$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: vfU0augDKhr9J7HlBNGhjhbnTbF8bmm0+FCk3KDRNks= Subject key identifier: EB:8E:2A:40:17:DC:E6:1E:69:87:4B:F6:63:9B:44:C5:72:09:A7:3B Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 06C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 06B5 Signing time: Sat 18 Oct 2025 23:41:15 +0000 Manifest this update: Sat 18 Oct 2025 23:41:14 +0000 Manifest next update: Sat 25 Oct 2025 23:41:13 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: 2uCoTfnrPA1GDvzQF8XKgWcv/ZTaItFzDAwecmUeMHw=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: +ggMU5apLM7/E36BO1O5K0i1T6Q0H2I5abkvXaYTrxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Oct 18 23:41:14 2025 GMT Not After : Oct 25 23:41:13 2025 GMT Subject: CN=68f4259a-3d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:28:d9:fd:ea:23:4f:11:9d:c9:fb:20:c8: 7d:1f:31:c0:c4:a0:bb:c9:f2:e0:dd:3b:7d:3a:20: 94:0f:0b:8d:f1:00:2c:4d:cd:70:64:3e:4d:f6:dd: 09:22:25:06:4b:ff:31:c9:d4:ac:7c:08:10:27:45: 5b:5e:f3:bb:e8:08:ed:eb:a1:5b:a9:31:08:5b:48: 26:73:2a:98:0d:4c:4a:28:57:95:a7:f9:68:75:e6: 61:f0:be:a1:91:ea:94:ca:33:9f:66:00:45:eb:43: 0e:07:d9:ed:95:11:bc:c9:a6:2a:f5:80:1c:6f:ab: 86:c4:2a:e5:99:a3:ba:5b:b8:f5:cf:0f:47:c6:f4: 08:40:5f:f4:54:ff:bb:93:f1:a1:16:69:27:23:e8: 26:c4:9b:8a:2c:e2:6e:d7:5a:5c:3f:8e:89:42:f2: e6:fa:6b:ba:5e:de:87:7a:ac:6e:53:62:6f:b6:e8: d8:43:a9:2d:15:56:b3:d0:01:14:b0:4f:07:6b:39: 74:ef:7f:a8:20:33:ff:a1:48:b1:42:9d:9f:23:f1: 7e:4c:1e:20:bc:6c:06:4c:1b:ce:e4:2b:92:99:e8: 83:3a:c2:1a:03:67:8f:41:85:a0:8a:83:cb:c7:a8: c4:99:96:c5:6e:15:68:78:24:43:50:dc:8e:a1:3b: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8E:2A:40:17:DC:E6:1E:69:87:4B:F6:63:9B:44:C5:72:09:A7:3B X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:18:fb:b3:6b:20:69:9c:ad:6a:05:a9:3f:cc:d8:71:80:68: 9f:aa:f2:4b:f0:e5:48:cc:a0:ff:ff:83:ca:f4:61:90:d9:15: 24:7c:a8:33:13:54:09:50:75:d5:7b:0f:32:d3:d0:00:3b:61: 39:69:b0:93:72:b0:38:e1:ff:5c:d6:e3:1d:a2:9d:8f:15:58: d2:b8:c8:5d:83:80:3b:75:f2:83:c7:80:aa:18:b8:73:14:c6: 3a:b9:70:d3:0c:7b:6d:9e:49:2f:28:31:a3:a6:09:8b:ae:d4: 59:e5:13:9d:4a:36:fe:f4:ee:8c:a7:3e:e8:33:02:ac:9a:2f: 99:17:0e:7c:c0:b8:62:f5:c5:df:3c:ea:3a:f5:4e:1b:79:8d: 5d:93:4a:8d:cc:e3:c3:54:e2:61:1f:f7:03:4c:cd:2b:86:e8: f7:bc:a2:55:1a:9e:83:7d:67:ea:f4:69:2b:33:9a:f4:5f:81: 21:d9:56:0a:16:46:9d:71:09:a1:ff:9a:86:16:db:f9:11:95: a7:d0:66:7c:b6:f7:bd:f3:b6:3b:e4:85:4c:6b:32:03:76:80: 5e:6a:59:f6:0a:9e:f6:89:3c:a0:34:a8:83:6f:5b:9c:5e:cd: ac:0e:b0:c2:e2:9e:1f:12:72:3b:08:26:e3:ab:34:0b:5d:45: a2:bd:b4:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUxMDE4MjM0MTE0WhcNMjUxMDI1MjM0MTEzWjAYMRYwFAYD VQQDEw02OGY0MjU5YS0zZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4a8o2f3qI08Rncn7IMh9HzHAxKC7yfLg3Tt9OiCUDwuN8QAsTc1wZD5N9t0J IiUGS/8xydSsfAgQJ0VbXvO76Ajt66FbqTEIW0gmcyqYDUxKKFeVp/lodeZh8L6h keqUyjOfZgBF60MOB9ntlRG8yaYq9YAcb6uGxCrlmaO6W7j1zw9HxvQIQF/0VP+7 k/GhFmknI+gmxJuKLOJu11pcP46JQvLm+mu6Xt6HeqxuU2JvtujYQ6ktFVaz0AEU sE8Hazl073+oIDP/oUixQp2fI/F+TB4gvGwGTBvO5CuSmeiDOsIaA2ePQYWgioPL x6jEmZbFbhVoeCRDUNyOoTvcowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuOKkAX 3OYeaYdL9mObRMVyCac7MB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKGPuzayBpnK1qBak/zNhxgGifqvJL8OVIzKD//4PK9GGQ2RUkfKgz E1QJUHXVew8y09AAO2E5abCTcrA44f9c1uMdop2PFVjSuMhdg4A7dfKDx4CqGLhz FMY6uXDTDHttnkkvKDGjpgmLrtRZ5ROdSjb+9O6Mpz7oMwKsmi+ZFw58wLhi9cXf POo69U4beY1dk0qNzOPDVOJhH/cDTM0rhuj3vKJVGp6DfWfq9GkrM5r0X4Eh2VYK FkadcQmh/5qGFtv5EZWn0GZ8tve987Y75IVMazIDdoBealn2Cp72iTygNKiDb1uc Xs2sDrDC4p4fEnI7CCbjqzQLXUWivbQH -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:10 2025 by rpki-client