$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft File: 2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json) Hash identifier: QNDCFa4a8xNOZzbeQlD+OHgwG18h5ChavCpgcrPV4QI= Subject key identifier: D1:BF:14:52:5D:53:60:33:79:EE:35:1A:1C:93:9F:E5:E0:B1:12:C6 Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft Manifest number: 0109 Signing time: Sun 19 Oct 2025 07:55:58 +0000 Manifest this update: Sun 19 Oct 2025 07:55:57 +0000 Manifest next update: Sun 26 Oct 2025 07:55:57 +0000 Files and hashes: 1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: X08KeTX1W2UpZLgf7v70Q0UYeWDQNimDjJkThuF4SK8=) 2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: wBvwqSnNeZ2azP6/kY4estB/Jc4t3M7IdMIc2FaLoNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Validity Not Before: Oct 19 07:55:57 2025 GMT Not After : Oct 26 07:55:57 2025 GMT Subject: CN=68f4998e-fb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:52:29:bc:d5:db:9d:99:91:ac:02:8b:71: 22:06:45:89:64:aa:07:48:cc:d8:de:a6:f9:99:38: c8:86:24:31:ad:f3:23:79:56:32:ff:77:8a:9a:ce: ab:e1:ca:60:9d:5c:9c:e4:53:43:10:70:61:24:40: b7:43:58:13:6d:63:bd:91:c5:84:41:dd:2c:b4:28: a2:11:d6:27:39:ea:61:11:10:00:e2:a4:cf:0a:76: 82:54:ad:56:37:97:b5:b2:44:ca:20:6a:38:33:b5: 91:bd:16:a4:b3:5c:e7:f5:f3:d1:11:d3:88:27:62: 03:c6:96:39:69:d3:b2:72:c8:58:91:f6:02:2d:44: ca:11:fa:95:70:68:9a:ef:db:bb:17:5c:f7:d9:51: 04:e1:72:60:3c:01:31:13:bc:51:0e:3a:ea:47:7b: 2e:db:ff:65:51:73:91:8a:76:cc:be:68:b9:53:62: a6:12:6a:2f:b5:d8:80:5d:44:5f:a6:ec:32:03:b8: 61:0c:0c:86:b3:e0:10:1d:b2:60:9f:e7:01:92:eb: c0:6d:0b:f4:49:2a:c6:90:0a:bf:ce:ad:f5:68:e0: 61:a3:09:60:57:b1:2d:2c:38:13:5d:c6:8f:c5:63: e9:b9:35:c9:08:88:9d:3a:ad:3e:2a:a6:64:c0:00: 1e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BF:14:52:5D:53:60:33:79:EE:35:1A:1C:93:9F:E5:E0:B1:12:C6 X509v3 Authority Key Identifier: keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:38:9f:22:7f:50:a8:e9:d2:cd:88:87:ca:7f:4f:8c:75:c3: 28:e2:8b:38:8e:68:f6:29:3a:3e:c2:f3:70:84:f7:c1:23:55: 6c:89:80:0e:91:bb:36:d5:25:39:5a:63:ab:cd:f6:b9:6f:73: dd:8c:bf:28:95:b1:15:90:91:d7:7d:9f:80:6f:50:aa:d3:40: 00:fc:1e:40:af:50:ba:01:91:31:02:7f:71:01:b5:23:ec:4e: a8:08:12:0f:d3:f3:64:64:c8:90:29:f9:55:cd:82:c3:75:85: d1:e3:14:a4:00:46:0b:e4:cf:fa:67:e4:c8:d1:b2:45:df:b2: 56:a1:c4:f7:dd:e7:a6:e8:dc:6e:4c:82:8d:dd:a1:55:bb:b5: d8:12:f5:26:81:7b:48:c8:b4:c0:7d:32:e0:c9:37:34:73:2b: 78:da:2c:b0:f5:8a:22:9c:b3:99:9e:b8:e1:46:3e:3b:ec:96: 94:c1:63:c0:20:ea:e5:aa:a0:27:ec:57:75:1b:2e:af:fa:9e: a0:6e:a0:6a:f0:57:c8:42:e9:b6:d4:32:f7:94:b5:0e:bf:68: d9:c0:4d:b8:11:73:69:06:12:a3:19:77:39:85:48:f5:e0:a2: c4:78:2a:8f:8c:97:5b:9a:e0:e8:39:5f:c0:d1:84:6c:06:21: e7:a3:67:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI2OTgxMTAvBgNVBAUTKERCMDYzMDc4RjdCOTc3NTJGQjgxRDAwRkE5QkQ3QzUy M0IxQzk3MDMwHhcNMjUxMDE5MDc1NTU3WhcNMjUxMDI2MDc1NTU3WjAYMRYwFAYD VQQDEw02OGY0OTk4ZS1mYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMhSKbzV252ZkawCi3EiBkWJZKoHSMzY3qb5mTjIhiQxrfMjeVYy/3eKms6r 4cpgnVyc5FNDEHBhJEC3Q1gTbWO9kcWEQd0stCiiEdYnOephERAA4qTPCnaCVK1W N5e1skTKIGo4M7WRvRaks1zn9fPREdOIJ2IDxpY5adOycshYkfYCLUTKEfqVcGia 79u7F1z32VEE4XJgPAExE7xRDjrqR3su2/9lUXORinbMvmi5U2KmEmovtdiAXURf puwyA7hhDAyGs+AQHbJgn+cBkuvAbQv0SSrGkAq/zq31aOBhowlgV7EtLDgTXcaP xWPpuTXJCIidOq0+KqZkwAAedQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG/FFJd U2Azee41GhyTn+XgsRLGMB8GA1UdIwQYMBaAFNsGMHj3uXdS+4HQD6m9fFI7HJcD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjY5OC9EM0MwRUNFMjFF NTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQxTDdnZEFQcWIxOFVqc2Ns d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjY5OC9EM0MwRUNFMjFFNTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQx TDdnZEFQcWIxOFVqc2Nsd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTOJ8if1Co6dLNiIfKf0+MdcMo4os4jmj2KTo+wvNwhPfBI1VsiYAO kbs21SU5WmOrzfa5b3PdjL8olbEVkJHXfZ+Ab1Cq00AA/B5Ar1C6AZExAn9xAbUj 7E6oCBIP0/NkZMiQKflVzYLDdYXR4xSkAEYL5M/6Z+TI0bJF37JWocT33eem6Nxu TIKN3aFVu7XYEvUmgXtIyLTAfTLgyTc0cyt42iyw9YoinLOZnrjhRj477JaUwWPA IOrlqqAn7Fd1Gy6v+p6gbqBq8FfIQum21DL3lLUOv2jZwE24EXNpBhKjGXc5hUj1 4KLEeCqPjJdbmuDoOV/A0YRsBiHno2fe -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:38 2025 by rpki-client