$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: 27KYXGHAPr6KLhmcsmNlZWaP3s4wbIzo4PLJR6ev2UY= Subject key identifier: BF:DA:CF:D9:A4:49:84:44:D7:98:B3:B8:D2:C5:91:9E:9A:72:26:D8 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 01E8 Signing time: Sun 19 Oct 2025 05:24:33 +0000 Manifest this update: Sun 19 Oct 2025 05:24:33 +0000 Manifest next update: Sun 26 Oct 2025 05:24:33 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: qmP3x9gGvQJf8lHf1n7FOQEwJjJsQBnPYESOjk1InUY=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: k3HEJ9wvbu9ApcNN6SolNcyih9kgJ7eIKA9lpd9mU50=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Oct 19 05:24:33 2025 GMT Not After : Oct 26 05:24:33 2025 GMT Subject: CN=68f47611-675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6d:50:f8:29:8f:b3:7d:5a:14:81:41:00:58: c0:76:98:62:b2:8c:4e:7c:16:51:9d:86:61:9d:6a: 24:73:49:07:7b:69:22:b1:26:aa:79:1b:5a:0b:ae: 72:0e:81:8e:b1:46:c5:a0:08:1a:b9:a4:0a:92:9f: d8:d7:f9:f7:0d:0d:d8:c5:53:79:84:00:11:83:8f: 82:16:30:71:29:34:b2:ae:cc:8b:b1:5f:53:e9:04: c4:d2:11:fc:e6:a9:3f:b9:41:b4:4e:91:ba:ba:d5: f4:3c:d9:9c:c9:10:16:50:14:61:82:27:1e:25:4d: e5:c2:7f:d0:9c:92:01:9b:53:ca:42:96:41:0e:99: 0b:af:e1:da:5f:12:2e:2c:d1:96:bc:9f:44:c1:5e: 3f:df:ea:80:2e:1d:56:ee:93:9f:f2:c8:0b:d3:09: c6:46:d8:8c:42:be:f8:d0:36:00:88:b0:fc:6a:d1: 6d:44:79:8a:60:30:70:1c:62:5b:e5:1d:7e:bb:71: 3a:35:8d:b1:15:8a:27:01:12:20:cf:97:d2:33:64: da:9a:3a:f8:35:ad:35:1b:86:c7:1a:10:9b:d9:a8: 94:61:69:d4:03:9f:2f:cb:6a:aa:b2:35:9d:82:25: ba:b4:ed:8b:6e:73:7b:f5:37:ea:77:86:ac:67:d8: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DA:CF:D9:A4:49:84:44:D7:98:B3:B8:D2:C5:91:9E:9A:72:26:D8 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1b:db:38:15:c9:b2:44:af:3e:2e:d7:84:ca:9b:73:7e:d7: 18:c3:b2:3b:0e:e6:1c:be:2d:91:bf:bf:0e:8a:5a:c6:a0:9f: 07:09:ae:ea:44:80:f1:39:f4:68:f7:c0:9c:25:89:e3:8a:e3: c5:64:b4:95:7d:5a:4b:c5:7e:11:05:09:85:77:33:2c:7b:c8: 4e:09:30:94:21:a5:4a:3f:e3:c6:01:66:42:f3:f4:42:54:8e: f3:5a:f2:93:bd:fc:7b:23:d2:3d:6b:05:45:8f:90:97:13:ce: d9:89:ed:07:93:66:74:dc:93:da:ed:f1:e0:46:22:2a:26:79: 10:df:b2:6d:0e:85:b6:c3:10:56:e2:5f:84:9f:4a:03:26:86: 15:31:0b:e1:ca:ca:25:bd:ce:ee:96:55:f8:21:20:97:ff:94: 95:66:7b:9e:e1:4f:79:ea:20:91:3d:0f:0e:9c:77:81:f3:d0: f5:a8:0d:4a:f7:ba:66:af:da:cf:e4:2c:8d:58:99:58:d5:d1: 63:19:13:9b:14:87:f5:fc:5e:cf:d1:8c:20:a7:8e:d5:db:62: e9:e0:18:c4:4f:e6:9d:58:f1:eb:c9:c8:94:e2:05:8c:13:11: e2:6f:8e:df:78:40:d0:5d:45:58:f6:18:19:eb:c2:2e:cc:11: f5:bc:ae:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUxMDE5MDUyNDMzWhcNMjUxMDI2MDUyNDMzWjAYMRYwFAYD VQQDEw02OGY0NzYxMS02NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+G1Q+CmPs31aFIFBAFjAdphisoxOfBZRnYZhnWokc0kHe2kisSaqeRtaC65y DoGOsUbFoAgauaQKkp/Y1/n3DQ3YxVN5hAARg4+CFjBxKTSyrsyLsV9T6QTE0hH8 5qk/uUG0TpG6utX0PNmcyRAWUBRhgiceJU3lwn/QnJIBm1PKQpZBDpkLr+HaXxIu LNGWvJ9EwV4/3+qALh1W7pOf8sgL0wnGRtiMQr740DYAiLD8atFtRHmKYDBwHGJb 5R1+u3E6NY2xFYonARIgz5fSM2Tamjr4Na01G4bHGhCb2aiUYWnUA58vy2qqsjWd giW6tO2LbnN79Tfqd4asZ9jz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/az9mk SYRE15izuNLFkZ6acibYMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiG9s4FcmyRK8+LteEyptzftcYw7I7DuYcvi2Rv78OilrGoJ8HCa7q RIDxOfRo98CcJYnjiuPFZLSVfVpLxX4RBQmFdzMse8hOCTCUIaVKP+PGAWZC8/RC VI7zWvKTvfx7I9I9awVFj5CXE87Zie0Hk2Z03JPa7fHgRiIqJnkQ37JtDoW2wxBW 4l+En0oDJoYVMQvhysolvc7ullX4ISCX/5SVZnue4U956iCRPQ8OnHeB89D1qA1K 97pmr9rP5CyNWJlY1dFjGRObFIf1/F7P0Ywgp47V22Lp4BjET+adWPHryciU4gWM ExHib47feEDQXUVY9hgZ68IuzBH1vK4V -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:17 2025 by rpki-client