$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: YdTzzQyvdrmPl2B7KD9GrbC9UYwjrdhXrhVKEO8AjyQ= Subject key identifier: 03:74:0A:26:04:98:4B:6B:CE:89:18:5C:59:B4:2C:06:38:03:67:D3 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 1631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 1620 Signing time: Sat 18 Oct 2025 17:10:54 +0000 Manifest this update: Sat 18 Oct 2025 17:10:54 +0000 Manifest next update: Sat 25 Oct 2025 17:10:54 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: XDRhiDO0a3LpfSZa1HKb48GFYE5u3jTkadygB1DGO44=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5681 (0x1631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Oct 18 17:10:54 2025 GMT Not After : Oct 25 17:10:54 2025 GMT Subject: CN=68f3ca1e-2550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:02:53:b1:15:39:fc:60:cd:a3:5b:db:89: 4d:6b:a8:43:13:94:c9:fe:7e:f3:53:d1:46:66:75: 37:cf:a3:54:a5:2f:68:8f:bb:e4:0b:73:a3:57:15: f8:f3:70:3b:4b:3d:19:7c:4e:d9:8a:a6:cf:a8:ec: 45:5b:b0:be:97:69:d9:ec:b5:5e:be:09:b4:60:96: 01:fb:42:8a:9a:9e:60:a5:b0:41:86:c0:61:d8:1c: 14:ce:fc:f2:08:85:d7:c6:ec:29:00:73:95:4a:a3: 85:b0:9f:9b:d1:04:c4:d5:b4:07:1f:6e:1e:66:2b: 4d:ed:51:28:60:9c:ef:73:1c:26:e0:1e:8b:d6:96: a9:e8:0e:b2:f5:3e:cc:97:bc:f4:62:35:ec:43:ac: 03:3c:3f:6e:cb:22:f3:65:15:eb:60:f3:eb:3f:a9: d4:20:14:5c:ed:8e:2d:af:73:28:2d:bd:f7:88:7b: 6f:1e:bd:71:1a:e7:6d:5e:6a:87:9c:0a:fe:8b:aa: b5:57:ba:8e:7c:e5:0c:b8:40:9a:4b:9b:81:69:3f: 9e:f2:3b:1c:01:88:7f:ae:c6:eb:af:63:84:d7:31: 0b:33:b0:66:cc:95:cb:f9:12:09:23:d8:3f:9f:da: 5a:4a:af:56:2c:e3:be:c4:41:71:89:91:fe:6d:f8: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:0A:26:04:98:4B:6B:CE:89:18:5C:59:B4:2C:06:38:03:67:D3 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:bc:75:9b:71:42:2c:6a:ee:30:c6:1e:7d:77:21:4e:cf:7e: 35:f7:40:72:b7:61:00:bf:9c:20:db:14:09:c5:fc:73:44:ad: 60:cc:ab:ac:31:79:89:00:5a:3c:6b:98:12:a0:f9:3d:69:58: c2:3a:c0:69:09:74:da:9a:1f:8f:44:c9:00:60:4e:c6:31:8f: d0:c8:49:e3:68:6c:20:e8:1f:6d:86:8e:b6:80:a2:0d:26:00: f9:1b:d1:ea:c9:49:39:4b:b6:02:e5:76:77:10:df:f2:04:9b: 5c:a0:3a:0a:ec:c1:fd:b5:6c:7f:34:03:d3:74:35:3f:1a:c7: a5:9f:dc:6f:07:af:cb:e2:80:89:40:aa:48:38:f2:30:b4:7d: bb:73:fa:3c:6a:a4:c4:bb:0e:13:29:ca:fc:e5:8a:31:7b:e0: 41:17:80:f2:37:82:40:3b:a2:8a:15:2b:f4:cc:ae:dc:e8:f5: 86:63:71:48:db:f0:d6:f7:9c:e1:40:39:85:8b:ad:31:ac:1c: 2e:9b:13:fe:5d:30:af:d6:a1:07:7d:7e:15:e3:c7:aa:c4:76: c7:5c:87:e8:cc:43:74:c0:2d:d9:9f:5e:a6:fe:ae:e1:a4:97: 01:f1:54:13:31:b2:35:53:e9:ff:f9:ec:2c:35:e4:c4:e9:24: a7:92:6f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUxMDE4MTcxMDU0WhcNMjUxMDI1MTcxMDU0WjAYMRYwFAYD VQQDEw02OGYzY2ExZS0yNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsskCU7EVOfxgzaNb24lNa6hDE5TJ/n7zU9FGZnU3z6NUpS9oj7vkC3OjVxX4 83A7Sz0ZfE7ZiqbPqOxFW7C+l2nZ7LVevgm0YJYB+0KKmp5gpbBBhsBh2BwUzvzy CIXXxuwpAHOVSqOFsJ+b0QTE1bQHH24eZitN7VEoYJzvcxwm4B6L1pap6A6y9T7M l7z0YjXsQ6wDPD9uyyLzZRXrYPPrP6nUIBRc7Y4tr3MoLb33iHtvHr1xGudtXmqH nAr+i6q1V7qOfOUMuECaS5uBaT+e8jscAYh/rsbrr2OE1zELM7BmzJXL+RIJI9g/ n9paSq9WLOO+xEFxiZH+bfjkUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN0CiYE mEtrzokYXFm0LAY4A2fTMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtvHWbcUIsau4wxh59dyFOz34190Byt2EAv5wg2xQJxfxzRK1gzKus MXmJAFo8a5gSoPk9aVjCOsBpCXTamh+PRMkAYE7GMY/QyEnjaGwg6B9tho62gKIN JgD5G9HqyUk5S7YC5XZ3EN/yBJtcoDoK7MH9tWx/NAPTdDU/Gseln9xvB6/L4oCJ QKpIOPIwtH27c/o8aqTEuw4TKcr85Yoxe+BBF4DyN4JAO6KKFSv0zK7c6PWGY3FI 2/DW95zhQDmFi60xrBwumxP+XTCv1qEHfX4V48eqxHbHXIfozEN0wC3Zn16m/q7h pJcB8VQTMbI1U+n/+ewsNeTE6SSnkm8a -----END CERTIFICATE-----Generated at Mon Oct 20 10:46:03 2025 by rpki-client