$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: gzygMVIZwChugVWbflEkUVTCPSED234guuRr5vewoZ4= Subject key identifier: D4:BF:5F:A0:C6:2E:1D:FB:38:31:66:4D:A9:EF:C4:D2:69:99:6E:2D Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 01E4 Signing time: Sun 19 Oct 2025 05:18:44 +0000 Manifest this update: Sun 19 Oct 2025 05:18:43 +0000 Manifest next update: Sun 26 Oct 2025 05:18:43 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: VAgc1QOFAHrL0agOFrXfjqih2aH5Ojobu0ZZXaniu7A=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yNjhdAnLRCwNWiJ1nMJfINPCaK225vWnJCXkmet4kyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: Oct 19 05:18:43 2025 GMT Not After : Oct 26 05:18:43 2025 GMT Subject: CN=68f474b4-8f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:3c:35:e3:50:eb:8c:4b:7f:c7:b3:86:cc: d4:da:2e:28:22:23:98:74:be:13:92:06:17:4a:49: 4f:74:cd:a1:27:6c:07:d7:9a:2a:a5:b9:2f:3c:1e: 88:38:23:25:7a:5f:70:bb:5e:1a:2a:ef:a3:58:59: 77:4b:64:0e:c8:5d:b9:93:f5:a0:73:2e:c9:0c:ab: 4e:8c:4d:98:cb:4f:ba:6f:d6:f7:2a:97:7c:76:2c: 1b:32:29:4f:54:67:13:f9:87:ce:1d:bc:93:74:3b: 10:e7:be:47:8c:04:9a:0d:8e:c6:5d:44:6c:9f:4f: 0b:7c:3b:83:43:56:99:b1:de:8d:48:e0:ec:c2:94: a7:f7:c8:d8:59:f4:b3:9a:a2:00:82:5c:d9:a7:a8: 83:ae:5f:9f:ff:e6:50:cf:3c:e4:8f:a3:5c:30:33: 01:5f:8d:58:04:93:f1:83:d1:88:f7:99:ae:ac:9f: 36:4d:3d:52:90:12:53:a9:40:ac:77:86:06:c9:78: a1:8d:a4:85:e1:3c:a8:4b:be:db:4f:2a:26:dc:6a: 5e:80:b4:6a:42:3b:f4:48:66:f0:0a:bf:8c:9f:85: e0:d1:b8:15:64:b3:ba:7c:f7:c5:e7:59:ed:1a:ab: 2a:d9:40:cf:e3:39:60:96:4e:98:e0:95:b4:8d:ab: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BF:5F:A0:C6:2E:1D:FB:38:31:66:4D:A9:EF:C4:D2:69:99:6E:2D X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:e2:03:66:90:1c:df:43:7b:00:99:8a:50:94:65:4c:eb: 66:63:37:5d:f9:c2:26:e0:e4:e4:aa:85:5f:f8:74:c3:2a:f7: f8:6e:14:79:e6:1d:07:9d:70:ff:63:a4:2f:83:97:3c:2d:d1: 69:c2:5b:e0:39:07:95:51:09:1c:40:e7:e2:ca:37:30:f4:7b: aa:bb:2e:f1:d0:90:15:fc:d1:23:49:3d:86:fc:9d:17:3a:98: 6d:0b:f2:23:8c:a5:4f:01:1a:f0:29:89:78:e6:03:81:6e:7a: 2d:bd:35:3c:c5:b8:c9:37:b9:6b:bc:2a:be:ca:11:c0:c0:a5: 45:5f:7b:62:77:df:7f:2b:f6:ae:59:e9:3c:0f:6c:d4:c4:2b: 9b:8b:23:f4:9b:4c:22:e8:d9:78:af:70:94:9b:25:37:d2:31: b2:f6:0d:67:7a:ea:27:c3:c0:6a:63:12:16:af:f2:71:00:7c: 11:7b:f7:01:9a:3b:fc:b0:b2:79:04:0e:b7:a3:82:1d:72:3a: 99:2e:2f:ad:dc:fb:a8:1d:b9:3a:a9:3c:e0:92:82:d5:20:fe: bf:62:1b:02:17:87:b0:69:95:6d:d6:58:4c:b1:bb:df:47:7c: b6:07:ec:a4:a2:92:a9:a7:26:e2:19:a1:92:f7:db:b0:44:7e: 08:ba:1f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjUxMDE5MDUxODQzWhcNMjUxMDI2MDUxODQzWjAYMRYwFAYD VQQDEw02OGY0NzRiNC04ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmU8NeNQ64xLf8ezhszU2i4oIiOYdL4TkgYXSklPdM2hJ2wH15oqpbkvPB6I OCMlel9wu14aKu+jWFl3S2QOyF25k/Wgcy7JDKtOjE2Yy0+6b9b3Kpd8diwbMilP VGcT+YfOHbyTdDsQ575HjASaDY7GXURsn08LfDuDQ1aZsd6NSODswpSn98jYWfSz mqIAglzZp6iDrl+f/+ZQzzzkj6NcMDMBX41YBJPxg9GI95murJ82TT1SkBJTqUCs d4YGyXihjaSF4TyoS77bTyom3GpegLRqQjv0SGbwCr+Mn4Xg0bgVZLO6fPfF51nt Gqsq2UDP4zlglk6Y4JW0jau/JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS/X6DG Lh37ODFmTanvxNJpmW4tMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9dOIDZpAc30N7AJmKUJRlTOtmYzdd+cIm4OTkqoVf+HTDKvf4bhR5 5h0HnXD/Y6Qvg5c8LdFpwlvgOQeVUQkcQOfiyjcw9Huquy7x0JAV/NEjST2G/J0X OphtC/IjjKVPARrwKYl45gOBbnotvTU8xbjJN7lrvCq+yhHAwKVFX3tid99/K/au Wek8D2zUxCubiyP0m0wi6Nl4r3CUmyU30jGy9g1neuonw8BqYxIWr/JxAHwRe/cB mjv8sLJ5BA63o4IdcjqZLi+t3PuoHbk6qTzgkoLVIP6/YhsCF4ewaZVt1lhMsbvf R3y2B+ykopKppybiGaGS99uwRH4Iuh/O -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:33 2025 by rpki-client