$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: EWeGZKQ383haLHkzuglRK5PJTRUZFPQZ3AN+C724xH8= Subject key identifier: BA:55:B4:1A:6B:46:C6:BB:24:54:55:79:D5:88:2D:09:1D:78:C4:AD Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C60 Signing time: Sat 18 Oct 2025 19:22:35 +0000 Manifest this update: Sat 18 Oct 2025 19:22:34 +0000 Manifest next update: Sat 25 Oct 2025 19:22:34 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: Q4eEfcqWv+l+92SoGX2ZeuiQ9y/gyUs+SO4491Gf7I4=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Oct 18 19:22:34 2025 GMT Not After : Oct 25 19:22:34 2025 GMT Subject: CN=68f3e8fb-eba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:da:51:7a:77:5c:4a:c9:3d:72:57:8d:d8: 42:e5:78:f3:88:c0:4c:80:05:85:00:3b:02:83:6f: a7:c5:78:7e:14:2a:02:0e:6f:f8:0b:83:27:fd:73: dd:dc:f2:65:b3:6d:37:b1:30:87:3c:53:15:29:b7: 45:15:63:92:76:d6:b6:01:94:df:07:8e:fd:ee:90: 8a:03:48:fc:11:87:17:f5:90:75:90:ab:61:bd:64: 0c:96:ef:41:2d:fa:b2:90:14:eb:09:06:70:a8:ad: 4d:49:f9:ce:a0:cf:b8:de:f7:2a:a9:e1:0e:cc:58: b4:58:19:d4:dd:03:d4:19:b3:15:15:2e:af:ec:8b: 89:93:0b:33:0f:6f:69:c4:e0:79:f2:20:ab:3b:fb: 7e:b7:a7:49:39:46:cc:61:14:20:2b:11:8a:c6:66: 3f:e2:97:ab:9c:6b:3b:f7:db:1d:73:b5:db:94:e2: b2:9e:5f:2e:32:a8:d9:27:a1:31:97:c0:25:e1:f2: fb:e1:8f:16:47:1c:45:81:ca:71:5a:3a:66:13:d7: 8f:6f:80:37:68:ed:f9:a7:bc:4a:81:22:b1:56:59: 0a:45:e9:a5:23:f6:6a:00:79:81:1e:a8:b5:b8:0f: 06:98:a9:ab:30:95:5e:2d:4a:5b:ae:be:82:cc:e7: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:55:B4:1A:6B:46:C6:BB:24:54:55:79:D5:88:2D:09:1D:78:C4:AD X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d0:64:15:b4:df:bf:1b:19:dd:64:ae:2a:55:04:d2:d1:5c: 02:8f:1f:27:46:88:73:36:69:33:b9:36:78:62:e8:61:3e:15: 7d:e0:0b:5d:2b:45:a6:11:9c:71:25:9f:36:b1:08:11:9b:29: 2d:c1:2c:09:2d:a9:9f:71:4e:3c:e4:de:99:4d:8c:fd:3b:9f: 40:13:a4:67:50:4b:87:79:cb:b7:ce:24:2d:b6:c1:67:77:ab: ef:8c:49:84:b8:d0:21:01:92:52:0d:bd:c4:d6:e3:5d:69:c0: e1:e7:7a:b2:3b:2b:6f:2c:69:33:77:af:06:2c:fb:b6:7f:37: 4c:50:4d:7d:f2:66:a6:96:cc:e7:a4:55:89:b3:e4:74:78:97: 5d:09:47:ee:05:6b:4b:0a:5e:3a:e6:72:06:69:55:2d:f5:ab: 43:3e:13:e7:0e:9a:86:82:ac:e1:f3:af:53:4e:41:09:f6:53: bf:dd:39:90:5c:90:80:39:7a:65:0a:b6:f0:ab:72:7e:c7:5e: c8:65:4c:d4:14:49:51:44:4b:98:4f:bb:60:44:ec:65:09:f1: 64:9d:b9:a3:ce:f8:15:56:99:45:fe:8f:8c:54:47:52:d0:42: 5c:33:6b:48:71:21:5c:17:b1:f7:16:91:ff:db:53:ed:09:aa: ef:04:f9:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUxMDE4MTkyMjM0WhcNMjUxMDI1MTkyMjM0WjAYMRYwFAYD VQQDEw02OGYzZThmYi1lYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xvaUXp3XErJPXJXjdhC5XjziMBMgAWFADsCg2+nxXh+FCoCDm/4C4Mn/XPd 3PJls203sTCHPFMVKbdFFWOSdta2AZTfB4797pCKA0j8EYcX9ZB1kKthvWQMlu9B LfqykBTrCQZwqK1NSfnOoM+43vcqqeEOzFi0WBnU3QPUGbMVFS6v7IuJkwszD29p xOB58iCrO/t+t6dJOUbMYRQgKxGKxmY/4pernGs799sdc7XblOKynl8uMqjZJ6Ex l8Al4fL74Y8WRxxFgcpxWjpmE9ePb4A3aO35p7xKgSKxVlkKRemlI/ZqAHmBHqi1 uA8GmKmrMJVeLUpbrr6CzOcuoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpVtBpr Rsa7JFRVedWILQkdeMStMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0GQVtN+/GxndZK4qVQTS0VwCjx8nRohzNmkzuTZ4YuhhPhV94Atd K0WmEZxxJZ82sQgRmyktwSwJLamfcU485N6ZTYz9O59AE6RnUEuHecu3ziQttsFn d6vvjEmEuNAhAZJSDb3E1uNdacDh53qyOytvLGkzd68GLPu2fzdMUE198mamlszn pFWJs+R0eJddCUfuBWtLCl465nIGaVUt9atDPhPnDpqGgqzh869TTkEJ9lO/3TmQ XJCAOXplCrbwq3J+x17IZUzUFElRREuYT7tgROxlCfFknbmjzvgVVplF/o+MVEdS 0EJcM2tIcSFcF7H3FpH/21PtCarvBPkN -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:31 2025 by rpki-client