$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: BrUlrsIUgJE6+MzG7lMej0A+4V8hyvVl7xW+I15Kdhc= Subject key identifier: 9B:C2:EA:63:6E:10:CC:75:D8:CF:BB:13:98:8A:E0:CB:05:78:A0:9D Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 08:26:42 +0000 Manifest this update: Sun 19 Oct 2025 08:26:42 +0000 Manifest next update: Sun 26 Oct 2025 08:26:42 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: ZNogI3J84vFXq9F1uYq0HTdrn2zVZb8i8GIeT4M9XnA=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: yG8pJzZvCKmicDw0dwhTP12v3DvDJugGeiv6wIDOe9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Oct 19 08:26:42 2025 GMT Not After : Oct 26 08:26:42 2025 GMT Subject: CN=68f4a0c2-79d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:54:11:ea:42:75:11:59:65:00:65:07:da: 8a:8e:cd:b4:ac:0d:b5:fb:0f:c1:17:bc:92:04:1c: ed:54:fb:b3:31:b1:72:b3:52:12:bf:66:c8:48:c0: 4c:de:41:a7:b4:17:d8:0a:d0:a3:45:d9:6f:59:94: 67:12:6b:2a:9f:b4:ba:97:a9:d1:61:bd:9a:84:77: a8:50:6d:70:2d:b6:3e:07:b8:48:08:68:34:e8:90: 0b:ce:9a:72:4b:fa:0b:3d:ea:01:ef:8c:55:bf:6d: 6b:b9:a8:e5:ae:27:ea:72:d4:af:42:17:e7:56:5e: e8:09:10:c1:32:c3:3f:56:75:57:94:98:84:9d:98: 6c:d3:94:06:b6:26:17:09:52:ca:7c:46:1c:fd:bd: 57:4d:33:38:d1:b9:df:87:ef:d1:dd:98:77:e7:78: 50:a2:35:f5:49:03:05:47:08:42:f7:90:bd:95:2b: 53:57:02:52:db:f7:34:29:e9:ef:e3:77:4b:b4:4f: cd:6a:f4:54:1a:04:54:cd:de:90:e3:32:13:d7:14: b7:be:ee:e4:2a:b5:13:58:5b:77:5b:8a:05:60:f6: ad:30:0a:5e:37:32:6f:d0:73:22:a4:32:06:d0:32: bb:87:52:54:b7:03:e0:13:4a:a3:19:ca:2b:66:b3: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:EA:63:6E:10:CC:75:D8:CF:BB:13:98:8A:E0:CB:05:78:A0:9D X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:64:63:10:5c:55:38:f5:d8:a6:2f:f6:c9:81:d4:80:2c:e7: 31:f3:07:8f:26:99:c6:00:fa:c8:7e:bb:64:c9:6c:a0:3c:0a: c6:89:14:55:35:d7:80:49:1c:6b:fb:43:83:f2:cf:51:cf:eb: 16:3b:3c:d1:3a:d3:fc:98:02:c5:26:53:ea:da:8f:3c:0a:41: 7d:a0:76:fc:97:e7:55:5f:b6:83:55:86:8d:b3:66:42:78:39: 5e:b6:99:e7:95:8d:01:ec:ee:d2:88:22:fe:c2:55:46:16:87: 1f:7a:33:be:78:1a:4d:38:df:b8:cb:93:ee:12:09:c1:87:cc: e1:0f:0a:91:e2:da:62:62:1e:73:12:50:48:0b:42:a7:3c:b5: c4:ac:f8:53:c0:3e:61:8a:e6:5a:cd:26:53:a2:d4:cd:99:dd: 6c:5d:05:a3:13:9a:24:b4:6b:06:84:ee:7e:8d:1a:ed:92:39: 25:ae:fd:c7:25:1f:dc:81:95:55:28:1c:47:4d:cc:fc:69:cc: 2f:22:88:37:ce:a0:b4:cf:bc:2f:e7:17:3b:dc:81:db:de:19: 85:84:de:90:d4:e5:7d:5c:25:94:af:5e:54:67:5d:3b:cd:3a: e1:77:17:df:ac:cc:f9:14:90:9a:7e:e7:0a:47:ef:12:9b:b0: 27:0e:8e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUxMDE5MDgyNjQyWhcNMjUxMDI2MDgyNjQyWjAYMRYwFAYD VQQDEw02OGY0YTBjMi03OWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9VUEepCdRFZZQBlB9qKjs20rA21+w/BF7ySBBztVPuzMbFys1ISv2bISMBM 3kGntBfYCtCjRdlvWZRnEmsqn7S6l6nRYb2ahHeoUG1wLbY+B7hICGg06JALzppy S/oLPeoB74xVv21ruajlrifqctSvQhfnVl7oCRDBMsM/VnVXlJiEnZhs05QGtiYX CVLKfEYc/b1XTTM40bnfh+/R3Zh353hQojX1SQMFRwhC95C9lStTVwJS2/c0Kenv 43dLtE/NavRUGgRUzd6Q4zIT1xS3vu7kKrUTWFt3W4oFYPatMApeNzJv0HMipDIG 0DK7h1JUtwPgE0qjGcorZrMRbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvC6mNu EMx12M+7E5iK4MsFeKCdMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ZGMQXFU49dimL/bJgdSALOcx8wePJpnGAPrIfrtkyWygPArGiRRV NdeASRxr+0OD8s9Rz+sWOzzROtP8mALFJlPq2o88CkF9oHb8l+dVX7aDVYaNs2ZC eDletpnnlY0B7O7SiCL+wlVGFocfejO+eBpNON+4y5PuEgnBh8zhDwqR4tpiYh5z ElBIC0KnPLXErPhTwD5hiuZazSZTotTNmd1sXQWjE5oktGsGhO5+jRrtkjklrv3H JR/cgZVVKBxHTcz8acwvIog3zqC0z7wv5xc73IHb3hmFhN6Q1OV9XCWUr15UZ107 zTrhdxffrMz5FJCafucKR+8Sm7AnDo5p -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:41 2025 by rpki-client