$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json) Hash identifier: HA5OODdiODpo2z1l9/e55KAncE7I7fHjpYUniMbWr38= Subject key identifier: C9:AE:8D:64:2F:1E:57:03:66:40:1B:79:EE:0F:48:85:98:9C:78:D8 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1A97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft Manifest number: 1A7C Signing time: Sat 18 Oct 2025 16:41:24 +0000 Manifest this update: Sat 18 Oct 2025 16:41:24 +0000 Manifest next update: Sat 25 Oct 2025 16:41:24 +0000 Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: yMPEoK7uFgvXz+BujPS/1HG20A0Ohd0oAn95miOzTnw=) 2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: iAz8qRk3/H7vOgPRojw19iFmTjtRy8EuUxq8QG7UtTs=) 3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: BhjSntJM5KeISAX/AXFVMKFsUVqLH2ibjtVSQJsKXQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6807 (0x1a97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Oct 18 16:41:24 2025 GMT Not After : Oct 25 16:41:24 2025 GMT Subject: CN=68f3c334-938c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4b:7b:99:6a:a9:37:25:9a:e7:57:c2:46:6c: b5:29:ea:9e:91:dc:2b:97:78:3c:5a:a9:ca:3c:e3: 83:e1:3a:b4:81:c6:03:ed:32:93:4a:82:22:22:8c: 5b:a4:c9:c4:8e:66:ae:c4:8f:b5:e2:2e:3c:52:71: 98:0c:b9:dd:85:3f:20:a9:95:94:21:2c:2a:cf:76: ab:0e:ce:07:fd:41:d6:da:56:29:7e:a0:d8:04:9a: 57:94:e5:3c:3b:30:d1:b9:a2:37:63:e9:02:77:ef: 45:79:34:9d:a9:eb:b0:2d:9e:92:72:8f:ba:8b:be: 04:bb:8a:a3:c5:a0:5d:5f:a4:b9:9e:c2:ed:54:ff: bd:3d:df:3c:30:52:d7:47:62:88:d9:cb:6d:62:e4: a4:94:aa:c4:0b:d0:8d:48:63:56:55:d1:cd:be:ee: 7b:0a:ba:c9:28:e9:e0:8b:1e:87:60:c1:81:41:e0: 5b:ea:c9:83:dc:77:12:e8:16:5d:0c:f7:b6:ce:57: f0:a5:c6:6a:02:d1:be:4c:90:ee:8e:08:e3:eb:98: 0b:ad:d1:15:37:b5:cf:67:11:cd:7c:ad:5b:45:0b: fd:00:88:a0:45:d4:f5:73:ef:ba:dd:e7:30:d6:0f: 12:4c:cb:5d:e7:79:1b:7f:af:74:09:59:61:34:0c: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AE:8D:64:2F:1E:57:03:66:40:1B:79:EE:0F:48:85:98:9C:78:D8 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7b:7b:1e:09:0e:8b:e0:9b:f5:ef:cd:19:f2:4c:3a:2b:0f: fc:30:00:bd:d3:4a:8e:a4:46:02:dc:c2:63:4f:d4:f1:4d:4c: 13:e8:29:d5:62:be:d8:72:f6:98:08:33:2d:d7:29:02:df:bc: f6:c2:d2:ea:69:6b:58:21:90:01:42:3d:54:c9:2e:df:d8:72: b3:fa:70:e2:24:25:c3:ca:1b:05:dd:66:43:bb:c1:6f:ae:ab: 66:b9:4c:16:13:d2:71:40:1b:8d:d2:2b:32:a1:38:82:cf:55: 01:01:d3:1e:49:2e:01:c6:42:18:a4:6e:be:93:7c:ba:2e:c9: 71:4f:36:f7:12:91:40:4d:f8:cf:df:c8:7e:c6:06:48:12:50: 14:03:d9:66:b3:23:2b:ca:f4:b0:34:61:01:e7:55:b0:33:e9: 3f:2a:60:a9:fb:49:e5:3c:ac:52:01:a4:3b:7b:0a:f0:c2:bb: 63:2d:9f:b3:d5:f0:ea:09:09:c3:5c:a5:6b:77:78:ef:b7:ae: 44:c5:ce:e0:ab:0d:01:86:1a:e3:76:26:90:0b:88:46:6f:21: 20:88:47:8f:51:d4:8d:5b:fb:b3:ea:22:85:75:1a:d8:29:c8: 36:39:c3:33:90:d1:08:15:a1:d5:88:30:35:d7:6a:f0:a3:a1: 5f:04:d0:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjUxMDE4MTY0MTI0WhcNMjUxMDI1MTY0MTI0WjAYMRYwFAYD VQQDEw02OGYzYzMzNC05MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kt7mWqpNyWa51fCRmy1Keqekdwrl3g8WqnKPOOD4Tq0gcYD7TKTSoIiIoxb pMnEjmauxI+14i48UnGYDLndhT8gqZWUISwqz3arDs4H/UHW2lYpfqDYBJpXlOU8 OzDRuaI3Y+kCd+9FeTSdqeuwLZ6Sco+6i74Eu4qjxaBdX6S5nsLtVP+9Pd88MFLX R2KI2cttYuSklKrEC9CNSGNWVdHNvu57CrrJKOngix6HYMGBQeBb6smD3HcS6BZd DPe2zlfwpcZqAtG+TJDujgjj65gLrdEVN7XPZxHNfK1bRQv9AIigRdT1c++63ecw 1g8STMtd53kbf690CVlhNAy34QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmujWQv HlcDZkAbee4PSIWYnHjYMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH eHBtbGFiRWdPRWtKV0tveTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfe3seCQ6L4Jv1780Z8kw6Kw/8MAC900qOpEYC3MJjT9TxTUwT6CnV Yr7YcvaYCDMt1ykC37z2wtLqaWtYIZABQj1UyS7f2HKz+nDiJCXDyhsF3WZDu8Fv rqtmuUwWE9JxQBuN0isyoTiCz1UBAdMeSS4BxkIYpG6+k3y6LslxTzb3EpFATfjP 38h+xgZIElAUA9lmsyMryvSwNGEB51WwM+k/KmCp+0nlPKxSAaQ7ewrwwrtjLZ+z 1fDqCQnDXKVrd3jvt65Exc7gqw0BhhrjdiaQC4hGbyEgiEePUdSNW/uz6iKFdRrY Kcg2OcMzkNEIFaHViDA112rwo6FfBNCI -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:33 2025 by rpki-client