$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft File: u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json) Hash identifier: ekLB2O39k2fEeOBnOq7TCdTNCfwNovdOcKlXObyMB0k= Subject key identifier: F8:C7:55:19:C4:F6:17:11:81:6D:42:97:1E:6A:E1:D3:F1:A5:FE:E9 Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft Manifest number: 0C01 Signing time: Sat 18 Oct 2025 19:37:40 +0000 Manifest this update: Sat 18 Oct 2025 19:37:38 +0000 Manifest next update: Sat 25 Oct 2025 19:37:38 +0000 Files and hashes: 1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: GweMCOGtnFMgDF5BN/HSMyuwIsVPYbPnLSJF82x220E=) 2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: 6VuhUdY4wX4JtAdDLdZ6VRCxsSJ2dhl5mfVJFdysXwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: Oct 18 19:37:38 2025 GMT Not After : Oct 25 19:37:38 2025 GMT Subject: CN=68f3ec83-5527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:f3:a2:aa:ce:20:d1:f3:4a:69:4b:49:6c: 7e:89:9c:ab:19:13:d4:13:01:0d:90:ce:4a:4e:6f: 45:5d:d3:e7:b8:e5:7d:fb:45:37:69:90:b2:1e:6e: e8:93:91:30:1c:23:fc:af:e9:0c:75:8c:c0:a5:55: 8b:83:f1:e1:46:65:b1:db:42:8e:b0:54:f2:73:a5: 9d:4e:47:3a:8a:38:a0:0a:be:6d:f9:d6:9f:87:53: 2f:6e:be:cf:41:d7:d7:13:ff:09:21:9e:20:ed:fc: f2:cd:3f:fd:36:fd:85:ba:3e:ba:bd:84:01:71:e3: d3:85:7a:b8:20:7b:0b:0d:f5:db:5f:61:54:a9:03: ba:e2:75:de:85:82:2d:55:72:11:96:16:08:0a:96: 4f:5c:02:e9:8a:a3:14:de:36:dc:c8:a5:0b:ce:2d: 9c:f2:ee:12:6e:27:8c:41:b5:55:40:31:cf:ea:db: af:8f:0f:2e:7c:0f:e1:5a:2a:b1:c1:22:80:49:6c: 78:ae:5b:1e:e7:5e:e3:a4:1f:1e:14:a5:77:81:b4: 1d:a9:70:8c:79:5f:00:22:a9:59:8a:2b:a4:ce:73: 62:02:f2:54:b6:d9:49:39:b6:d7:c9:c2:6e:42:f0: 4c:48:2f:c2:7a:07:1a:72:b7:71:42:9d:a6:76:e1: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:55:19:C4:F6:17:11:81:6D:42:97:1E:6A:E1:D3:F1:A5:FE:E9 X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:67:f0:48:8b:f0:b5:f7:8f:f4:b6:9f:15:c6:37:18:eb:cc: 31:d7:6a:c7:a7:da:0a:f8:65:09:6c:ee:a6:ca:04:2b:6f:80: f0:5c:f1:d7:e1:b4:5e:32:9a:a6:a1:44:98:98:71:5a:b2:b7: 90:49:1b:b2:64:a6:c4:31:36:44:7e:a5:3e:5b:f0:fa:ab:58: dd:67:d1:df:69:86:30:f3:93:30:b3:6f:3f:8c:c7:88:c2:07: 8b:8f:d8:0c:49:0f:ea:f8:0d:23:51:cf:b9:57:c7:92:6d:c4: 21:d2:fd:6b:0e:b9:ca:75:73:ec:05:c5:47:c1:92:49:d5:d3: 6b:6f:53:0b:ed:81:03:02:85:73:1b:84:80:65:10:1e:ed:05: 4e:1f:dc:54:c4:f6:80:fd:b3:9c:cd:8e:8f:ff:88:e4:33:f1: ad:8b:2f:58:83:12:c7:da:ec:27:e7:3d:9a:ba:f2:a2:a0:7e: fe:49:4b:0f:71:c7:f1:a0:e7:47:43:e3:ca:df:d9:28:f3:b9: d7:45:62:9a:03:18:6e:82:ba:4f:a5:23:8a:c0:ec:bc:bf:e3: 01:4e:c6:f3:56:20:7a:2f:eb:31:6a:52:23:d5:bc:36:04:fc: b7:3a:7c:68:7b:27:75:09:37:63:26:1b:a3:a7:5c:51:d1:41: d6:91:95:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjUxMDE4MTkzNzM4WhcNMjUxMDI1MTkzNzM4WjAYMRYwFAYD VQQDEw02OGYzZWM4My01NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSPzoqrOINHzSmlLSWx+iZyrGRPUEwENkM5KTm9FXdPnuOV9+0U3aZCyHm7o k5EwHCP8r+kMdYzApVWLg/HhRmWx20KOsFTyc6WdTkc6ijigCr5t+dafh1Mvbr7P QdfXE/8JIZ4g7fzyzT/9Nv2Fuj66vYQBcePThXq4IHsLDfXbX2FUqQO64nXehYIt VXIRlhYICpZPXALpiqMU3jbcyKULzi2c8u4SbieMQbVVQDHP6tuvjw8ufA/hWiqx wSKASWx4rlse517jpB8eFKV3gbQdqXCMeV8AIqlZiiukznNiAvJUttlJObbXycJu QvBMSC/CegcacrdxQp2mduEkhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjHVRnE 9hcRgW1Clx5q4dPxpf7pMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjIyNC82RTlCQTQxQTIwNTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFT dFpveVZIb3pnZ2ltQ0pIZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdZ/BIi/C194/0tp8VxjcY68wx12rHp9oK+GUJbO6mygQrb4DwXPHX 4bReMpqmoUSYmHFasreQSRuyZKbEMTZEfqU+W/D6q1jdZ9HfaYYw85Mws28/jMeI wgeLj9gMSQ/q+A0jUc+5V8eSbcQh0v1rDrnKdXPsBcVHwZJJ1dNrb1ML7YEDAoVz G4SAZRAe7QVOH9xUxPaA/bOczY6P/4jkM/Gtiy9YgxLH2uwn5z2auvKioH7+SUsP ccfxoOdHQ+PK39ko87nXRWKaAxhugrpPpSOKwOy8v+MBTsbzViB6L+sxalIj1bw2 BPy3Onxoeyd1CTdjJhujp1xR0UHWkZUA -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:04 2025 by rpki-client