$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: NgAug/oH1SOGko9wo/F7aN8gkPWMnGhn7sumhzl158g= Subject key identifier: 14:8A:C6:7F:66:74:B6:9E:3E:F0:41:05:FF:37:E2:72:76:C8:DC:D1 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0C57 Signing time: Tue 04 Nov 2025 18:07:15 +0000 Manifest this update: Tue 04 Nov 2025 18:07:14 +0000 Manifest next update: Tue 11 Nov 2025 18:07:14 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: c/Iyp2w4QqtmkTmElZDGCDYfbiLkB0UoRzhf4QjG468=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: QRoywFWHXAug9pKBi9YxGY/9TL/+S30Eoh/rpvCNFc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Nov 4 18:07:14 2025 GMT Not After : Nov 11 18:07:14 2025 GMT Subject: CN=690a40d3-797c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:9c:b9:4b:7e:35:f1:63:54:cc:f7:7e:c8: 4b:a1:b1:e4:2b:03:c1:9c:c1:c4:2e:64:25:34:11: 2e:51:24:ff:f0:dd:50:2a:34:be:ac:ee:e3:f3:cb: 4f:75:1c:ee:13:b6:3d:1b:44:73:10:a4:f9:d8:56: 6d:51:04:f1:b7:14:a2:c3:3b:22:20:db:6b:9f:b1: a1:83:77:7a:db:6f:56:a2:66:aa:e6:d8:41:9f:2f: 9c:52:b6:23:6f:3d:a4:34:0a:cf:e4:f8:61:05:f1: 2c:a9:70:c0:4b:3c:cd:80:31:00:93:f3:28:d0:06: 03:32:ed:f7:93:75:37:65:4b:00:5b:25:75:51:29: 97:44:ec:f8:dc:d1:59:40:05:6e:87:3b:9d:32:f1: ac:04:5a:5a:79:91:b6:01:eb:17:65:02:fd:d7:5f: cd:93:2b:d0:e2:b8:05:3f:f7:1c:f4:e5:97:44:9d: 32:5a:a3:20:7f:c7:6a:07:ff:de:6b:4d:64:5f:e9: 85:45:0b:66:c0:8f:75:cb:63:eb:33:b0:44:4a:d9: 17:37:d7:5e:30:65:cd:f0:cd:05:0e:12:42:dd:df: 76:93:8c:c8:c7:9f:b4:dd:32:e3:bd:30:a3:c8:f5: 46:15:2e:e1:ce:95:aa:2e:e0:5a:cc:85:53:5c:6b: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8A:C6:7F:66:74:B6:9E:3E:F0:41:05:FF:37:E2:72:76:C8:DC:D1 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:60:ba:3e:90:13:ee:14:51:e0:a7:b1:95:26:e1:76:c1:f6: 95:3d:3e:c5:9b:bf:08:5b:a2:b6:f7:e3:ca:a3:91:95:04:da: ab:da:c4:3a:5b:0b:a4:90:f9:18:94:f8:d2:6c:eb:26:af:a2: d3:c1:a7:24:6c:7b:21:a4:ce:be:f4:1a:52:e0:05:f7:6a:15: 18:66:a4:1d:ad:b3:90:c0:26:44:ec:93:6c:67:3f:c4:85:08: f0:fa:d6:2c:eb:9d:52:03:9a:0a:1a:03:f3:c6:37:6c:ab:e8: 1e:5c:a6:5b:ba:8d:b8:cf:2a:5c:cc:eb:ac:93:8a:f4:11:13: b4:a2:10:88:99:03:85:1e:4f:e9:27:2e:15:ca:8c:cf:59:40: a2:5a:56:96:56:94:81:d6:43:ec:bc:61:cd:68:aa:28:fd:6e: f2:6b:b5:87:55:18:23:e7:02:91:53:f1:8f:d2:d6:35:78:1c: eb:b6:55:84:f0:69:57:ca:ad:05:37:7b:69:0b:26:8b:eb:55: de:31:69:1e:55:bf:54:65:40:57:93:39:8e:9d:9b:6b:4d:cb: a3:4b:df:6d:64:22:f4:16:31:fd:3d:98:79:18:c0:03:d6:b8: 20:fc:b7:0c:0d:95:4e:6b:6e:d1:8b:30:0a:5d:c8:a4:2e:0b: 0e:9f:6b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjUxMTA0MTgwNzE0WhcNMjUxMTExMTgwNzE0WjAYMRYwFAYD VQQDEw02OTBhNDBkMy03OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8KcuUt+NfFjVMz3fshLobHkKwPBnMHELmQlNBEuUST/8N1QKjS+rO7j88tP dRzuE7Y9G0RzEKT52FZtUQTxtxSiwzsiINtrn7Ghg3d6229Womaq5thBny+cUrYj bz2kNArP5PhhBfEsqXDASzzNgDEAk/Mo0AYDMu33k3U3ZUsAWyV1USmXROz43NFZ QAVuhzudMvGsBFpaeZG2AesXZQL911/NkyvQ4rgFP/cc9OWXRJ0yWqMgf8dqB//e a01kX+mFRQtmwI91y2PrM7BEStkXN9deMGXN8M0FDhJC3d92k4zIx5+03TLjvTCj yPVGFS7hzpWqLuBazIVTXGvWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSKxn9m dLaePvBBBf834nJ2yNzRMB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsYLo+kBPuFFHgp7GVJuF2wfaVPT7Fm78IW6K29+PKo5GVBNqr2sQ6 WwukkPkYlPjSbOsmr6LTwackbHshpM6+9BpS4AX3ahUYZqQdrbOQwCZE7JNsZz/E hQjw+tYs651SA5oKGgPzxjdsq+geXKZbuo24zypczOusk4r0ERO0ohCImQOFHk/p Jy4VyozPWUCiWlaWVpSB1kPsvGHNaKoo/W7ya7WHVRgj5wKRU/GP0tY1eBzrtlWE 8GlXyq0FN3tpCyaL61XeMWkeVb9UZUBXkzmOnZtrTcujS99tZCL0FjH9PZh5GMAD 1rgg/LcMDZVOa27RizAKXcikLgsOn2t8 -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:32 2025 by rpki-client