:57:7f:3c:d8:9e:2e:6e:ca:0a:30: 2c:4b:d5:43:fe:40:11:94:1f:89:0b:85:28:80:87:ce:dd:cc: fc:a4:2f:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUxMDE4MjEwOTU0WhcNMjUxMDI1MjEwOTU0WjAYMRYwFAYD VQQDEw02OGY0MDIyMi1mYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Kp1+lMr7sH8EO6incSWuCwFy6b1ayFiiMp48GY8bvdoqaMKoc0OzVq34OhP 0EMF40u4CFk2s+Sy2sQcf895iC9/P34T5XnqDRHFksPTL4FJzjSzRtKnY1kQ92Jg tm8mC3MA1zbS3D4ccLqT94GufnrD7e/VoaX7nbWNVXRgzmLA1Ghik2k45GSs8ibI QQTJoY1oTEn4AdIZ73H78AGYW70V/AZ7GuxRk1eW6SBXOYqq9DMrtRU0J6T0Bf/0 Wak4DNYcbbT/pmGuI4VE8nB8v/LCPHTrdSvGBunP+OTolkL3ECg/217NvZHdbL1C +caeAdiJOybG1cEw6SmNJQgnzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp7yTQQ JrFUSAItdzBNkH5eWONuMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTqyBmEMxtfREbBNXNIKxT2hsXMKywCrj6N13yGZlib/p/0s0qalPh bigG3XbWbhVh1OpJr4+cLshdGsAhqtPIu1Ab4hkjx/XJN3aHghM6tAaQKkMMxN/L xG/o7JfIMwGo7YaN7BboaELGUeVlzWnTlY3gj1GcXh2Ib49z/ytd3g8IRi9MJr4T aC1NBdRdKb8VXWKZF0vkrR5szycoW87LnSYBVb1mwWQou7irBDk8fKdTVatPlnB3 jVQ4ju7BqNscJ7rgiwtoaDBqIy0yUQNiyEeFfdMEu5ZFHasT4kF5bVd/PNieLm7K CjAsS9VD/kARlB+JC4UogIfO3cz8pC8j -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:39 2025 by rpki-client