$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: 3oTI3ELkDmEObKQu4TR/hHmtLHa87UtBKgnOrU3WG9Q= Subject key identifier: 64:E7:AB:0B:3D:A0:FF:8B:CA:06:DD:18:AD:67:5E:07:EE:30:4F:B6 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 031A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 0316 Signing time: Sun 19 Oct 2025 03:12:33 +0000 Manifest this update: Sun 19 Oct 2025 03:12:32 +0000 Manifest next update: Sun 26 Oct 2025 03:12:32 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: kSmJJY8bhjkXCg5qUL8K3XqfMwqua3RpBSiJO5JH6us=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Oct 19 03:12:32 2025 GMT Not After : Oct 26 03:12:32 2025 GMT Subject: CN=68f45720-c509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:18:ed:8a:eb:8a:54:07:1a:75:94:bf:e8: d1:11:2d:85:47:43:4f:7f:19:aa:11:cd:27:18:f8: e7:f3:4d:7d:71:7e:8c:40:2e:f3:dd:f8:08:d3:7a: fe:13:bf:f2:fd:03:df:43:9c:55:8e:f5:f2:15:f6: 5f:e9:09:2b:8e:f1:6c:7a:05:41:c2:ea:8b:49:31: a7:42:17:13:d8:3f:ba:2c:7f:43:9f:3c:07:16:80: 47:3d:d2:e1:73:cd:77:81:fa:74:6a:04:06:3d:15: 92:69:05:76:55:97:64:ba:a2:bc:8b:44:d4:6b:bb: 40:0e:80:ae:33:55:5d:b4:63:55:4d:e0:b9:51:51: 45:b8:d2:e0:d7:71:3b:44:38:12:45:31:6d:43:28: a1:d4:94:cf:2f:91:f8:95:86:d3:74:27:9d:7a:b8: 27:35:38:67:8d:a3:ae:64:ce:8f:ae:b8:3c:2a:56: b7:10:e8:90:2d:8f:39:3b:2b:e0:91:99:9f:00:3f: c1:83:53:d4:9f:6b:d0:75:37:ab:bf:00:8e:f4:56: 6b:4c:77:91:53:c7:c4:28:78:30:0b:91:99:5f:ad: 2f:55:58:77:63:38:ae:0d:65:37:74:26:ef:58:f0: fe:75:70:70:f9:32:3a:f7:59:8b:53:1d:66:67:01: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E7:AB:0B:3D:A0:FF:8B:CA:06:DD:18:AD:67:5E:07:EE:30:4F:B6 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9a:39:da:59:76:8e:c1:cb:c6:63:0a:a5:a8:50:5d:f1:8b: 4b:c7:5a:11:90:8c:29:96:31:ff:76:6c:be:73:5d:62:83:4e: d8:85:9c:ff:69:6d:53:78:d7:39:fc:cc:e7:24:cb:e5:6c:3a: 3a:ea:ca:ce:92:2f:e0:8a:86:7c:88:0a:f6:87:4e:33:21:4b: c9:b1:9f:33:a6:81:17:c4:ef:19:cb:3a:83:2f:dd:77:0c:d6: 1e:b9:07:27:7c:75:90:fc:03:ec:de:c4:82:9a:5e:a7:28:f5: 00:03:51:a6:68:0f:5f:67:7a:a0:c2:9b:18:f0:c8:0c:8d:c4: 82:be:41:97:f6:cd:ed:ac:f1:34:1f:20:bf:ff:d0:1f:6f:18: f5:06:5e:d1:00:60:38:1e:18:1a:70:e5:0c:68:60:52:62:3a: ca:8e:23:e4:0b:97:bd:f5:ca:f4:09:0a:21:b1:9a:2b:aa:f4: 31:e2:b3:61:10:98:ee:85:82:96:d7:09:de:39:11:1e:66:01: ee:aa:f3:99:2d:2e:f1:10:9e:81:77:2d:ff:de:9b:cf:ca:41: 5e:86:c5:f3:bf:f7:a5:46:fd:67:b6:06:f4:d6:bd:c1:8b:40: af:8d:7e:03:fc:3b:40:fe:98:20:fc:68:dd:91:26:14:eb:a9: ce:cf:26:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUxMDE5MDMxMjMyWhcNMjUxMDI2MDMxMjMyWjAYMRYwFAYD VQQDEw02OGY0NTcyMC1jNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BcY7YrrilQHGnWUv+jRES2FR0NPfxmqEc0nGPjn8019cX6MQC7z3fgI03r+ E7/y/QPfQ5xVjvXyFfZf6QkrjvFsegVBwuqLSTGnQhcT2D+6LH9DnzwHFoBHPdLh c813gfp0agQGPRWSaQV2VZdkuqK8i0TUa7tADoCuM1VdtGNVTeC5UVFFuNLg13E7 RDgSRTFtQyih1JTPL5H4lYbTdCedergnNThnjaOuZM6Prrg8Kla3EOiQLY85Oyvg kZmfAD/Bg1PUn2vQdTervwCO9FZrTHeRU8fEKHgwC5GZX60vVVh3YziuDWU3dCbv WPD+dXBw+TI691mLUx1mZwESiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTnqws9 oP+LygbdGK1nXgfuME+2MB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBamjnaWXaOwcvGYwqlqFBd8YtLx1oRkIwpljH/dmy+c11ig07YhZz/ aW1TeNc5/MznJMvlbDo66srOki/gioZ8iAr2h04zIUvJsZ8zpoEXxO8ZyzqDL913 DNYeuQcnfHWQ/APs3sSCml6nKPUAA1GmaA9fZ3qgwpsY8MgMjcSCvkGX9s3trPE0 HyC//9Afbxj1Bl7RAGA4HhgacOUMaGBSYjrKjiPkC5e99cr0CQohsZorqvQx4rNh EJjuhYKW1wneOREeZgHuqvOZLS7xEJ6Bdy3/3pvPykFehsXzv/elRv1ntgb01r3B i0CvjX4D/DtA/pgg/GjdkSYU66nOzybw -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:32 2025 by rpki-client