$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: ph0kcWDsn1BVqvEuZ8PiZd3LJjauzWOg73Ck4/1jWDo= Subject key identifier: BC:6C:52:FE:78:38:08:3A:04:FD:CC:7C:9F:1C:49:A7:87:17:B9:FC Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 016C Signing time: Wed 05 Nov 2025 04:03:12 +0000 Manifest this update: Wed 05 Nov 2025 04:03:12 +0000 Manifest next update: Wed 12 Nov 2025 04:03:12 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: AvOXbEhyO4r44swpi67Bw6v75lU5QTvmyNE8JtxozJk=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Nov 5 04:03:12 2025 GMT Not After : Nov 12 04:03:12 2025 GMT Subject: CN=690acc80-9240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:bc:e1:1c:a7:4c:4d:ef:aa:23:ad:97:91: 16:9c:67:7e:f4:ab:2a:9f:da:2f:b9:5b:46:dc:1b: 12:a0:b8:80:c9:e4:0e:0f:6b:0f:4a:83:35:ae:e6: 26:19:0b:d9:b1:4f:1f:1d:90:bc:f1:51:e2:2a:dd: e9:41:c5:2f:d2:70:bb:95:b0:bf:5e:68:7e:3b:bf: 45:74:3d:b4:fa:0d:10:8f:86:bf:93:cf:ad:89:c6: da:46:57:d5:42:de:a9:6e:d9:69:15:a5:b2:b4:79: 1a:ce:3e:f4:d6:d5:8c:8b:5e:c1:59:4b:84:9f:8d: 6a:b2:b3:51:2b:06:6b:9a:ec:b3:cf:46:f3:ca:81: 99:66:ec:1b:55:ca:19:bb:61:7f:18:5d:b1:76:6d: c6:65:3b:7e:69:57:72:f7:d2:da:ee:5b:93:56:37: 2b:90:a2:fa:70:81:3b:10:5c:46:fb:34:62:b4:26: 97:c8:ee:0e:db:d8:70:a5:bf:b9:3c:a6:39:30:2a: 86:b2:2a:10:6f:15:65:1b:ad:65:b1:7e:a1:16:b9: 46:f5:8d:33:53:46:39:80:f5:47:b4:ce:cc:ee:fc: f2:77:d6:f8:98:1a:b7:e1:9f:9e:8a:ce:6c:5c:25: 09:62:c6:00:a8:d5:ab:32:2a:30:7d:31:6d:6a:38: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:52:FE:78:38:08:3A:04:FD:CC:7C:9F:1C:49:A7:87:17:B9:FC X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0f:78:9b:bc:5b:1b:fd:fd:ec:46:f0:2e:e4:98:b2:d9:1c: 1a:96:1a:8d:af:91:ae:a6:bd:5e:41:c2:57:c2:9f:76:3b:1c: b8:9f:34:c5:23:9f:a0:bc:0e:54:8e:9c:d5:b8:70:14:9d:b1: 50:2e:d1:33:1e:a2:02:5f:94:ee:9f:a3:a6:d3:49:27:2c:a5: 81:33:eb:9b:9d:f4:b4:b3:c0:4c:64:11:97:19:fa:4f:34:7b: 15:c1:f1:ce:d7:99:07:3b:8c:65:a6:14:d6:a8:73:40:69:77: ca:8e:2a:84:a7:42:d0:37:92:06:6a:f1:97:13:b9:50:8e:04: b9:55:ed:49:a5:42:3f:b3:37:05:93:65:0a:76:77:d8:0c:e5: dd:32:50:8d:d8:11:a8:f5:0a:43:5c:28:b6:da:1f:a6:82:5f: de:39:bf:64:55:f8:ba:af:c0:8e:9d:0e:2b:1d:cb:3c:b3:1b: f6:81:24:c5:44:80:01:74:d4:5b:21:65:8b:5d:0f:62:cc:70: 38:81:ea:a8:1e:bc:b1:ab:93:c5:bf:ff:d2:05:d9:8f:c4:3f: af:bc:a6:6e:f3:50:96:d3:07:09:63:e3:d8:46:b0:67:fb:21: 22:5c:64:8a:d0:ce:10:1e:7a:4f:db:c5:df:0c:4c:be:b4:1a: 24:ef:e5:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUxMTA1MDQwMzEyWhcNMjUxMTEyMDQwMzEyWjAYMRYwFAYD VQQDEw02OTBhY2M4MC05MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxi84RynTE3vqiOtl5EWnGd+9Ksqn9ovuVtG3BsSoLiAyeQOD2sPSoM1ruYm GQvZsU8fHZC88VHiKt3pQcUv0nC7lbC/Xmh+O79FdD20+g0Qj4a/k8+ticbaRlfV Qt6pbtlpFaWytHkazj701tWMi17BWUuEn41qsrNRKwZrmuyzz0bzyoGZZuwbVcoZ u2F/GF2xdm3GZTt+aVdy99La7luTVjcrkKL6cIE7EFxG+zRitCaXyO4O29hwpb+5 PKY5MCqGsioQbxVlG61lsX6hFrlG9Y0zU0Y5gPVHtM7M7vzyd9b4mBq34Z+eis5s XCUJYsYAqNWrMiowfTFtajh31wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxsUv54 OAg6BP3MfJ8cSaeHF7n8MB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTD3ibvFsb/f3sRvAu5Jiy2RwalhqNr5Gupr1eQcJXwp92Oxy4nzTF I5+gvA5UjpzVuHAUnbFQLtEzHqICX5Tun6Om00knLKWBM+ubnfS0s8BMZBGXGfpP NHsVwfHO15kHO4xlphTWqHNAaXfKjiqEp0LQN5IGavGXE7lQjgS5Ve1JpUI/szcF k2UKdnfYDOXdMlCN2BGo9QpDXCi22h+mgl/eOb9kVfi6r8COnQ4rHcs8sxv2gSTF RIABdNRbIWWLXQ9izHA4geqoHryxq5PFv//SBdmPxD+vvKZu81CW0wcJY+PYRrBn +yEiXGSK0M4QHnpP28XfDEy+tBok7+WR -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:02 2025 by rpki-client