$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: GfuCObqUW1s1s5tOJBXe1qG1ZSaVLbSFFfsLxkuVSSE= Subject key identifier: 8E:B2:3E:AF:CA:CD:7B:C1:8C:0C:4F:1D:C7:B2:F6:87:B0:46:DA:4F Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0E52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0E39 Signing time: Sat 18 Oct 2025 18:28:18 +0000 Manifest this update: Sat 18 Oct 2025 18:28:18 +0000 Manifest next update: Sat 25 Oct 2025 18:28:18 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: kIV0LLJiQmZ2UMFs0px32tQqbedYVX7KmRsYRu2WEVA=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 4QYUWAD8mV7goqY2eyB8OTjIn05Ok4IHRMJOhxEL9Q0=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: WrORF911HLcFuZdH0HRCb0Ilepojo6I2DwL+ZjMpcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3666 (0xe52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Oct 18 18:28:18 2025 GMT Not After : Oct 25 18:28:18 2025 GMT Subject: CN=68f3dc42-25dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:7e:96:a2:b2:02:b4:a5:fa:5d:c7:d9:65: 51:84:10:e6:a7:cb:ae:5d:ff:bd:50:bb:aa:6b:46: 61:56:e3:60:ac:59:0c:18:43:cc:96:8d:13:99:e2: 48:bd:fc:8e:c5:70:37:15:af:b2:30:7a:31:e4:d5: 80:b9:58:fd:e0:8a:44:69:33:94:a4:28:34:8d:dd: b6:92:6e:f2:18:01:36:a3:00:07:49:c4:b8:b9:6f: 00:77:13:9d:99:30:c3:f5:98:f7:8f:79:d7:24:5b: 2b:53:c4:e9:84:dd:14:97:af:79:49:48:2c:8b:70: d9:8e:26:1d:d6:3a:ea:15:a9:41:07:bf:94:f8:b0: 20:76:1c:92:02:7a:8a:20:27:d2:ac:22:fc:e1:71: 65:90:39:f1:a2:25:93:84:c9:bf:fa:02:91:d5:74: 27:05:21:5a:c9:bb:a5:f9:3a:9d:54:db:31:f8:b6: ef:2f:3f:64:e6:6f:c4:82:76:74:49:e4:77:3b:03: 3f:f7:ee:cd:7a:96:ca:0e:56:e2:7a:2f:78:d0:86: 57:00:5c:d7:9b:24:24:35:7a:41:ed:1e:b6:55:eb: c2:39:76:c0:a5:fb:ba:b4:77:52:6e:ce:7e:1d:96: bd:9f:2c:db:66:bb:ce:a1:9b:a9:ec:21:4a:c1:22: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B2:3E:AF:CA:CD:7B:C1:8C:0C:4F:1D:C7:B2:F6:87:B0:46:DA:4F X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6b:e6:45:23:a5:53:68:e6:c6:07:00:26:ab:70:99:f3:4f: 86:1e:40:48:54:b8:e9:3f:05:9a:eb:18:7a:45:3f:62:2e:a5: 09:b2:b1:44:2b:dd:97:20:26:58:e1:76:4b:59:78:00:4c:b1: 48:a5:f9:1e:da:e6:b6:23:ff:fb:3a:d4:1d:bd:c7:37:b8:9d: f1:55:b7:c5:61:b9:21:38:7f:8d:9c:b9:64:8d:02:8d:b4:f7: f3:56:cd:21:ce:6e:1c:c4:68:b8:da:60:1b:07:20:77:00:6a: 64:0b:2d:5b:47:b1:ea:3a:40:30:9c:38:0e:d3:25:93:34:cd: 29:f2:4e:e7:f5:a4:c5:9a:b7:84:73:d4:de:26:df:71:e9:38: b5:64:96:c4:24:45:6d:4c:7d:e8:fb:36:e6:e0:ae:cd:2e:29: c9:d1:56:c9:a4:46:15:8b:a4:1c:3c:f3:11:80:b6:fa:d6:44: 2c:3d:19:f8:a3:75:e5:52:49:ef:9a:41:63:ab:ab:98:5b:af: 44:06:0f:97:b8:b5:a6:91:6d:b0:70:22:40:9c:83:23:3d:a5: 18:1e:48:0c:2d:0e:37:92:49:42:e6:f9:34:47:90:c1:fa:50: dc:14:95:b2:92:8c:d1:d2:73:73:e3:16:bd:fc:b6:ad:00:f7: e3:a7:6e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUxMDE4MTgyODE4WhcNMjUxMDI1MTgyODE4WjAYMRYwFAYD VQQDEw02OGYzZGM0Mi0yNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmZ+lqKyArSl+l3H2WVRhBDmp8uuXf+9ULuqa0ZhVuNgrFkMGEPMlo0TmeJI vfyOxXA3Fa+yMHox5NWAuVj94IpEaTOUpCg0jd22km7yGAE2owAHScS4uW8AdxOd mTDD9Zj3j3nXJFsrU8TphN0Ul695SUgsi3DZjiYd1jrqFalBB7+U+LAgdhySAnqK ICfSrCL84XFlkDnxoiWThMm/+gKR1XQnBSFaybul+TqdVNsx+LbvLz9k5m/EgnZ0 SeR3OwM/9+7NepbKDlbiei940IZXAFzXmyQkNXpB7R62VevCOXbApfu6tHdSbs5+ HZa9nyzbZrvOoZup7CFKwSJy4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6yPq/K zXvBjAxPHcey9oewRtpPMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABa+ZFI6VTaObGBwAmq3CZ80+GHkBIVLjpPwWa6xh6RT9iLqUJsrFE K92XICZY4XZLWXgATLFIpfke2ua2I//7OtQdvcc3uJ3xVbfFYbkhOH+NnLlkjQKN tPfzVs0hzm4cxGi42mAbByB3AGpkCy1bR7HqOkAwnDgO0yWTNM0p8k7n9aTFmreE c9TeJt9x6Ti1ZJbEJEVtTH3o+zbm4K7NLinJ0VbJpEYVi6QcPPMRgLb61kQsPRn4 o3XlUknvmkFjq6uYW69EBg+XuLWmkW2wcCJAnIMjPaUYHkgMLQ43kklC5vk0R5DB +lDcFJWykozR0nNz4xa9/LatAPfjp24/ -----END CERTIFICATE-----Generated at Mon Oct 20 12:05:27 2025 by rpki-client