$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft File: 2cZrDkILkTQXPVU9FqoLFGt3R3M.mft (raw, json) Hash identifier: Zf2mM+SvjrXPYFpIdG/0YzYWic23lxYhTX+pSsQNkQg= Subject key identifier: 16:EC:C6:5D:4E:E2:1C:03:93:3F:67:EB:C4:91:B5:8D:8E:6C:6B:BF Authority key identifier: D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 Certificate issuer: /CN=A91B9B0D/serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft Manifest number: 0698 Signing time: Sat 18 Oct 2025 23:50:29 +0000 Manifest this update: Sat 18 Oct 2025 23:50:28 +0000 Manifest next update: Sat 25 Oct 2025 23:50:28 +0000 Files and hashes: 1: 2cZrDkILkTQXPVU9FqoLFGt3R3M.crl (hash: XItFSv7NxhwkGkkog3tMYo1NnjEUV94yuiit6jf+Gbk=) 2: E0147FC48AB811EB92252D18C4F9AE02.roa (hash: 7XRpzi2cKsozsds402vZG1Qa9TevGqVQRP3rG1+mDlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B0D, serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Validity Not Before: Oct 18 23:50:28 2025 GMT Not After : Oct 25 23:50:28 2025 GMT Subject: CN=68f427c5-756d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:75:81:73:e6:df:2c:f2:f3:a5:65:48:c8: 15:75:88:7f:a5:13:a0:21:a9:b0:43:3e:01:ed:d9: 99:e2:3d:08:61:22:76:3d:05:f2:0b:fc:da:63:ca: db:cc:b1:29:52:14:c8:55:8c:d2:c1:21:96:c0:46: d4:5c:21:2a:fb:70:66:52:8f:2a:4a:17:d6:eb:dc: 1f:7f:3e:d6:bd:69:03:93:ea:db:ed:67:d3:b3:ae: d9:3e:09:8a:0c:e2:d0:6c:ff:5f:ba:f8:10:c0:7e: 8c:a9:49:65:25:88:d5:09:b8:a3:9a:31:6b:ba:f0: dd:34:15:9a:6e:0b:56:f0:9a:d3:a3:0e:db:f5:69: 38:03:9e:f9:64:32:1b:51:79:a1:30:d4:88:16:0d: 48:a8:98:36:1b:59:5c:0b:34:23:1d:1f:bb:a1:57: df:33:1e:33:ef:d4:96:86:3f:0b:7b:b4:0d:c4:ed: eb:5e:f7:47:a5:37:7b:27:f3:38:9d:c5:48:5b:2c: 51:35:77:d4:2d:ec:6f:e7:d3:dc:0b:b7:b5:0f:d5: 0b:cd:d5:19:7d:7c:25:f5:0c:dc:0e:55:6c:ba:96: a8:9b:82:e2:cf:03:9f:1c:d5:9e:26:66:0d:e5:6e: 8a:2a:07:a9:e6:38:3c:39:47:c0:f1:e3:2c:1a:08: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EC:C6:5D:4E:E2:1C:03:93:3F:67:EB:C4:91:B5:8D:8E:6C:6B:BF X509v3 Authority Key Identifier: keyid:D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e1:d8:56:91:8b:6c:1a:4e:be:b7:5a:3f:ae:b4:4e:3b:1f: 37:df:7d:46:b3:b4:43:1f:94:e2:8b:a0:79:c6:16:7a:ef:2b: d0:86:67:2f:76:36:e8:e8:57:a3:1f:d0:d4:ac:eb:43:a0:06: 7e:ce:56:7b:11:fc:5e:c9:14:f3:19:8a:61:e8:e4:61:0c:c3: 77:47:8a:19:ae:8e:a8:6c:a4:99:d7:60:0b:84:89:03:37:7e: f2:b3:88:a5:6e:b9:68:7b:e8:c5:19:b9:71:4d:be:55:b2:ba: 34:5c:fd:06:42:ce:69:7d:de:bb:ba:2e:de:3c:8c:0e:00:ec: 86:89:7b:c2:9e:bf:07:7e:83:fb:2e:e7:4b:91:af:4a:59:50: 04:70:08:d7:56:79:00:3d:f6:cc:ac:43:bf:62:df:21:45:30: 2a:cb:77:6b:ae:d7:6d:1c:6c:4b:2f:6c:0b:96:7e:06:a9:62: 3d:42:49:9b:01:88:ad:be:09:d6:8a:d2:83:41:1c:72:99:94: 47:dd:13:6a:18:ff:da:f2:06:f3:7a:5e:ed:17:6f:09:6f:3a: 99:fc:df:2c:e6:dc:9f:2d:c8:7a:78:d2:44:c0:e9:a7:18:2a: ce:9e:c1:aa:95:a6:53:a0:2a:6e:4b:d6:9f:f1:c0:35:53:33: fd:3b:be:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMEQxMTAvBgNVBAUTKEQ5QzY2QjBFNDIwQjkxMzQxNzNENTUzRDE2QUEwQjE0 NkI3NzQ3NzMwHhcNMjUxMDE4MjM1MDI4WhcNMjUxMDI1MjM1MDI4WjAYMRYwFAYD VQQDEw02OGY0MjdjNS03NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMh1gXPm3yzy86VlSMgVdYh/pROgIamwQz4B7dmZ4j0IYSJ2PQXyC/zaY8rb zLEpUhTIVYzSwSGWwEbUXCEq+3BmUo8qShfW69wffz7WvWkDk+rb7WfTs67ZPgmK DOLQbP9fuvgQwH6MqUllJYjVCbijmjFruvDdNBWabgtW8JrTow7b9Wk4A575ZDIb UXmhMNSIFg1IqJg2G1lcCzQjHR+7oVffMx4z79SWhj8Le7QNxO3rXvdHpTd7J/M4 ncVIWyxRNXfULexv59PcC7e1D9ULzdUZfXwl9QzcDlVsupaom4LizwOfHNWeJmYN 5W6KKgep5jg8OUfA8eMsGggeuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbsxl1O 4hwDkz9n68SRtY2ObGu/MB8GA1UdIwQYMBaAFNnGaw5CC5E0Fz1VPRaqCxRrd0dz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIwRC85OEI3MjgwRThB QjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtUUVhQVlU5RnFvTEZHdDNS M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWnJEa0lMa1RRWFBWVTlGcW9MRkd0M1IzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIwRC85OEI3MjgwRThBQjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtU UVhQVlU5RnFvTEZHdDNSM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ4dhWkYtsGk6+t1o/rrROOx83331Gs7RDH5Tii6B5xhZ67yvQhmcv djbo6FejH9DUrOtDoAZ+zlZ7EfxeyRTzGYph6ORhDMN3R4oZro6obKSZ12ALhIkD N37ys4ilbrloe+jFGblxTb5Vsro0XP0GQs5pfd67ui7ePIwOAOyGiXvCnr8HfoP7 LudLka9KWVAEcAjXVnkAPfbMrEO/Yt8hRTAqy3drrtdtHGxLL2wLln4GqWI9Qkmb AYitvgnWitKDQRxymZRH3RNqGP/a8gbzel7tF28JbzqZ/N8s5tyfLch6eNJEwOmn GCrOnsGqlaZToCpuS9af8cA1UzP9O76A -----END CERTIFICATE-----Generated at Tue Oct 21 05:21:41 2025 by rpki-client