$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: RThO74f7vl99Pvv9CxxuFtSYYL4Q/9dFTYbzBlIX3ZE= Subject key identifier: 99:2B:57:7F:1E:1C:B4:D4:9B:8E:66:D0:B9:31:AB:47:A5:6A:23:EC Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 02BF Signing time: Mon 03 Nov 2025 01:23:32 +0000 Manifest this update: Mon 03 Nov 2025 01:23:32 +0000 Manifest next update: Mon 10 Nov 2025 01:23:32 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: L3TKrbhzH61fodB/vdOKJMA+dzfcwwLgwJseKvk4Aqs=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: l25pt6xsGqTRyB7Z9iKfisGtCqvwzSPP/vuUSztNwvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: Nov 3 01:23:32 2025 GMT Not After : Nov 10 01:23:32 2025 GMT Subject: CN=69080414-7e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:0d:cf:37:26:d9:17:cf:44:42:e3:85:34: 24:81:88:c7:46:c2:91:4c:6f:0d:b9:a6:6b:9b:65: f8:ed:aa:bb:0d:d5:6e:7b:2d:71:6a:30:78:70:c9: e3:7b:6c:e3:f8:ba:ce:24:05:05:cf:4a:01:03:1b: ef:d5:f9:dc:bf:4c:31:b2:03:ee:54:5b:43:c0:84: fd:c4:78:3e:5a:32:85:da:8b:df:e1:43:de:b5:12: ba:94:78:fb:2f:c6:67:0c:45:ef:99:cc:a1:2e:fc: 57:73:62:ad:81:ba:44:10:9b:57:41:b8:3a:16:30: bb:5a:20:6a:4e:ae:05:df:8d:f9:ed:a1:5e:ed:d7: 24:7a:f2:e8:40:10:ce:de:27:54:b1:9e:ab:4e:d4: b5:e2:4c:89:c1:8b:fb:9c:cb:f7:ca:12:20:6e:f1: 1e:c0:18:64:66:76:07:75:82:06:14:4c:79:1a:22: f2:88:eb:6b:07:19:3e:cb:1e:dd:71:4f:0c:20:4f: 24:69:65:43:76:63:89:32:1c:88:e9:31:ba:33:69: 6b:cc:45:4b:00:48:4e:48:cb:0e:79:d1:50:ee:67: 64:03:07:3e:95:01:2f:78:06:ae:32:db:7c:aa:6d: e0:8f:d2:bc:d8:28:0a:e3:56:bb:61:7f:44:98:a3: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2B:57:7F:1E:1C:B4:D4:9B:8E:66:D0:B9:31:AB:47:A5:6A:23:EC X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7f:71:57:3b:3a:6b:6f:7d:99:fb:99:ee:a2:7a:22:8c:a7: a6:c3:fc:b6:28:f4:66:8b:d1:9c:df:aa:ae:7e:55:9c:9e:54: c1:e8:e8:ff:aa:b4:23:d9:9b:00:36:36:e6:ea:17:fa:85:a3: c7:17:02:8b:3b:09:a6:1e:1a:fb:a5:0e:cc:e9:61:d4:0e:e4: 2b:59:42:d7:a7:bf:8c:1c:ed:b7:cf:1d:9b:27:7e:03:21:55: 1c:35:bb:b3:67:9e:4a:b3:7a:d4:49:aa:d5:16:68:37:05:05: e5:40:ac:37:ed:68:0b:fc:b0:22:f7:fe:64:bb:72:aa:22:9e: 8f:e0:d3:80:d4:20:61:36:74:94:62:c0:f4:ea:5d:99:7d:af: 31:d7:ea:16:04:a0:1b:3d:95:c7:3f:13:a6:b8:53:48:68:fe: 6e:43:0f:53:ef:57:7c:7e:d1:be:63:b6:5f:5b:c2:be:99:54: 28:38:52:f8:05:14:e1:42:3a:72:cb:d5:0f:ab:f6:27:3e:ba: 4f:bb:5c:b7:c7:28:b8:4e:40:1a:f3:ab:12:9a:24:4e:06:16: 7a:fb:58:13:6a:1e:a0:3c:35:5d:f1:63:a3:87:cc:7c:f6:f6: 68:92:44:fc:16:c5:b1:6a:ed:fb:b1:09:0d:57:f5:17:71:26: 39:78:7b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjUxMTAzMDEyMzMyWhcNMjUxMTEwMDEyMzMyWjAYMRYwFAYD VQQDEw02OTA4MDQxNC03ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgENzzcm2RfPRELjhTQkgYjHRsKRTG8NuaZrm2X47aq7DdVuey1xajB4cMnj e2zj+LrOJAUFz0oBAxvv1fncv0wxsgPuVFtDwIT9xHg+WjKF2ovf4UPetRK6lHj7 L8ZnDEXvmcyhLvxXc2KtgbpEEJtXQbg6FjC7WiBqTq4F34357aFe7dckevLoQBDO 3idUsZ6rTtS14kyJwYv7nMv3yhIgbvEewBhkZnYHdYIGFEx5GiLyiOtrBxk+yx7d cU8MIE8kaWVDdmOJMhyI6TG6M2lrzEVLAEhOSMsOedFQ7mdkAwc+lQEveAauMtt8 qm3gj9K82CgK41a7YX9EmKPtFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkrV38e HLTUm45m0Lkxq0elaiPsMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8f3FXOzprb32Z+5nuonoijKemw/y2KPRmi9Gc36quflWcnlTB6Oj/ qrQj2ZsANjbm6hf6haPHFwKLOwmmHhr7pQ7M6WHUDuQrWULXp7+MHO23zx2bJ34D IVUcNbuzZ55Ks3rUSarVFmg3BQXlQKw37WgL/LAi9/5ku3KqIp6P4NOA1CBhNnSU YsD06l2Zfa8x1+oWBKAbPZXHPxOmuFNIaP5uQw9T71d8ftG+Y7ZfW8K+mVQoOFL4 BRThQjpyy9UPq/YnPrpPu1y3xyi4TkAa86sSmiROBhZ6+1gTah6gPDVd8WOjh8x8 9vZokkT8FsWxau37sQkNV/UXcSY5eHvC -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:23 2025 by rpki-client