$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json) Hash identifier: 0acHQrqT4TKegXt1eEUbfIAA5csMuJlbbuJM2MKgV+U= Subject key identifier: 4C:D7:52:9E:ED:93:ED:AC:06:58:27:C1:91:05:D2:68:2E:66:B6:FE Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Certificate serial: 03B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft Manifest number: 03AF Signing time: Sun 19 Oct 2025 02:42:33 +0000 Manifest this update: Sun 19 Oct 2025 02:42:33 +0000 Manifest next update: Sun 26 Oct 2025 02:42:33 +0000 Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: FaDgUoGT4kgn093rUyGFNWj5+zpQq84i02Eh1uTqC3Y=) 2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: 5JeHEtG1xdKCrCH6rPS3zOfVRTqBs2fv9GJfMUQ9NfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Validity Not Before: Oct 19 02:42:33 2025 GMT Not After : Oct 26 02:42:33 2025 GMT Subject: CN=68f45019-5970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:6e:be:59:c9:90:24:b0:a2:2f:92:9f:9d: f4:f6:b7:d1:52:35:17:44:47:7a:5e:12:4a:8b:c6: 04:33:14:32:db:cc:8e:0e:a3:5a:13:79:64:39:f8: 60:4d:e0:87:08:0d:5a:26:43:fc:de:db:2a:0b:58: 07:99:11:71:de:d6:4e:62:bc:27:3b:07:a9:68:23: 60:41:e9:a9:bd:ce:f6:3f:92:92:a7:15:96:1a:38: 5d:b7:b3:5e:01:2c:e3:f7:c6:70:5c:80:39:39:27: 4c:d6:7d:6b:1a:b3:1e:e1:17:78:bf:1b:b8:a1:e3: 44:4d:81:ac:2f:7c:71:a7:a2:bc:c3:7c:0e:dc:eb: d3:a3:56:be:6d:e6:22:1a:35:73:f1:a5:3c:55:2f: 7a:38:7a:8b:89:a8:c4:57:c0:f5:b6:71:c0:da:bf: ef:8f:9f:dd:d4:4b:de:0f:cc:02:b7:e2:2f:f7:d0: 02:0f:94:7e:b5:4f:86:65:b5:1a:84:fa:56:17:03: 71:72:3f:5d:65:99:d7:5e:cb:83:84:4c:d0:43:7c: fe:ea:be:aa:7d:44:72:5f:d1:3c:36:a3:8b:fd:ea: e8:fe:44:6e:65:b2:ed:23:8e:70:04:ea:79:e5:1b: 01:c6:a4:b8:a5:bb:a4:42:b3:2f:49:7f:42:75:56: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D7:52:9E:ED:93:ED:AC:06:58:27:C1:91:05:D2:68:2E:66:B6:FE X509v3 Authority Key Identifier: keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:73:9b:0e:6a:70:c4:75:d7:65:c4:28:f3:71:62:7e:1a:3b: f8:9d:4c:81:28:89:10:d6:93:41:1d:3e:2d:c9:22:d7:ed:8a: 73:0c:9c:51:35:02:14:8a:5f:58:de:c4:a1:11:e8:f3:81:0a: 96:d6:c4:47:c7:f4:3f:5a:69:6d:29:38:e5:df:a4:73:fe:b4: 51:40:cb:0a:cf:91:e9:27:01:f0:b0:c3:8b:07:d4:05:ea:dc: ca:bd:9a:2f:81:00:9c:35:2d:54:8c:56:28:1d:49:ca:20:59: c8:f5:f2:4a:67:43:fc:54:65:12:14:bc:c6:51:3f:8d:d8:3c: 42:47:a1:b2:1a:ac:89:d9:3b:33:09:9e:08:5b:53:60:f7:36: e2:25:b0:49:44:e5:27:0b:34:c7:af:83:0a:c8:4f:1b:0f:a6: b5:1c:8a:e8:5d:66:34:0f:f3:50:6f:91:fd:4b:42:b8:ba:a2: 50:49:b6:c4:5c:58:a6:42:58:c2:83:87:38:0f:18:21:b1:ee: df:63:1b:69:90:f1:5a:3f:38:99:a1:71:4c:32:76:f8:91:ef: a3:67:b3:b1:7e:57:5f:fc:e3:c5:96:a5:dc:d4:d9:f3:a1:07: d3:b9:20:5d:25:5c:0c:3c:f2:d7:a9:35:ae:af:32:7b:56:a4: d7:ce:5a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5 RDI3QUY0NkIwHhcNMjUxMDE5MDI0MjMzWhcNMjUxMDI2MDI0MjMzWjAYMRYwFAYD VQQDEw02OGY0NTAxOS01OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ9uvlnJkCSwoi+Sn5309rfRUjUXREd6XhJKi8YEMxQy28yODqNaE3lkOfhg TeCHCA1aJkP83tsqC1gHmRFx3tZOYrwnOwepaCNgQempvc72P5KSpxWWGjhdt7Ne ASzj98ZwXIA5OSdM1n1rGrMe4Rd4vxu4oeNETYGsL3xxp6K8w3wO3OvTo1a+beYi GjVz8aU8VS96OHqLiajEV8D1tnHA2r/vj5/d1EveD8wCt+Iv99ACD5R+tU+GZbUa hPpWFwNxcj9dZZnXXsuDhEzQQ3z+6r6qfURyX9E8NqOL/ero/kRuZbLtI45wBOp5 5RsBxqS4pbukQrMvSX9CdVal3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzXUp7t k+2sBlgnwZEF0mguZrb+MB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0 YkpKUzdxVFYwVmFkSjY5R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBec5sOanDEdddlxCjzcWJ+Gjv4nUyBKIkQ1pNBHT4tySLX7YpzDJxR NQIUil9Y3sShEejzgQqW1sRHx/Q/WmltKTjl36Rz/rRRQMsKz5HpJwHwsMOLB9QF 6tzKvZovgQCcNS1UjFYoHUnKIFnI9fJKZ0P8VGUSFLzGUT+N2DxCR6GyGqyJ2Tsz CZ4IW1Ng9zbiJbBJROUnCzTHr4MKyE8bD6a1HIroXWY0D/NQb5H9S0K4uqJQSbbE XFimQljCg4c4Dxghse7fYxtpkPFaPziZoXFMMnb4ke+jZ7Oxfldf/OPFlqXc1Nnz oQfTuSBdJVwMPPLXqTWurzJ7VqTXzlr5 -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:27 2025 by rpki-client