$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: NW9Y1GkbdULrtBjc65Z8zbmft9CCh4Y+7ndmCDD5ITw= Subject key identifier: 4D:FE:8C:40:32:8B:5B:07:D0:CB:B2:C7:5F:71:01:3C:CD:2D:A5:D6 Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 0257 Signing time: Sun 19 Oct 2025 03:57:48 +0000 Manifest this update: Sun 19 Oct 2025 03:57:47 +0000 Manifest next update: Sun 26 Oct 2025 03:57:47 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: mb4so4lH0UiengmNSrsUwDpUDooYJe88i2sVG/HKM3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: Oct 19 03:57:47 2025 GMT Not After : Oct 26 03:57:47 2025 GMT Subject: CN=68f461bc-6032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:05:6a:d8:08:83:ff:3f:bc:e8:d1:a9:88: e8:0a:57:a5:1b:92:1d:b9:60:52:52:fd:ba:85:84: 90:a4:6f:ba:35:f9:26:cb:78:ca:6e:28:a0:6c:b5: 4a:d8:6e:1d:be:c4:68:86:22:88:41:60:26:b5:5d: 77:47:6a:83:34:d8:31:b3:f0:61:5b:0d:12:fd:43: c7:65:58:cd:df:f2:b6:86:59:54:7f:0d:c3:79:9e: 12:1d:56:ae:70:6d:07:a1:b0:3e:6c:66:15:10:1c: aa:99:1a:1a:75:1b:5c:eb:ff:e0:87:73:54:54:c9: 44:2d:8f:a7:94:8a:ea:38:1d:07:59:bf:75:25:39: fa:02:04:84:0d:a8:cb:c5:3d:ba:e9:65:98:bd:1b: 8a:33:62:51:ae:4e:46:69:f6:d0:62:27:a0:7d:94: e6:cf:61:23:83:82:53:72:ab:d8:a9:7f:0d:61:f2: 97:f4:e2:f3:0d:55:de:ff:c4:19:ae:89:29:dc:da: f3:d2:84:06:7e:ea:7a:48:4e:30:67:a9:a6:90:12: f4:80:dc:d9:37:4c:25:34:ef:8c:c1:b2:73:c3:e1: 27:33:5a:8d:26:b5:ff:ed:c6:00:4e:4b:bc:77:2b: ee:2a:b7:94:de:54:4d:6a:1f:75:cc:04:82:19:95: 1a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FE:8C:40:32:8B:5B:07:D0:CB:B2:C7:5F:71:01:3C:CD:2D:A5:D6 X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:00:28:53:35:28:85:b4:8a:cc:dc:c1:b1:08:40:eb:49:33: 4d:d5:87:00:b2:bf:e8:58:fc:07:8a:31:8b:21:6d:8b:2c:fb: cb:51:04:3f:38:63:6a:a7:3e:a7:e4:87:cc:06:19:2b:89:e0: aa:7f:f5:24:5e:eb:af:22:97:57:b3:fa:2b:cd:c5:fb:a1:35: 5d:c7:57:b9:5b:4a:15:84:29:35:88:66:77:be:d6:f8:5e:4b: 1d:5b:9b:cb:6d:c6:c3:62:f3:3b:6f:6b:0a:57:15:8a:26:75: 4d:c5:bf:3f:ee:7e:3c:07:c4:cc:3c:7d:20:c5:fa:34:88:9a: ab:f6:9b:f4:ab:8e:74:b8:88:ff:75:5f:43:9c:b1:ff:89:94: c6:dd:ab:6c:33:01:e6:7e:d7:27:9c:c5:ab:76:66:82:f1:a5: 78:b5:ec:c1:c7:b0:7d:72:ad:55:81:d7:8b:db:41:c5:9a:95: 83:ec:d7:dd:74:84:3f:2b:eb:74:13:5b:3e:03:28:20:ff:0d: a6:53:be:a8:29:06:7a:9b:79:a7:f4:44:55:37:ce:8b:9d:46: e7:88:72:42:d6:10:5b:6e:db:8d:d9:3a:95:a0:cf:41:f7:44: 2e:73:e8:09:e0:85:14:ee:72:d0:11:06:0e:45:60:3a:1d:3c: 80:c6:64:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjUxMDE5MDM1NzQ3WhcNMjUxMDI2MDM1NzQ3WjAYMRYwFAYD VQQDEw02OGY0NjFiYy02MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAUFatgIg/8/vOjRqYjoClelG5IduWBSUv26hYSQpG+6Nfkmy3jKbiigbLVK 2G4dvsRohiKIQWAmtV13R2qDNNgxs/BhWw0S/UPHZVjN3/K2hllUfw3DeZ4SHVau cG0HobA+bGYVEByqmRoadRtc6//gh3NUVMlELY+nlIrqOB0HWb91JTn6AgSEDajL xT266WWYvRuKM2JRrk5GafbQYiegfZTmz2Ejg4JTcqvYqX8NYfKX9OLzDVXe/8QZ rokp3Nrz0oQGfup6SE4wZ6mmkBL0gNzZN0wlNO+MwbJzw+EnM1qNJrX/7cYATku8 dyvuKreU3lRNah91zASCGZUa2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3+jEAy i1sH0Muyx19xATzNLaXWMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGAChTNSiFtIrM3MGxCEDrSTNN1YcAsr/oWPwHijGLIW2LLPvLUQQ/ OGNqpz6n5IfMBhkrieCqf/UkXuuvIpdXs/orzcX7oTVdx1e5W0oVhCk1iGZ3vtb4 XksdW5vLbcbDYvM7b2sKVxWKJnVNxb8/7n48B8TMPH0gxfo0iJqr9pv0q450uIj/ dV9DnLH/iZTG3atsMwHmftcnnMWrdmaC8aV4tezBx7B9cq1VgdeL20HFmpWD7Nfd dIQ/K+t0E1s+Aygg/w2mU76oKQZ6m3mn9ERVN86LnUbniHJC1hBbbtuN2TqVoM9B 90Quc+gJ4IUU7nLQEQYORWA6HTyAxmQH -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:26 2025 by rpki-client