$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: NtZRkVRIReHuWQPn7/pH1fn6e1LT/Z4j31a17CUvrOE= Subject key identifier: 09:73:69:EF:19:39:7A:43:BB:46:EC:B3:A2:3C:85:10:F6:08:D2:93 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 0379 Signing time: Sun 19 Oct 2025 02:53:07 +0000 Manifest this update: Sun 19 Oct 2025 02:53:07 +0000 Manifest next update: Sun 26 Oct 2025 02:53:07 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: IhevdNH8SV8Vs8v/MCXBJiPzo1Z/JCkP9h7Rf4GDAfw=) 2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: 2bcV6GxsWp02/25GPOOyDI2TUUeSbqzzvJgPU+rv3Lc=) 3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: S/3id5/GrdHISWrodbVNvQaLLsQVLmIkD0brgywz+oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Oct 19 02:53:07 2025 GMT Not After : Oct 26 02:53:07 2025 GMT Subject: CN=68f45293-476d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:f0:90:43:3d:88:ea:6a:ed:03:76:35:f4: 36:71:ed:b0:b9:fb:0d:05:d7:01:0c:d5:0c:05:e6: ed:b0:4a:a5:8b:39:ef:a9:30:f9:60:40:6d:ef:4e: f7:3c:04:32:db:27:2e:71:29:ff:9b:64:13:b3:ee: 15:42:9f:14:4a:b9:25:5c:52:42:28:c2:e9:d2:71: d8:57:20:50:b1:60:1c:34:d3:e1:1c:69:3f:52:5e: 8f:79:e5:19:bf:2e:f1:b9:a9:66:14:96:1c:ec:8c: 9e:2b:43:45:57:d3:7f:f2:65:f1:0c:a2:f2:bf:1a: dc:19:d7:db:99:5f:8e:ad:fa:33:3a:43:7a:1d:a6: 7c:b3:73:87:bd:3a:4c:90:27:be:26:85:1e:67:7c: 71:8e:c9:d2:8c:a2:72:e8:9c:fc:7f:98:92:da:22: 5b:54:af:7e:4f:bc:43:65:91:81:bf:a4:27:24:6d: 57:bb:f8:92:58:3f:71:ce:8d:76:64:0e:49:82:98: a1:53:71:27:63:b8:17:06:f5:ac:c6:84:97:17:77: 7b:58:7b:a3:86:fc:ee:ac:1f:b4:06:ec:60:2d:2e: 16:e6:ff:04:b2:ab:74:b9:28:44:c6:8b:90:10:fb: 62:44:5b:29:2a:1b:23:65:09:d1:da:a7:93:a2:68: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:73:69:EF:19:39:7A:43:BB:46:EC:B3:A2:3C:85:10:F6:08:D2:93 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ea:25:43:bd:96:df:0a:60:b2:61:0f:21:88:0c:1a:7b:ed: a2:74:9c:8a:10:09:d1:f4:d3:27:da:89:ee:b3:3e:69:a8:85: 68:93:8d:7b:b7:98:21:36:3a:c0:c7:6f:55:94:5c:d4:7f:7e: d4:95:a8:f3:0e:0e:ad:ef:7a:f5:38:bf:ce:11:ad:6e:4a:34: 70:c5:43:6c:1b:b8:29:35:19:fe:9a:26:fe:6f:a6:c6:56:8e: 6b:21:c5:26:cc:8a:32:b2:87:4b:cb:eb:62:f3:c6:1d:c0:35: f9:16:25:f6:c3:98:2e:71:bc:d9:64:9f:f9:64:25:2d:76:73: c9:c8:8b:a9:d5:00:da:ce:eb:7c:23:cb:ad:77:78:90:4b:a8: 5d:67:ba:a1:37:15:72:3a:37:c8:2e:9d:cc:ad:4a:6b:a7:30: 7d:5f:d8:7b:d7:9a:4b:79:66:3f:b2:26:58:c3:51:c8:81:58: 22:03:d8:24:d8:9c:34:78:b8:70:95:0d:da:42:80:c0:07:2c: 6e:f2:bc:f2:93:11:42:b0:88:34:ae:47:93:71:37:0c:d0:5d: c5:2c:9a:9e:6f:24:5a:8e:f7:a6:cc:f4:fe:28:47:00:48:1c: 22:57:f4:6b:f5:17:0d:4c:6b:20:c7:9e:fb:ff:46:80:09:4d: 93:95:57:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjUxMDE5MDI1MzA3WhcNMjUxMDI2MDI1MzA3WjAYMRYwFAYD VQQDEw02OGY0NTI5My00NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF7wkEM9iOpq7QN2NfQ2ce2wufsNBdcBDNUMBebtsEqliznvqTD5YEBt7073 PAQy2ycucSn/m2QTs+4VQp8USrklXFJCKMLp0nHYVyBQsWAcNNPhHGk/Ul6PeeUZ vy7xualmFJYc7IyeK0NFV9N/8mXxDKLyvxrcGdfbmV+OrfozOkN6HaZ8s3OHvTpM kCe+JoUeZ3xxjsnSjKJy6Jz8f5iS2iJbVK9+T7xDZZGBv6QnJG1Xu/iSWD9xzo12 ZA5JgpihU3EnY7gXBvWsxoSXF3d7WHujhvzurB+0BuxgLS4W5v8Esqt0uShExouQ EPtiRFspKhsjZQnR2qeTomggZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlzae8Z OXpDu0bss6I8hRD2CNKTMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA6iVDvZbfCmCyYQ8hiAwae+2idJyKEAnR9NMn2onusz5pqIVok417 t5ghNjrAx29VlFzUf37UlajzDg6t73r1OL/OEa1uSjRwxUNsG7gpNRn+mib+b6bG Vo5rIcUmzIoysodLy+ti88YdwDX5FiX2w5gucbzZZJ/5ZCUtdnPJyIup1QDazut8 I8utd3iQS6hdZ7qhNxVyOjfILp3MrUprpzB9X9h715pLeWY/siZYw1HIgVgiA9gk 2Jw0eLhwlQ3aQoDAByxu8rzykxFCsIg0rkeTcTcM0F3FLJqebyRajvemzPT+KEcA SBwiV/Rr9RcNTGsgx577/0aACU2TlVcS -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:59 2025 by rpki-client