$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: e1TseINLuC7Wp5aLHfawRPf5o56Z4ycBEq76Klc8nh8= Subject key identifier: 1F:47:4A:2A:5B:0B:48:5A:36:39:74:D9:D5:D5:59:4F:4D:A0:3A:81 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: 0106 Signing time: Sun 19 Oct 2025 08:00:44 +0000 Manifest this update: Sun 19 Oct 2025 08:00:43 +0000 Manifest next update: Sun 26 Oct 2025 08:00:43 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: PWD3unYMjTH5Kq7oF2KtDNeb9CEfsZJQ/kgCNhb/V1U=) 2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E=) 3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: recSAfAQrqtQaEHIzSjruotoH+IobzT5ObtgaKvqx8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Oct 19 08:00:43 2025 GMT Not After : Oct 26 08:00:43 2025 GMT Subject: CN=68f49aab-26ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:61:71:9d:ce:97:2b:2e:e4:0b:37:da:be: 7d:48:ff:3a:68:e6:25:68:53:87:23:11:81:a2:d7: f0:97:7a:a4:dc:c1:00:b6:2f:d4:9a:70:23:30:93: 85:bd:03:79:4b:01:d4:20:ef:7c:80:64:58:c4:99: da:74:f1:fa:df:2c:57:6f:53:e7:30:9d:58:39:79: fc:79:b1:26:a7:9f:0d:71:41:6a:54:c1:63:33:f4: fe:c3:bf:a3:96:39:dc:ed:07:47:e1:6a:b8:92:38: fa:3d:14:00:ac:b0:ce:c3:2d:33:aa:e1:a3:4b:7c: 7b:b3:df:c6:7a:11:f7:e1:65:38:36:61:ec:23:c5: 14:03:e4:9e:77:9c:63:a4:58:2a:6f:71:92:de:fe: 63:c2:88:27:04:e9:b6:49:9d:09:92:04:64:6f:6b: 79:cc:d1:0e:60:ab:42:02:79:6e:1f:5c:ba:79:50: dd:8d:91:63:39:19:9a:b0:32:b8:62:8e:df:7d:91: 99:4f:c6:47:88:db:99:c3:a6:9c:3a:60:ad:55:47: cc:d4:b3:f5:9c:cd:a4:8d:a2:e2:c6:02:1e:dc:20: 74:2b:a4:26:65:f7:45:c0:df:3b:6c:2d:d7:b0:04: 1c:55:a6:f4:3e:93:ba:e8:6d:aa:37:b3:8a:b1:06: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:4A:2A:5B:0B:48:5A:36:39:74:D9:D5:D5:59:4F:4D:A0:3A:81 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:15:88:0b:4d:05:be:3b:c1:1f:33:c4:e6:ce:7c:ab:91:02: c2:c7:f9:8c:de:32:4b:16:b6:fa:95:ee:35:1f:b3:35:70:40: 77:5d:cd:cd:8e:f3:96:79:79:d2:41:f3:2a:90:06:cc:55:9b: c9:56:d5:94:01:85:2f:1c:f3:dc:c3:cb:ec:5c:13:12:1c:11: f2:e1:12:fa:91:56:ee:4e:d9:23:40:7e:91:99:64:e1:d2:93: 91:f4:1f:38:48:25:9c:c1:19:31:d6:4f:93:2e:cc:7f:3b:42: 96:67:b3:4d:c2:8c:7e:c9:14:0d:8a:48:7d:8e:72:c9:8d:b1: 79:84:55:e8:7c:71:75:58:30:65:e2:0e:29:7b:1e:35:5b:a5: 3f:1d:92:03:48:de:57:87:7b:07:ba:b3:9c:b9:74:01:55:37: c6:be:10:f1:1c:4a:6a:97:85:81:a9:97:e8:e2:fa:03:35:a1: 0c:39:9e:4d:8e:e9:45:97:1b:f7:09:13:b1:c8:a7:85:3d:6e: be:60:76:b8:25:a8:fe:5f:0e:83:3b:9a:10:c2:96:0a:9a:91: cf:33:d9:13:c4:18:3b:e8:94:c9:03:ff:d9:d9:e6:b0:5e:5d: 76:67:b0:1d:69:6b:c6:83:4e:70:3d:f1:ed:4b:dd:e6:c4:aa: 47:a0:d9:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjUxMDE5MDgwMDQzWhcNMjUxMDI2MDgwMDQzWjAYMRYwFAYD VQQDEw02OGY0OWFhYi0yNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIJhcZ3Olysu5As32r59SP86aOYlaFOHIxGBotfwl3qk3MEAti/UmnAjMJOF vQN5SwHUIO98gGRYxJnadPH63yxXb1PnMJ1YOXn8ebEmp58NcUFqVMFjM/T+w7+j ljnc7QdH4Wq4kjj6PRQArLDOwy0zquGjS3x7s9/GehH34WU4NmHsI8UUA+Sed5xj pFgqb3GS3v5jwognBOm2SZ0JkgRkb2t5zNEOYKtCAnluH1y6eVDdjZFjORmasDK4 Yo7ffZGZT8ZHiNuZw6acOmCtVUfM1LP1nM2kjaLixgIe3CB0K6QmZfdFwN87bC3X sAQcVab0PpO66G2qN7OKsQZGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9HSipb C0haNjl02dXVWU9NoDqBMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzFYgLTQW+O8EfM8TmznyrkQLCx/mM3jJLFrb6le41H7M1cEB3Xc3N jvOWeXnSQfMqkAbMVZvJVtWUAYUvHPPcw8vsXBMSHBHy4RL6kVbuTtkjQH6RmWTh 0pOR9B84SCWcwRkx1k+TLsx/O0KWZ7NNwox+yRQNikh9jnLJjbF5hFXofHF1WDBl 4g4pex41W6U/HZIDSN5Xh3sHurOcuXQBVTfGvhDxHEpql4WBqZfo4voDNaEMOZ5N julFlxv3CROxyKeFPW6+YHa4Jaj+Xw6DO5oQwpYKmpHPM9kTxBg76JTJA//Z2eaw Xl12Z7AdaWvGg05wPfHtS93mxKpHoNnR -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:50 2025 by rpki-client