$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: rKjdN/N95tl8KldGidb9TfZbCyYBvErrydWs/L/Qkfg= Subject key identifier: BF:BD:94:3D:32:32:FE:6C:E7:4A:E1:BE:04:99:4B:D8:21:04:2B:00 Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 0621 Signing time: Tue 04 Nov 2025 22:52:26 +0000 Manifest this update: Tue 04 Nov 2025 22:52:25 +0000 Manifest next update: Tue 11 Nov 2025 22:52:25 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: Iflq01U9fdnvy1r5xvLFJCTbrxfonDVlzL4fOtsfIYI=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: JTt1lcwJJ/VlJRR1mPyJ+td5e5c2alDgtGmRBoxCA5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Nov 4 22:52:25 2025 GMT Not After : Nov 11 22:52:25 2025 GMT Subject: CN=690a83aa-1fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:c0:8d:1b:4b:ce:0b:9b:78:5a:51:5d:01: 81:ca:cd:df:68:54:01:e3:f8:f2:5e:1d:df:ef:14: c4:4c:ee:e4:cb:d7:b3:fc:3b:a1:48:64:90:cc:f5: f4:4b:d4:90:d6:ac:a5:b5:ba:73:04:6f:0f:aa:3e: 7b:e4:6b:21:82:08:ed:4f:03:e3:3b:51:36:cb:ec: c2:8b:1d:3f:6f:3a:75:bf:b9:fb:49:d7:84:c9:f4: 03:1d:a8:46:30:e0:11:22:4f:7c:f8:fe:d3:82:5f: 84:a7:b3:a6:04:7a:7a:36:75:d7:99:99:06:13:77: f6:c8:31:43:1c:85:ad:d6:67:17:aa:fb:36:35:6d: 32:6a:a9:1d:5a:3a:fc:dd:08:d8:d8:73:b4:18:45: 25:f9:46:29:a4:9e:7c:27:79:76:bb:9b:15:bf:43: 92:04:10:cb:5f:27:8d:ac:0b:5f:4f:af:48:64:e9: df:32:04:00:e1:01:10:74:f2:2e:77:5f:42:ae:b3: 53:c6:e9:15:25:3c:69:ec:1b:f2:77:61:1d:7d:fa: e7:9d:77:be:be:5d:89:37:32:c7:ec:fb:34:87:a8: d8:1a:84:36:36:70:63:bb:65:9b:74:d0:8d:fd:a4: 11:26:5e:41:58:71:18:19:4c:d2:74:df:07:97:92: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BD:94:3D:32:32:FE:6C:E7:4A:E1:BE:04:99:4B:D8:21:04:2B:00 X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:02:e0:f1:47:fc:d3:fb:13:ca:d9:8e:58:64:91:41:dd:4b: 54:c3:ea:a3:02:e2:29:0a:92:81:40:a8:d9:62:e0:ec:d2:c9: 5e:a7:11:93:49:1e:1b:35:8c:70:01:7c:90:a1:70:c3:fc:15: 4a:ff:62:c0:b5:23:a4:81:ea:3f:6c:43:34:33:c7:6c:86:a5: 23:8c:4a:1b:dd:05:b3:18:27:d8:b8:2c:28:2c:34:19:77:94: 2e:d0:21:67:df:83:a5:e8:9b:65:4b:a0:f2:83:ac:13:36:96: fa:89:4c:b6:79:3c:03:ee:9d:5f:26:56:43:05:51:3e:f4:8f: 3e:06:c8:af:b0:9e:3d:c5:8f:cd:d6:ff:7b:8b:48:11:7d:e1: 8d:4c:97:42:fa:70:0b:61:b1:8d:7d:4f:e3:a2:88:da:20:f1: 49:06:61:99:78:c2:0f:9a:ae:c1:40:d6:0e:1b:c3:03:8f:ac: bf:c5:b3:4b:75:18:02:2f:6d:cc:86:f1:b5:ad:7b:17:79:5e: d9:8b:dc:26:b2:6f:93:0f:dc:01:46:73:e3:45:3f:c5:90:64: 96:50:10:37:58:eb:d1:ae:b2:1b:2a:3b:c0:7f:1c:89:55:9d: be:45:f9:69:2f:7d:57:14:7b:ab:70:81:b9:51:a0:d4:23:4e: d0:a5:f8:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjUxMTA0MjI1MjI1WhcNMjUxMTExMjI1MjI1WjAYMRYwFAYD VQQDEw02OTBhODNhYS0xZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdjAjRtLzgubeFpRXQGBys3faFQB4/jyXh3f7xTETO7ky9ez/DuhSGSQzPX0 S9SQ1qyltbpzBG8Pqj575GshggjtTwPjO1E2y+zCix0/bzp1v7n7SdeEyfQDHahG MOARIk98+P7Tgl+Ep7OmBHp6NnXXmZkGE3f2yDFDHIWt1mcXqvs2NW0yaqkdWjr8 3QjY2HO0GEUl+UYppJ58J3l2u5sVv0OSBBDLXyeNrAtfT69IZOnfMgQA4QEQdPIu d19CrrNTxukVJTxp7Bvyd2EdffrnnXe+vl2JNzLH7Ps0h6jYGoQ2NnBju2WbdNCN /aQRJl5BWHEYGUzSdN8Hl5J8tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+9lD0y Mv5s50rhvgSZS9ghBCsAMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCAuDxR/zT+xPK2Y5YZJFB3UtUw+qjAuIpCpKBQKjZYuDs0slepxGT SR4bNYxwAXyQoXDD/BVK/2LAtSOkgeo/bEM0M8dshqUjjEob3QWzGCfYuCwoLDQZ d5Qu0CFn34Ol6JtlS6Dyg6wTNpb6iUy2eTwD7p1fJlZDBVE+9I8+BsivsJ49xY/N 1v97i0gRfeGNTJdC+nALYbGNfU/joojaIPFJBmGZeMIPmq7BQNYOG8MDj6y/xbNL dRgCL23MhvG1rXsXeV7Zi9wmsm+TD9wBRnPjRT/FkGSWUBA3WOvRrrIbKjvAfxyJ VZ2+RflpL31XFHurcIG5UaDUI07Qpfht -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:29 2025 by rpki-client