$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: Cyai5nQ1nJ8kHN6JsVjHEjpHs84yF+gg2xcKvFvOx04= Subject key identifier: 62:C7:DB:69:8A:B0:19:7D:DD:46:6A:65:5B:91:F1:BF:14:2A:F7:B6 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0CE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0CCB Signing time: Sat 18 Oct 2025 18:56:58 +0000 Manifest this update: Sat 18 Oct 2025 18:56:57 +0000 Manifest next update: Sat 25 Oct 2025 18:56:57 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: GSV+p8X9XSaAGWf2XScEDauvFaPOCCbbz/Ta+Kjnosw=) 2: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: AdYW9GJhci7LYEDyJ6XwBJoZPBWZtoWOpqlz3zLpEms=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=) 4: BC36A3E8A67E11F0A35CBF40C4F9AE02.roa (hash: Zy1Cr+ByTtuPlrpGjoVSDT6QhmmfCIHpbLzangTlT68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Oct 18 18:56:57 2025 GMT Not After : Oct 25 18:56:57 2025 GMT Subject: CN=68f3e2f9-9265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:a3:eb:ca:d1:43:9c:f6:92:3e:ad:9d:b3: eb:d0:ff:c6:09:dc:a3:e4:6a:eb:23:30:28:54:30: 66:1d:26:25:d4:a7:38:26:90:d4:a7:d9:8b:0d:4e: ed:40:bc:b9:9d:79:09:2e:70:17:52:18:6d:59:a7: b6:48:7d:ca:54:f2:db:3f:52:3f:d3:96:3b:d8:3b: 61:17:ea:0e:7e:e5:c3:58:06:74:3a:90:c4:f6:5e: 06:e3:6e:21:e2:df:b5:3b:09:c1:8f:1c:95:4c:7d: 23:b8:46:86:7d:88:0e:61:d8:63:3d:e9:54:b3:64: 22:06:73:9b:23:1a:ed:88:3f:11:a9:d3:ab:bd:45: 6a:15:91:a3:06:c6:56:63:ff:4f:98:71:01:3b:10: 44:26:e3:ab:28:2e:89:c6:35:41:56:21:66:bc:f2: 25:d9:6f:c5:04:aa:a3:77:bd:4f:22:48:94:23:3f: 89:18:18:a8:97:64:9a:99:53:9b:b2:83:a0:94:1e: 65:d7:67:4b:43:c3:11:a8:5d:3a:bf:1a:5f:d9:80: 03:f3:9a:47:41:82:46:c9:96:20:1e:a4:a8:29:41: 9d:f8:ba:15:25:34:3a:17:65:be:0e:c5:14:cf:b1: 0b:87:ca:62:e7:78:d9:0b:04:25:08:35:02:e7:a9: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C7:DB:69:8A:B0:19:7D:DD:46:6A:65:5B:91:F1:BF:14:2A:F7:B6 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:6b:2f:cf:5e:46:44:be:28:86:ed:ae:26:96:3e:85:e3:e1: a4:db:d1:85:1b:e0:1a:24:90:9b:b5:e0:da:7a:72:19:69:53: 94:be:3d:69:45:ad:01:15:e9:9d:e0:8e:dd:8f:c1:eb:b6:e3: d7:ac:1e:b5:84:36:94:c7:ef:6c:94:69:d8:00:bb:29:95:94: d3:dc:50:f0:bf:8f:6a:00:f6:2e:d8:b0:a5:a4:e2:1a:f4:9a: e5:32:ec:a5:8b:5b:9e:5a:85:ec:ea:d5:92:09:43:46:71:aa: 67:ec:9f:14:e9:e7:8a:b7:c4:17:29:8a:85:ba:ef:41:c0:db: 4c:c6:2e:09:df:e8:53:ec:d5:38:76:1d:96:64:d1:61:01:7f: b3:fa:25:08:cd:ef:3d:b7:e6:ba:60:43:f2:39:90:a1:92:b4: 8d:1b:05:f1:56:d7:9a:82:46:7f:06:13:a1:31:9b:2f:b1:38: 24:f0:a4:0a:33:0a:d7:64:f1:1e:98:94:e7:8a:55:6e:d6:b1: 2d:f9:9f:54:5b:52:1f:c6:e5:80:69:23:c4:08:79:7f:7f:6a: f3:a9:35:73:4b:12:9a:5d:d3:f3:7e:e0:df:73:db:db:eb:35: 53:34:ae:bf:e3:c6:78:4a:37:ff:c8:f6:b9:0d:da:43:b1:34: 7d:4a:48:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUxMDE4MTg1NjU3WhcNMjUxMDI1MTg1NjU3WjAYMRYwFAYD VQQDEw02OGYzZTJmOS05MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEaj68rRQ5z2kj6tnbPr0P/GCdyj5GrrIzAoVDBmHSYl1Kc4JpDUp9mLDU7t QLy5nXkJLnAXUhhtWae2SH3KVPLbP1I/05Y72DthF+oOfuXDWAZ0OpDE9l4G424h 4t+1OwnBjxyVTH0juEaGfYgOYdhjPelUs2QiBnObIxrtiD8RqdOrvUVqFZGjBsZW Y/9PmHEBOxBEJuOrKC6JxjVBViFmvPIl2W/FBKqjd71PIkiUIz+JGBiol2SamVOb soOglB5l12dLQ8MRqF06vxpf2YAD85pHQYJGyZYgHqSoKUGd+LoVJTQ6F2W+DsUU z7ELh8pi53jZCwQlCDUC56l/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLH22mK sBl93UZqZVuR8b8UKve2MB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClay/PXkZEviiG7a4mlj6F4+Gk29GFG+AaJJCbteDaenIZaVOUvj1p Ra0BFemd4I7dj8HrtuPXrB61hDaUx+9slGnYALsplZTT3FDwv49qAPYu2LClpOIa 9JrlMuyli1ueWoXs6tWSCUNGcapn7J8U6eeKt8QXKYqFuu9BwNtMxi4J3+hT7NU4 dh2WZNFhAX+z+iUIze89t+a6YEPyOZChkrSNGwXxVteagkZ/BhOhMZsvsTgk8KQK MwrXZPEemJTnilVu1rEt+Z9UW1IfxuWAaSPECHl/f2rzqTVzSxKaXdPzfuDfc9vb 6zVTNK6/48Z4Sjf/yPa5DdpDsTR9Skgk -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:09 2025 by rpki-client