$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json) Hash identifier: r6iG36bDyczgrwWvuTvrjCazOILYP8iH8wDFhR4FPJA= Subject key identifier: 00:99:B7:57:3A:6D:F2:FB:E8:EE:D2:A5:E7:14:F5:AE:89:DF:15:79 Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft Manifest number: 068D Signing time: Sat 18 Oct 2025 23:56:34 +0000 Manifest this update: Sat 18 Oct 2025 23:56:34 +0000 Manifest next update: Sat 25 Oct 2025 23:56:34 +0000 Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: 1yWLh9ApzRPuhnTgd065u/i/hytbDysXyHcvhkNz3cM=) 2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: NzOCnKqg2qahRXEOik1xyZlxFZ3lrtlDe5hks5SrPJA=) 3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: IqmyGbo6lE5IdQOfP9xw6QgI0Xcsu+xkWZJJhr6ZiRQ=) 4: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: lgtMLH6i/g97QEVVbiDk03F8pSWOlpowm/3LEp7TGhw=) 5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: xoqWpk6kq9UDnJpAtKinOiTxbgS2kwe2RRE2npE/Mm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Validity Not Before: Oct 18 23:56:34 2025 GMT Not After : Oct 25 23:56:34 2025 GMT Subject: CN=68f42932-5f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:5a:5c:76:3b:a1:e8:ea:de:a2:6a:18:01: 3c:46:3a:93:fa:20:2e:01:2d:51:7c:4b:9a:92:77: 38:ef:b3:3e:2b:11:6f:b8:d2:b6:10:67:8e:0c:e5: 6d:dd:cc:6f:63:3c:92:b0:3b:27:8d:25:4b:07:88: 17:b4:a1:71:9f:44:7a:62:c4:2a:49:ef:90:e9:87: 7a:5b:60:7d:a9:2a:94:3b:d6:58:d3:45:25:51:4b: 7b:ca:17:51:ef:aa:c0:7b:e4:fd:a7:d7:c3:40:15: a0:5d:bc:7f:c9:24:86:06:2f:eb:a9:2c:9c:b1:2d: 58:e3:a7:b6:52:52:44:9a:21:0f:26:8e:fc:79:46: f5:44:10:03:52:37:df:a5:58:66:9f:2d:fd:1d:d7: 08:22:89:4b:a4:14:9b:ee:d7:37:5d:78:d5:75:93: 80:06:c3:ed:55:f1:0a:16:0b:b0:fa:61:cd:99:d3: 00:be:dc:bd:3e:c8:92:b2:a6:8d:32:ae:ca:b8:74: 88:84:c9:79:3d:f9:b8:70:af:3f:c2:8b:28:63:b0: ff:8c:aa:a3:52:8d:b6:d7:83:8f:49:43:55:ee:32: 84:15:3e:a2:45:1f:d0:23:5a:fc:05:7a:b9:bc:52: fa:d2:95:bf:23:85:44:a2:53:f4:4f:95:9d:ae:74: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:B7:57:3A:6D:F2:FB:E8:EE:D2:A5:E7:14:F5:AE:89:DF:15:79 X509v3 Authority Key Identifier: keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5c:09:00:3e:df:6a:b4:eb:a2:d9:38:73:3a:b0:59:c4:5f: 05:93:73:11:e7:3d:68:88:31:ce:bd:d0:89:c4:5b:74:1d:81: 56:1c:65:72:d8:8e:cf:56:c3:c0:7e:e0:37:24:07:80:e4:b5: 26:fc:d3:01:f1:e6:16:b6:26:cc:89:3c:e6:42:3a:93:99:6c: c4:ea:8f:b5:9e:9f:16:02:5f:3c:e9:0e:1d:46:f9:d7:6c:f6: bc:79:45:7a:89:4e:4b:55:80:4d:ed:7e:86:98:d0:8a:26:75: cd:b5:5e:53:a3:d9:2e:58:20:27:4f:f3:75:06:1e:ca:97:69: 5a:20:f7:8e:7c:ae:1f:85:1a:0a:12:86:6a:9a:15:14:a3:a7: 32:8e:cd:18:83:fd:50:07:7c:b5:fe:fb:fb:26:bf:a5:c1:87: 6c:46:d5:1e:43:55:8f:32:48:a4:61:f8:9d:59:3d:a0:d4:35: 06:4a:f8:c7:20:89:28:a9:f7:01:80:5e:0d:f7:25:af:b8:8c: b0:78:99:d5:cf:34:98:f7:77:95:9f:b3:5d:24:ec:71:d1:ad: 52:0c:44:92:e3:9d:d0:cc:2d:ad:79:a8:fc:b5:ed:d6:17:39: 08:02:2c:60:d6:aa:d8:3a:4e:37:97:42:25:de:a1:1a:cb:8d: ce:1b:85:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBRTcxMTAvBgNVBAUTKERBQkZCM0I1OUY3RDcxNkZENTJENDVBNzQxQUYxNTlB RjdFQUY3QkEwHhcNMjUxMDE4MjM1NjM0WhcNMjUxMDI1MjM1NjM0WjAYMRYwFAYD VQQDEw02OGY0MjkzMi01ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwalaXHY7oejq3qJqGAE8RjqT+iAuAS1RfEuaknc477M+KxFvuNK2EGeODOVt 3cxvYzySsDsnjSVLB4gXtKFxn0R6YsQqSe+Q6Yd6W2B9qSqUO9ZY00UlUUt7yhdR 76rAe+T9p9fDQBWgXbx/ySSGBi/rqSycsS1Y46e2UlJEmiEPJo78eUb1RBADUjff pVhmny39HdcIIolLpBSb7tc3XXjVdZOABsPtVfEKFguw+mHNmdMAvty9PsiSsqaN Mq7KuHSIhMl5Pfm4cK8/wosoY7D/jKqjUo2214OPSUNV7jKEFT6iRR/QI1r8BXq5 vFL60pW/I4VEolP0T5WdrnSpRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACZt1c6 bfL76O7SpecU9a6J3xV5MB8GA1UdIwQYMBaAFNq/s7WffXFv1S1Fp0GvFZr36ve6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUFFNy9FMTgyNTc5Njkw RjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNXX1ZMVVduUWE4Vm12ZnE5 N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyLXp0Wjk5Y1dfVkxVV25RYThWbXZmcTk3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUFFNy9FMTgyNTc5NjkwRjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNX X1ZMVVduUWE4Vm12ZnE5N28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzXAkAPt9qtOui2ThzOrBZxF8Fk3MR5z1oiDHOvdCJxFt0HYFWHGVy 2I7PVsPAfuA3JAeA5LUm/NMB8eYWtibMiTzmQjqTmWzE6o+1np8WAl886Q4dRvnX bPa8eUV6iU5LVYBN7X6GmNCKJnXNtV5To9kuWCAnT/N1Bh7Kl2laIPeOfK4fhRoK EoZqmhUUo6cyjs0Yg/1QB3y1/vv7Jr+lwYdsRtUeQ1WPMkikYfidWT2g1DUGSvjH IIkoqfcBgF4N9yWvuIyweJnVzzSY93eVn7NdJOxx0a1SDESS453QzC2teaj8te3W FzkIAixg1qrYOk43l0Il3qEay43OG4XM -----END CERTIFICATE-----Generated at Mon Oct 20 09:34:49 2025 by rpki-client