$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: LWIPefa5TwKWiSLRf0yYNRcRHI3Hw+odUfDIrjuwlB4= Subject key identifier: 45:27:5E:D4:DB:A2:31:FB:5E:0E:DB:15:A9:30:27:B6:E0:E1:ED:BC Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 24F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 24E3 Signing time: Sat 18 Oct 2025 16:00:17 +0000 Manifest this update: Sat 18 Oct 2025 16:00:17 +0000 Manifest next update: Sat 25 Oct 2025 16:00:17 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: OpAhz05b8EL7DX+Y45zp8yjisL4xXipsLat1Zldhpus=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: gjGyoU6UehPX0w4evr1O57YIj1TJSqlSY6y93UsHPOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9465 (0x24f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Oct 18 16:00:17 2025 GMT Not After : Oct 25 16:00:17 2025 GMT Subject: CN=68f3b991-6c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:94:78:26:c6:17:49:5c:73:69:f9:c1:1f: b4:d9:ed:7f:f7:89:cb:db:69:c6:54:61:cd:2c:92: e3:8a:57:af:25:e6:db:fd:4d:ef:15:67:c2:1b:ed: 94:4c:e0:33:b8:9f:4b:7f:a7:71:16:ba:2a:11:47: 7d:0d:9b:6c:2a:c3:a5:42:69:a1:f4:ff:4b:c7:d5: 92:ff:1c:2e:df:86:6a:87:1e:8f:75:09:92:73:fd: 8a:bb:b6:4a:49:4c:e6:fe:44:72:99:f5:40:73:c1: ea:e9:e2:b5:28:de:58:ce:8d:e2:bf:06:2b:98:1b: 06:4a:77:78:d9:a5:78:d8:b2:f0:f4:00:71:84:c1: 3f:0c:21:8b:63:f7:e0:d4:d9:65:e7:8f:10:7b:48: 04:ef:81:00:5c:80:28:9c:f7:8a:db:ba:e2:56:78: 19:96:a7:2a:16:b1:d8:d4:9d:7d:0d:8e:d9:71:7c: 03:87:34:90:5f:73:3c:81:1a:9c:80:de:ef:09:fb: e0:5d:39:b2:30:11:7e:9b:a4:08:80:f5:10:75:44: 46:e9:f2:d6:97:f9:a4:ef:eb:61:c5:f8:b6:26:b7: be:a5:6c:14:50:07:06:86:23:21:b0:a2:87:81:04: 9b:95:9a:1a:77:93:19:4c:1b:a3:47:77:84:41:03: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:27:5E:D4:DB:A2:31:FB:5E:0E:DB:15:A9:30:27:B6:E0:E1:ED:BC X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2b:f3:d8:44:a5:44:2b:67:b3:d9:42:5f:a5:94:68:33:83: 12:75:fe:97:51:ac:0d:de:03:59:d6:91:ea:6a:82:87:9f:ec: 80:56:06:1b:0e:b2:5c:53:ce:67:58:df:c1:76:2b:74:1e:64: 1e:cd:20:10:3b:1a:52:0c:ec:e1:33:c9:42:87:d3:fd:f9:43: c1:26:c2:b3:d4:ac:5a:1b:3c:1a:8c:12:42:8a:76:aa:6f:d7: 2a:46:24:64:67:7d:ac:c3:60:69:2b:eb:d5:01:07:fe:e6:79: 3a:eb:bb:1e:be:a3:aa:e2:a9:bb:b7:31:1d:7d:07:06:ea:31: 99:ed:08:29:1d:f0:d9:27:a1:af:55:c5:b7:d4:96:66:26:7a: ea:cb:aa:ec:38:2d:a1:97:13:4a:41:04:fd:89:95:1a:79:f6: 96:0a:46:84:ae:3b:94:8c:51:9d:b7:7d:c5:9e:9d:2c:24:8c: 97:96:cc:8f:b4:6b:bf:d5:fe:33:21:b7:ac:2d:6a:ac:18:03: 3f:52:e0:5d:ff:7b:85:93:7d:d9:e6:92:9d:84:4a:14:4a:a1: d1:e7:74:7a:f2:21:95:15:9c:6e:12:3d:25:5c:f5:f3:29:58: f0:cd:ec:d2:e7:85:7c:9b:ca:41:f4:3c:35:60:bc:f5:15:11: 7f:b2:84:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUxMDE4MTYwMDE3WhcNMjUxMDI1MTYwMDE3WjAYMRYwFAYD VQQDEw02OGYzYjk5MS02YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXyUeCbGF0lcc2n5wR+02e1/94nL22nGVGHNLJLjilevJebb/U3vFWfCG+2U TOAzuJ9Lf6dxFroqEUd9DZtsKsOlQmmh9P9Lx9WS/xwu34Zqhx6PdQmSc/2Ku7ZK SUzm/kRymfVAc8Hq6eK1KN5Yzo3ivwYrmBsGSnd42aV42LLw9ABxhME/DCGLY/fg 1Nll548Qe0gE74EAXIAonPeK27riVngZlqcqFrHY1J19DY7ZcXwDhzSQX3M8gRqc gN7vCfvgXTmyMBF+m6QIgPUQdURG6fLWl/mk7+thxfi2Jre+pWwUUAcGhiMhsKKH gQSblZoad5MZTBujR3eEQQOLuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUnXtTb ojH7Xg7bFakwJ7bg4e28MB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9K/PYRKVEK2ez2UJfpZRoM4MSdf6XUawN3gNZ1pHqaoKHn+yAVgYb DrJcU85nWN/Bdit0HmQezSAQOxpSDOzhM8lCh9P9+UPBJsKz1KxaGzwajBJCinaq b9cqRiRkZ32sw2BpK+vVAQf+5nk667sevqOq4qm7tzEdfQcG6jGZ7QgpHfDZJ6Gv VcW31JZmJnrqy6rsOC2hlxNKQQT9iZUaefaWCkaErjuUjFGdt33Fnp0sJIyXlsyP tGu/1f4zIbesLWqsGAM/UuBd/3uFk33Z5pKdhEoUSqHR53R68iGVFZxuEj0lXPXz KVjwzezS54V8m8pB9Dw1YLz1FRF/soRr -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:59 2025 by rpki-client