$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: xhbDDUplI7TKzSk6D+xtaxlkzYpZYLP4x6CQkIxrmUM= Subject key identifier: 01:5B:0A:D5:36:9D:E9:E7:4D:76:19:87:33:67:89:8D:71:92:B2:24 Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E65 Signing time: Sat 18 Oct 2025 18:23:41 +0000 Manifest this update: Sat 18 Oct 2025 18:23:40 +0000 Manifest next update: Sat 25 Oct 2025 18:23:40 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: nUke0r7FThDZi8CuWVmCogSVsU4PeuGVWpjsna1OIm8=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Oct 18 18:23:40 2025 GMT Not After : Oct 25 18:23:40 2025 GMT Subject: CN=68f3db2d-1549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:cb:36:fa:9b:f7:fd:64:28:92:47:60:31: 70:3c:8f:6c:d1:d5:95:a1:d5:8f:eb:25:53:78:95: 34:12:9e:2e:ae:5a:30:dc:f5:ba:ac:22:3f:5d:5e: 98:6c:8e:36:6d:f5:ae:1f:16:c8:9c:3a:fb:63:82: 7b:96:0d:21:c4:be:08:c2:f0:85:f3:02:bd:73:72: 73:15:cb:80:e0:83:e3:2d:6a:d0:fc:9e:65:a7:39: fd:15:4f:33:c6:b1:e5:55:1a:31:22:50:98:c2:cf: cd:1c:e0:dc:e3:fe:61:f6:40:8f:ee:3d:d4:bf:ad: 76:c8:22:c2:26:88:96:b8:b2:ad:98:28:77:b6:8e: 77:1c:42:5c:92:64:a0:65:ae:d5:83:90:32:f2:9c: d3:5c:1b:28:20:9e:13:55:17:4d:37:69:63:f2:d4: 88:b8:dd:9c:be:d3:af:2c:06:bf:5e:f6:70:c3:24: e7:0b:9c:11:b6:ba:16:75:9f:08:66:0e:c5:bd:ac: 03:f6:da:3e:f0:8e:a1:75:b9:87:fe:cf:09:bf:93: da:3b:d6:f7:15:a9:4d:e1:20:19:90:65:39:28:a6: b5:c8:69:8d:40:b1:98:0f:a1:12:10:11:e3:bf:97: b7:25:5b:63:24:f0:4c:45:f8:ee:0c:69:16:cd:7c: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:0A:D5:36:9D:E9:E7:4D:76:19:87:33:67:89:8D:71:92:B2:24 X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:85:a4:ca:69:fd:cd:d9:7c:f5:2a:ad:7a:bc:a6:0a:2a:f4: 51:d8:e5:34:63:55:bb:50:df:6b:cf:c9:bb:b2:71:00:9e:07: 1f:39:e2:d0:0c:97:31:81:14:7d:53:1c:fd:15:65:56:83:c2: ec:fa:3d:93:0c:88:54:ac:09:ec:72:39:ba:92:a1:fd:0b:f7: 85:e9:ad:95:4f:11:e2:15:14:1b:10:24:0e:4a:bd:fc:56:ea: aa:7f:08:d1:3c:e4:6a:10:e2:cd:8a:c1:bd:19:8c:60:62:5a: fa:07:a9:a1:f2:18:b0:99:21:0f:75:92:1e:02:d0:15:27:e3: c7:6f:a3:db:19:4b:5c:5d:61:c8:1f:2f:48:a6:ea:fd:c2:e5: 76:2e:c7:eb:9e:03:80:3f:3c:62:03:22:c0:36:d9:8a:92:f8: fd:10:18:6e:ee:e6:d3:4f:c4:b2:e3:31:99:3b:71:c3:cb:60: 14:63:8d:9f:8c:c1:5f:7d:26:c3:40:a6:35:c0:b5:a9:09:de: 63:f9:cd:39:c2:85:2f:16:e3:78:09:70:25:e2:a5:e2:a4:96: d2:9e:82:f1:4c:06:03:d5:fd:8c:af:65:e7:c5:96:7d:5a:b3: f7:23:ee:39:b5:89:1a:d6:f6:48:af:bd:da:4e:76:2c:9b:c2: 15:78:da:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUxMDE4MTgyMzQwWhcNMjUxMDI1MTgyMzQwWjAYMRYwFAYD VQQDEw02OGYzZGIyZC0xNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuILLNvqb9/1kKJJHYDFwPI9s0dWVodWP6yVTeJU0Ep4urlow3PW6rCI/XV6Y bI42bfWuHxbInDr7Y4J7lg0hxL4IwvCF8wK9c3JzFcuA4IPjLWrQ/J5lpzn9FU8z xrHlVRoxIlCYws/NHODc4/5h9kCP7j3Uv612yCLCJoiWuLKtmCh3to53HEJckmSg Za7Vg5Ay8pzTXBsoIJ4TVRdNN2lj8tSIuN2cvtOvLAa/XvZwwyTnC5wRtroWdZ8I Zg7FvawD9to+8I6hdbmH/s8Jv5PaO9b3FalN4SAZkGU5KKa1yGmNQLGYD6ESEBHj v5e3JVtjJPBMRfjuDGkWzXxoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFbCtU2 nennTXYZhzNniY1xkrIkMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhaTKaf3N2Xz1Kq16vKYKKvRR2OU0Y1W7UN9rz8m7snEAngcfOeLQ DJcxgRR9Uxz9FWVWg8Ls+j2TDIhUrAnscjm6kqH9C/eF6a2VTxHiFRQbECQOSr38 VuqqfwjRPORqEOLNisG9GYxgYlr6B6mh8hiwmSEPdZIeAtAVJ+PHb6PbGUtcXWHI Hy9Ipur9wuV2LsfrngOAPzxiAyLANtmKkvj9EBhu7ubTT8Sy4zGZO3HDy2AUY42f jMFffSbDQKY1wLWpCd5j+c05woUvFuN4CXAl4qXipJbSnoLxTAYD1f2Mr2XnxZZ9 WrP3I+45tYka1vZIr73aTnYsm8IVeNoR -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:21 2025 by rpki-client