$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: kDRwXWUtre7DAnch2Bii/Tfdb1FL0KBoaCqcjQQvUnQ= Subject key identifier: C0:0C:28:C0:27:1C:8A:A2:67:55:FD:68:6B:58:F5:4C:67:5D:42:A1 Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 34D1 Signing time: Sat 18 Oct 2025 14:55:44 +0000 Manifest this update: Sat 18 Oct 2025 14:55:43 +0000 Manifest next update: Sat 25 Oct 2025 14:55:43 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: i7pgLJPnJaSsPJZOxyBuwxEsYJ9Vyy1J8iroI7fyFfk=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Oct 18 14:55:43 2025 GMT Not After : Oct 25 14:55:43 2025 GMT Subject: CN=68f3aa70-c558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:b6:e7:55:d7:bc:df:80:f4:75:6b:94:21: 76:bd:a3:90:d4:b0:b7:e7:65:fb:53:05:22:75:8d: 0a:ae:53:1c:24:8b:d0:5d:fe:ad:72:71:1f:3c:b7: 08:ef:d3:ca:72:eb:f4:35:b7:c6:ce:2f:7c:09:58: b7:8b:b6:2e:0c:a6:d7:12:a0:74:5d:6b:38:77:8f: 3c:18:14:9c:e4:38:4f:6d:e1:82:b9:4a:52:c4:8a: 7f:6a:87:ae:a3:cf:67:70:0b:7e:81:25:20:6c:55: 5e:72:f9:af:5a:bb:cd:8c:73:71:4e:57:07:26:8d: e7:9b:84:3c:41:72:5e:15:14:04:ca:ec:96:41:0e: 69:64:8a:ed:4d:b1:e4:b1:38:58:e9:f7:09:17:f9: 16:89:4e:ec:18:7b:97:32:b9:23:b6:15:43:f8:6c: 94:1d:5d:39:d8:82:79:dd:a0:cc:24:00:2b:1e:97: 6e:26:20:ec:24:d8:3d:19:84:29:b0:11:a9:b6:f3: a7:9b:7b:62:70:82:db:9c:ab:e5:c8:e2:10:e8:c0: 1c:17:72:24:d0:47:8f:17:b5:dc:19:60:78:99:ce: fc:b1:14:3c:8e:f7:72:93:d0:14:2c:7f:5b:35:7e: ca:f0:4f:82:b4:72:04:61:3e:c7:25:40:32:c7:fd: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:28:C0:27:1C:8A:A2:67:55:FD:68:6B:58:F5:4C:67:5D:42:A1 X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f7:da:59:7c:ac:0d:eb:cf:4e:24:5e:a4:d6:af:43:3b:ed: f5:51:09:78:b9:06:9a:19:ec:84:f4:7d:d7:01:30:4f:64:d7: 85:30:34:08:61:f1:31:09:22:90:02:5a:0d:bf:e7:f7:8e:b2: 4d:bb:4a:6a:a7:e2:1e:3f:19:5c:94:5a:b3:fd:d9:bd:6a:14: eb:cb:1d:94:ea:4c:67:3a:1b:d5:b4:e3:13:0c:19:f1:5e:75: 63:27:dc:36:0b:bb:52:59:8a:f8:4f:b6:cc:64:23:e3:e8:f0: e8:9f:63:33:11:84:39:5a:ac:a8:67:9f:d1:77:af:63:b4:19: 71:f5:cc:e0:fb:3b:bc:e4:f5:91:72:54:93:44:e2:6a:34:af: ea:c0:a4:48:89:a0:dd:2e:5b:35:e5:17:09:38:97:45:0b:22: 47:24:16:c3:7b:1d:5f:74:5a:24:24:4b:32:9d:cb:5b:cd:f0: 20:ab:9f:1e:ef:40:0c:72:df:a0:6c:95:66:b7:9e:2e:45:7e: 8d:0c:07:ea:b1:7c:3e:1b:e5:46:96:14:07:38:f2:77:2e:9d: 2c:5b:06:ee:74:c4:8c:b2:fe:35:30:65:d1:11:4c:5c:1a:89: eb:89:aa:0e:49:b5:4d:cd:15:63:b0:9d:94:a8:43:72:76:0c: c3:13:a5:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjUxMDE4MTQ1NTQzWhcNMjUxMDI1MTQ1NTQzWjAYMRYwFAYD VQQDEw02OGYzYWE3MC1jNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMO251XXvN+A9HVrlCF2vaOQ1LC352X7UwUidY0KrlMcJIvQXf6tcnEfPLcI 79PKcuv0NbfGzi98CVi3i7YuDKbXEqB0XWs4d488GBSc5DhPbeGCuUpSxIp/aoeu o89ncAt+gSUgbFVecvmvWrvNjHNxTlcHJo3nm4Q8QXJeFRQEyuyWQQ5pZIrtTbHk sThY6fcJF/kWiU7sGHuXMrkjthVD+GyUHV052IJ53aDMJAArHpduJiDsJNg9GYQp sBGptvOnm3ticILbnKvlyOIQ6MAcF3Ik0EePF7XcGWB4mc78sRQ8jvdyk9AULH9b NX7K8E+CtHIEYT7HJUAyx/23/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAMKMAn HIqiZ1X9aGtY9UxnXUKhMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb99pZfKwN689OJF6k1q9DO+31UQl4uQaaGeyE9H3XATBPZNeFMDQI YfExCSKQAloNv+f3jrJNu0pqp+IePxlclFqz/dm9ahTryx2U6kxnOhvVtOMTDBnx XnVjJ9w2C7tSWYr4T7bMZCPj6PDon2MzEYQ5WqyoZ5/Rd69jtBlx9czg+zu85PWR clSTROJqNK/qwKRIiaDdLls15RcJOJdFCyJHJBbDex1fdFokJEsynctbzfAgq58e 70AMct+gbJVmt54uRX6NDAfqsXw+G+VGlhQHOPJ3Lp0sWwbudMSMsv41MGXREUxc GonriaoOSbVNzRVjsJ2UqENydgzDE6XQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:02 2025 by rpki-client