$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: sceR21+nQDFuc3hRriTBT2LlJ/g9o5JnMqQeUBSlmJU= Subject key identifier: E3:19:21:7E:54:62:7D:75:30:16:43:C3:8F:3E:40:22:97:78:A2:71 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 01F5 Signing time: Sun 19 Oct 2025 04:49:38 +0000 Manifest this update: Sun 19 Oct 2025 04:49:38 +0000 Manifest next update: Sun 26 Oct 2025 04:49:38 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: a55wXgPH2sB317N4faDxxTNf985EF8/Dq6USrJ+M88Q=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Oct 19 04:49:38 2025 GMT Not After : Oct 26 04:49:38 2025 GMT Subject: CN=68f46de2-b855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:c4:86:a5:bb:35:36:d1:7a:4d:0c:90:6c: d9:99:02:f0:72:dc:12:ad:9a:4c:f6:c2:b1:8b:b9: 69:19:ac:11:30:00:ca:89:2e:d4:af:af:59:56:53: 1a:02:4a:41:02:80:6d:f9:b9:bd:0e:3c:22:ce:be: 6c:96:f7:1d:ce:4a:67:a7:e2:68:fa:4c:5b:55:d7: 1e:c4:83:7a:d3:d4:6c:b6:d5:dd:c7:b5:62:ef:c9: 01:6d:d0:ed:8a:bc:ff:c9:6e:fd:a8:9c:54:ca:90: cd:d0:eb:4d:d3:39:6f:93:fc:58:d0:c6:6d:65:91: 79:6c:5d:de:aa:c7:f4:16:b6:71:df:d3:ad:01:ba: 58:57:cb:fb:45:f8:ca:17:93:9d:9f:37:41:8b:78: ac:a9:bb:22:ad:3b:1a:32:a4:db:6a:f4:61:08:e6: 10:44:11:a1:63:b5:47:22:05:ff:6a:35:a5:23:4f: 33:08:3d:9a:12:5b:3e:21:2d:21:0b:b4:45:27:6d: 0c:9b:86:7e:5c:39:da:0f:3c:cb:24:08:ea:0f:a9: 6c:75:18:66:c0:36:07:94:a0:8e:1e:50:6a:5a:d9: 12:73:a9:ed:cb:be:4a:9b:83:55:a1:68:cc:28:1c: 25:98:f5:a6:75:d9:d4:04:50:40:31:99:c2:a9:e4: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:21:7E:54:62:7D:75:30:16:43:C3:8F:3E:40:22:97:78:A2:71 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:af:43:54:f9:db:fb:d8:26:27:e5:a9:d9:e4:a9:2e:94:93: 24:1e:f4:33:fd:e8:03:f8:62:3a:5e:92:2b:78:df:a9:b5:52: d3:c2:92:3e:c4:e6:fc:8a:9c:1c:4d:de:c2:55:6c:93:8b:1f: 9e:2e:53:1c:eb:d9:af:78:41:d7:4b:5c:d5:9f:94:72:a1:8e: 66:e5:8a:49:b7:0a:c7:49:79:e2:81:1b:ee:cb:84:8d:e8:a8: 47:e3:a7:6d:3d:58:d5:27:d2:f2:6c:52:88:4d:4a:2e:03:b4: 2c:98:73:d4:ab:dc:59:ab:39:6d:45:a4:92:88:30:5a:0e:93: 7a:bb:27:9c:91:ca:dc:30:db:aa:ce:b1:34:5b:61:2e:e5:ae: b6:ad:92:03:6e:19:ae:a5:99:f3:d4:ec:9b:4d:7d:46:ff:e2: 26:bc:91:47:c3:4e:29:4c:88:29:a3:3a:a4:11:9a:98:b8:b3: a9:62:7c:3d:89:43:d3:ea:31:f0:f2:00:65:bf:8d:a4:76:ac: f6:94:14:e5:00:bf:0e:16:30:da:81:d7:06:3d:31:75:c1:f1: 04:56:26:fa:af:0c:26:6e:96:2c:66:9d:76:cc:15:10:d4:e2: eb:55:ea:6e:7a:41:94:1e:88:df:58:24:64:e9:a2:0e:d6:b7: 95:f7:ad:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUxMDE5MDQ0OTM4WhcNMjUxMDI2MDQ0OTM4WjAYMRYwFAYD VQQDEw02OGY0NmRlMi1iODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqHEhqW7NTbRek0MkGzZmQLwctwSrZpM9sKxi7lpGawRMADKiS7Ur69ZVlMa AkpBAoBt+bm9Djwizr5slvcdzkpnp+Jo+kxbVdcexIN609RsttXdx7Vi78kBbdDt irz/yW79qJxUypDN0OtN0zlvk/xY0MZtZZF5bF3eqsf0FrZx39OtAbpYV8v7RfjK F5OdnzdBi3isqbsirTsaMqTbavRhCOYQRBGhY7VHIgX/ajWlI08zCD2aEls+IS0h C7RFJ20Mm4Z+XDnaDzzLJAjqD6lsdRhmwDYHlKCOHlBqWtkSc6nty75Km4NVoWjM KBwlmPWmddnUBFBAMZnCqeSTAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMZIX5U Yn11MBZDw48+QCKXeKJxMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCr0NU+dv72CYn5anZ5KkulJMkHvQz/egD+GI6XpIreN+ptVLTwpI+ xOb8ipwcTd7CVWyTix+eLlMc69mveEHXS1zVn5RyoY5m5YpJtwrHSXnigRvuy4SN 6KhH46dtPVjVJ9LybFKITUouA7QsmHPUq9xZqzltRaSSiDBaDpN6uyeckcrcMNuq zrE0W2Eu5a62rZIDbhmupZnz1OybTX1G/+ImvJFHw04pTIgpozqkEZqYuLOpYnw9 iUPT6jHw8gBlv42kdqz2lBTlAL8OFjDagdcGPTF1wfEEVib6rwwmbpYsZp12zBUQ 1OLrVepuekGUHojfWCRk6aIO1reV963x -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:14 2025 by rpki-client