$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: Sw10xNwHY7bQO5jImzVDYJan5opj7LvzdymL+aMm9Us= Subject key identifier: 52:1B:85:8E:FC:90:F8:91:5C:01:3C:C7:55:82:DB:D1:AD:13:A6:2F Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 026B Signing time: Sun 19 Oct 2025 03:53:49 +0000 Manifest this update: Sun 19 Oct 2025 03:53:48 +0000 Manifest next update: Sun 26 Oct 2025 03:53:48 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: b7XWAXW11bXaSAHItfoFqNFSSc2+8NLqPzfKkDYovqM=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Oct 19 03:53:48 2025 GMT Not After : Oct 26 03:53:48 2025 GMT Subject: CN=68f460cc-f56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:d2:6e:6b:6f:ec:32:3f:c7:34:0c:df:88: c6:fe:fa:6d:3c:30:44:fc:97:b2:45:18:98:8f:c7: 3c:84:2c:05:86:0a:ce:37:52:27:34:f8:32:dc:b8: fe:31:31:4e:49:60:c6:98:f3:5a:51:9a:ff:08:8e: 96:57:69:c6:c4:44:c8:4c:0d:8d:6f:69:27:d1:f2: d0:63:de:61:14:3e:d3:9a:b7:47:f2:d1:2d:d0:0f: 31:10:95:bb:24:16:dd:92:a9:97:08:e3:9b:eb:54: e5:8e:72:d6:70:63:e9:d2:39:74:e4:1d:c8:38:f5: 4c:df:83:48:e6:0e:21:f7:49:f4:f5:0a:ab:5b:d2: 6e:20:77:e0:c7:c9:99:cd:71:b8:0e:96:a0:46:04: 29:47:86:c6:bb:52:d5:f7:92:f8:79:6d:41:fb:76: c9:04:ce:2d:31:55:8e:04:30:ea:ec:fb:bb:4d:fe: 0d:97:5a:49:80:d6:24:1d:7b:bf:ef:bb:fa:25:59: 01:b3:2b:29:82:8a:4e:07:ac:c3:ea:25:73:05:f0: 7b:06:00:94:b2:de:14:60:41:2b:41:1c:26:8a:c6: 13:88:d2:be:0f:0d:67:91:bd:db:3c:f0:cd:7c:33: 5f:c4:b6:ca:90:b8:73:f0:b0:30:04:b1:50:75:85: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1B:85:8E:FC:90:F8:91:5C:01:3C:C7:55:82:DB:D1:AD:13:A6:2F X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ca:d0:f9:47:a6:2e:6e:70:8c:2b:b0:b8:89:f5:be:95:b2: 8d:e1:bb:d8:97:37:6d:78:ea:e0:67:23:7b:cb:ac:30:11:9e: 2e:ed:41:9b:f3:ce:af:cb:77:11:6e:58:dd:84:41:02:0b:cb: 4a:65:19:9a:58:48:10:22:b0:21:c1:78:cc:aa:57:db:83:7f: 45:b4:88:d9:a5:0b:ac:07:86:03:d5:a1:b4:23:c0:51:a5:ae: 3a:e9:1d:3d:45:d7:f1:c1:4a:a3:80:bc:ff:b4:fc:57:c5:5a: 85:ba:8d:5c:53:3a:24:00:05:28:69:d8:19:33:3a:29:cf:4d: 3b:0c:ad:ce:9a:fc:e5:12:90:6c:91:6c:e8:36:42:00:0d:25: 9c:30:79:38:48:97:b4:42:34:eb:4f:13:0c:e3:71:ef:cb:38: be:7d:6b:aa:e8:a8:9a:be:18:d3:2e:dd:38:81:81:6f:c8:6d: 8c:d7:ee:69:b4:ff:f6:31:25:5e:7b:3b:b0:67:83:d3:49:fb: 9f:7b:82:ca:ef:7b:3e:28:38:29:17:9c:76:f1:7d:4e:ec:28: b6:62:06:23:9f:83:77:2d:55:e1:2a:3f:51:67:42:fd:73:64: 76:ab:3d:cb:b3:d5:5a:ae:31:40:a0:80:40:29:aa:11:c5:12: f9:65:02:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUxMDE5MDM1MzQ4WhcNMjUxMDI2MDM1MzQ4WjAYMRYwFAYD VQQDEw02OGY0NjBjYy1mNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLTSbmtv7DI/xzQM34jG/vptPDBE/JeyRRiYj8c8hCwFhgrON1InNPgy3Lj+ MTFOSWDGmPNaUZr/CI6WV2nGxETITA2Nb2kn0fLQY95hFD7TmrdH8tEt0A8xEJW7 JBbdkqmXCOOb61TljnLWcGPp0jl05B3IOPVM34NI5g4h90n09QqrW9JuIHfgx8mZ zXG4DpagRgQpR4bGu1LV95L4eW1B+3bJBM4tMVWOBDDq7Pu7Tf4Nl1pJgNYkHXu/ 77v6JVkBsyspgopOB6zD6iVzBfB7BgCUst4UYEErQRwmisYTiNK+Dw1nkb3bPPDN fDNfxLbKkLhz8LAwBLFQdYX0YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIbhY78 kPiRXAE8x1WC29GtE6YvMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoytD5R6YubnCMK7C4ifW+lbKN4bvYlzdteOrgZyN7y6wwEZ4u7UGb 886vy3cRbljdhEECC8tKZRmaWEgQIrAhwXjMqlfbg39FtIjZpQusB4YD1aG0I8BR pa466R09RdfxwUqjgLz/tPxXxVqFuo1cUzokAAUoadgZMzopz007DK3OmvzlEpBs kWzoNkIADSWcMHk4SJe0QjTrTxMM43Hvyzi+fWuq6KiavhjTLt04gYFvyG2M1+5p tP/2MSVeezuwZ4PTSfufe4LK73s+KDgpF5x28X1O7Ci2YgYjn4N3LVXhKj9RZ0L9 c2R2qz3Ls9VarjFAoIBAKaoRxRL5ZQJ5 -----END CERTIFICATE-----Generated at Mon Oct 20 14:33:54 2025 by rpki-client