$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: JweCTbyqD3Hud5yUYsQMS4cHAZtsQegMz5ycDsQyowk= Subject key identifier: B8:8A:09:93:1D:D9:4D:0E:F9:F8:19:C8:75:3C:24:EB:1E:7B:F9:02 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 5A Signing time: Mon 03 Nov 2025 07:07:28 +0000 Manifest this update: Mon 03 Nov 2025 07:07:28 +0000 Manifest next update: Mon 10 Nov 2025 07:07:28 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: e/DBtVpXyBHUQpIv8arLugxVnFYyHK7AScKDIgnE4YY=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Nov 3 07:07:28 2025 GMT Not After : Nov 10 07:07:28 2025 GMT Subject: CN=690854b0-1ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:c9:90:6d:81:c6:20:a3:78:d9:3c:f8:23: e4:24:71:bd:05:76:87:97:35:39:b4:f0:f7:68:a3: c3:8d:4f:39:ee:4a:8e:18:d7:0d:cc:38:7c:3f:0b: 90:89:7f:d8:a1:0a:fb:51:a9:cc:1b:cb:78:f6:2f: ef:75:f8:5c:79:bb:7b:7e:19:59:6f:47:0c:89:3f: a0:83:c5:8c:48:fc:8d:dd:a1:a6:8a:1e:2f:f1:bf: d6:df:73:22:a7:b0:6c:a3:89:c1:18:88:6c:20:15: a2:fe:76:93:7f:5f:86:02:0c:e0:ec:45:4c:44:2e: e1:19:5b:44:ef:ac:f7:d8:1f:eb:0b:f1:e0:e8:2d: e8:7c:7f:a9:f4:ca:ca:3b:51:51:8f:3f:c1:14:34: ed:1f:0e:4e:e5:ec:df:05:1a:de:0b:28:4f:c3:95: ba:18:44:17:28:20:61:29:e8:aa:f5:70:12:8d:51: c7:1d:a2:cf:3a:47:c4:c2:d7:de:58:16:e1:08:50: 90:33:ba:2c:76:3f:39:11:26:9a:3d:d8:72:f1:16: 93:67:35:90:7a:2e:29:b8:78:19:24:d2:f2:a6:7d: 18:3a:43:63:93:ad:f6:28:eb:48:21:a6:9d:a6:f3: 30:ab:ca:21:6c:cc:36:07:95:7e:6f:f3:44:77:70: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8A:09:93:1D:D9:4D:0E:F9:F8:19:C8:75:3C:24:EB:1E:7B:F9:02 X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:95:07:52:98:49:63:ae:ab:b3:4b:ea:10:81:e0:93:b3:1a: 24:e2:36:1c:5a:ca:da:2c:94:0a:b9:04:3f:57:8a:7c:76:67: e6:d2:56:f2:01:a0:fb:60:da:38:d4:af:c6:f6:b5:d4:94:f8: 5c:5e:22:6f:dd:8c:ef:fb:12:a3:c0:df:ad:2b:d3:cb:e3:46: 50:25:f8:a6:0a:39:a0:d9:50:70:ac:2b:02:0d:a7:ca:fd:27: c8:8b:65:02:c2:a1:cb:91:37:6e:5d:ca:11:e7:22:f4:e3:94: 19:dc:05:09:be:ad:5a:b8:77:57:4f:c3:2d:5c:b4:c2:56:b8: a8:3d:b1:52:5d:0e:70:a5:5a:0f:12:ee:6d:76:4a:b3:60:57: 22:67:e3:58:04:ea:7a:8b:e0:e6:85:0b:e2:d1:e5:cd:89:57: a4:25:b9:01:3f:a6:b5:56:ab:a4:37:68:b0:d4:64:82:68:d1: 1f:50:79:6e:58:cd:dd:47:17:df:ba:61:a7:8e:e1:fc:3d:7e: d7:f7:91:97:f6:27:14:12:45:fa:a8:ae:14:94:17:57:33:9d: b4:3e:d6:e0:28:6a:e7:37:0e:42:42:fd:a6:ce:48:c1:95:0f: a6:c2:6c:50:3a:cf:c0:ea:9b:5b:2b:2e:2f:0c:3c:1b:52:5d: 09:a2:80:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoRDlEMUIwNTVGRUZDODlGNTgwM0E3RkE4RTJCOTAyNjE5 RjMzOEQ4RTAeFw0yNTExMDMwNzA3MjhaFw0yNTExMTAwNzA3MjhaMBgxFjAUBgNV BAMTDTY5MDg1NGIwLTFhZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC38MmQbYHGIKN42Tz4I+Qkcb0FdoeXNTm08Pdoo8ONTznuSo4Y1w3MOHw/C5CJ f9ihCvtRqcwby3j2L+91+Fx5u3t+GVlvRwyJP6CDxYxI/I3doaaKHi/xv9bfcyKn sGyjicEYiGwgFaL+dpN/X4YCDODsRUxELuEZW0TvrPfYH+sL8eDoLeh8f6n0yso7 UVGPP8EUNO0fDk7l7N8FGt4LKE/DlboYRBcoIGEp6Kr1cBKNUccdos86R8TC195Y FuEIUJAzuix2PzkRJpo92HLxFpNnNZB6Lim4eBkk0vKmfRg6Q2OTrfYo60ghpp2m 8zCryiFszDYHlX5v80R3cBXlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuIoJkx3Z TQ75+BnIdTwk6x57+QIwHwYDVR0jBBgwFoAU2dGwVf78ifWAOn+o4rkCYZ8zjY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0IwOUNCRDY2MkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRHd1ZmNzhpZldBT24tbzRya0NZWjh6alk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0IwOUNCRDY2MkM2NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZX QU9uLW80cmtDWVo4empZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFeVB1KYSWOuq7NL6hCB4JOzGiTiNhxaytoslAq5BD9Xinx2Z+bSVvIB oPtg2jjUr8b2tdSU+FxeIm/djO/7EqPA360r08vjRlAl+KYKOaDZUHCsKwINp8r9 J8iLZQLCocuRN25dyhHnIvTjlBncBQm+rVq4d1dPwy1ctMJWuKg9sVJdDnClWg8S 7m12SrNgVyJn41gE6nqL4OaFC+LR5c2JV6QluQE/prVWq6Q3aLDUZIJo0R9QeW5Y zd1HF9+6YaeO4fw9ftf3kZf2JxQSRfqorhSUF1cznbQ+1uAoauc3DkJC/abOSMGV D6bCbFA6z8Dqm1srLi8MPBtSXQmigBg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:44 2025 by rpki-client