$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: yynX1LnrC/y7028oUMnMoD0bPfSs2eyIxU2YgMKW16s= Subject key identifier: CB:A4:68:F8:16:33:FC:2D:56:10:93:14:48:DE:CA:5B:D4:7A:1E:2A Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: 51 Signing time: Sun 19 Oct 2025 10:38:54 +0000 Manifest this update: Sun 19 Oct 2025 10:38:53 +0000 Manifest next update: Sun 26 Oct 2025 10:38:53 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: xz1EsLc0V6QuiWfba0p/0MMXedR2IpF63XNOAtbO1bA=) 2: D474730E311C11F08B197B65C4F9AE02.roa (hash: Pu/QPbX6etZqKvOsEtAWX426lG3kK44YjXzpJvX5ecs=) 3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: OuYK59uWIga3ZAzcT5ocu0lcjNK1alPA7Ti+SUQJrh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Oct 19 10:38:53 2025 GMT Not After : Oct 26 10:38:53 2025 GMT Subject: CN=68f4bfbd-272d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:74:00:3a:ed:26:0f:74:91:0e:fc:f1:52: b4:00:ef:e7:18:26:48:12:f2:8c:24:88:99:f7:41: 49:98:48:31:1f:38:4c:97:3d:d1:5e:89:27:83:90: 4d:a9:47:ca:cb:ac:b1:98:08:19:35:dd:71:b6:bf: b4:29:15:fe:b3:7d:36:02:c2:69:a6:dc:85:24:ef: 68:6f:e4:6b:0c:bb:c9:14:1c:15:6f:6f:ad:06:20: 6c:31:cf:a1:72:d3:a3:5c:60:03:b1:67:e5:e2:84: 3a:b9:81:ea:64:24:1f:25:f5:88:42:db:86:f4:38: 29:f3:50:95:91:c7:99:67:ce:c1:97:6c:7f:04:ab: 67:cc:a2:f8:7f:e5:2e:5d:d6:88:6b:d5:ea:9a:3a: 63:6b:85:08:e4:11:3f:87:75:d9:da:62:68:c3:29: 09:07:a0:bb:89:68:9e:ab:c5:4c:c5:64:68:df:d7: 14:e9:d5:6b:f5:a8:50:cb:c7:5f:79:7c:0b:7d:a3: 21:3d:0e:3e:7d:53:f2:05:82:7c:e4:2e:af:4a:4a: a9:6c:66:3f:4e:8d:c3:29:fa:c4:86:83:b7:5f:77: 41:de:60:09:9f:be:76:b8:d8:48:67:3e:da:90:a9: b6:5b:33:0d:45:2d:2e:26:dd:93:76:67:09:23:9c: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A4:68:F8:16:33:FC:2D:56:10:93:14:48:DE:CA:5B:D4:7A:1E:2A X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4e:db:25:25:43:42:f2:6c:32:0e:38:0e:b2:df:d8:8d:10: 54:63:f6:0c:c8:8c:0c:e9:cf:93:ce:42:15:55:59:55:49:ae: c2:a9:39:72:33:23:8e:41:32:4a:e8:40:dd:e4:01:bd:14:a3: 1b:c4:84:a4:39:ce:70:81:dc:c5:3c:ef:68:d4:ae:bf:4a:ce: 3c:03:ae:e2:53:97:5e:05:f2:c1:89:f8:1d:62:52:4e:77:8c: df:50:11:9e:d3:88:f2:38:00:95:fb:8d:28:44:84:21:2d:b1: 76:3e:ef:76:9c:4f:98:b6:2a:1c:b0:5f:61:2b:91:01:8d:93: 66:e0:a5:2f:b9:b6:ea:c0:69:a0:e7:e7:aa:9f:06:43:f6:94: c5:aa:58:d7:74:cf:6a:31:75:0b:8e:0b:33:d0:a8:96:7d:3e: 6d:df:a4:be:b3:8a:6e:f1:6e:1b:df:52:d7:ed:8a:1c:08:79: 4c:f6:c7:8d:6b:ba:ee:e7:dc:f4:bc:c1:7a:39:5f:1a:a4:ad: a4:f5:84:65:a0:8e:ff:74:a4:37:18:b3:f6:b1:91:ee:6f:a5: f6:58:2d:eb:76:bb:35:d2:d2:20:31:79:15:ab:07:00:02:8f: ff:06:ea:1b:b9:9c:1c:49:20:ae:02:56:72:e0:d7:41:1f:d2: 16:46:4c:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUVEMjExMC8GA1UEBRMoRDkwNEQ1NTJDMEVGMzJGMjQ5QUJBNDU5N0JEODRBMTVF RTU1NTVDMTAeFw0yNTEwMTkxMDM4NTNaFw0yNTEwMjYxMDM4NTNaMBgxFjAUBgNV BAMTDTY4ZjRiZmJkLTI3MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnNnQAOu0mD3SRDvzxUrQA7+cYJkgS8owkiJn3QUmYSDEfOEyXPdFeiSeDkE2p R8rLrLGYCBk13XG2v7QpFf6zfTYCwmmm3IUk72hv5GsMu8kUHBVvb60GIGwxz6Fy 06NcYAOxZ+XihDq5gepkJB8l9YhC24b0OCnzUJWRx5lnzsGXbH8Eq2fMovh/5S5d 1ohr1eqaOmNrhQjkET+HddnaYmjDKQkHoLuJaJ6rxUzFZGjf1xTp1Wv1qFDLx195 fAt9oyE9Dj59U/IFgnzkLq9KSqlsZj9OjcMp+sSGg7dfd0HeYAmfvna42EhnPtqQ qbZbMw1FLS4m3ZN2ZwkjnA4VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy6Ro+BYz /C1WEJMUSN7KW9R6HiowHwYDVR0jBBgwFoAU2QTVUsDvMvJJq6RZe9hKFe5VVcEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RUQyL0YyNDVCMkQ2MzEx QjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZj RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlFUVlVzRHZNdkpKcTZSWmU5aEtGZTVWVmNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RUQyL0YyNDVCMkQ2MzExQjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZK SnE2UlplOWhLRmU1VlZjRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBO2yUlQ0LybDIOOA6y39iNEFRj9gzIjAzpz5POQhVVWVVJrsKpOXIz I45BMkroQN3kAb0UoxvEhKQ5znCB3MU872jUrr9KzjwDruJTl14F8sGJ+B1iUk53 jN9QEZ7TiPI4AJX7jShEhCEtsXY+73acT5i2KhywX2ErkQGNk2bgpS+5turAaaDn 56qfBkP2lMWqWNd0z2oxdQuOCzPQqJZ9Pm3fpL6zim7xbhvfUtftihwIeUz2x41r uu7n3PS8wXo5XxqkraT1hGWgjv90pDcYs/axke5vpfZYLet2uzXS0iAxeRWrBwAC j/8G6hu5nBxJIK4CVnLg10Ef0hZGTAI= -----END CERTIFICATE-----Generated at Tue Oct 21 09:54:16 2025 by rpki-client