$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: 0KOBSGVJ2ouaEq3rJho4fXZN+p4aHqstsedEEWTzxaw= Subject key identifier: C6:C3:D3:9F:88:7D:B4:B4:59:C6:FD:C3:32:08:F0:E3:6F:F6:C0:74 Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 0484 Signing time: Mon 03 Nov 2025 00:01:52 +0000 Manifest this update: Mon 03 Nov 2025 00:01:52 +0000 Manifest next update: Mon 10 Nov 2025 00:01:52 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: dxI9bJyLyWZnHV0Gtn9kHo4xFGXYpkh1F7tB/BtA2Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Nov 3 00:01:52 2025 GMT Not After : Nov 10 00:01:52 2025 GMT Subject: CN=6907f0f0-5ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:11:91:1a:f8:8a:d7:72:ee:1e:2c:03:1d: 34:1c:bf:8c:9a:ca:cd:03:71:53:b2:18:d4:46:fb: ce:41:b4:94:94:ab:15:25:76:53:4f:16:25:59:ca: 10:74:80:cd:9c:cf:b9:d5:07:32:87:87:d2:82:d9: 5e:f6:34:a4:b8:6a:ca:65:96:cc:6b:1e:d7:30:39: e3:e5:18:fa:68:8d:c6:36:c0:f0:c6:91:f3:e0:7c: 6d:ce:79:45:f3:c0:d6:83:20:a5:76:59:bc:da:c2: 61:4c:9f:f1:5a:9e:88:b6:bc:75:88:09:e9:08:36: d5:a8:4a:e1:a9:1a:42:1f:be:2e:99:a2:ce:eb:fd: fb:8f:6c:f4:5a:e8:e9:53:d1:dc:6d:d7:cf:a1:dd: 1f:fd:c9:cb:92:e5:3e:e9:64:a8:78:eb:28:a6:bf: d6:b8:b3:bc:53:29:9c:bd:61:53:c0:3a:71:1b:d7: 15:66:bc:84:85:a9:a3:e3:fc:57:ee:a1:df:9c:f6: 68:88:7e:f5:57:8f:25:a9:26:df:e7:33:bf:28:e3: f5:e2:19:70:a6:d1:cd:19:f2:3d:66:31:75:60:ca: 79:17:27:b5:6a:a6:51:dd:eb:fc:35:d0:f3:e9:2d: c0:91:5c:0c:fc:2c:9c:2c:7e:a6:d1:07:5a:c7:2d: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:D3:9F:88:7D:B4:B4:59:C6:FD:C3:32:08:F0:E3:6F:F6:C0:74 X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ea:15:27:a9:9b:2c:c4:d8:1d:23:a9:df:87:35:2a:97:87: 5e:a8:2b:78:66:06:60:90:f2:e2:81:91:e3:92:0d:4a:c4:fe: e5:12:8a:b0:b2:36:c3:c3:c5:45:a2:bc:ca:7c:53:43:b7:0a: ec:da:c2:0c:01:ae:e3:e0:8c:55:c9:72:85:3b:75:9e:a9:a9: 1d:6e:36:a1:0e:38:81:8b:29:09:68:00:0e:e0:e0:30:27:67: 9d:d0:cf:43:ac:e6:16:89:42:ed:ac:4c:c9:b2:b8:1d:2e:1c: ce:bd:cd:88:91:6c:01:30:ff:28:58:65:3a:95:ab:20:77:44: da:a8:5c:a1:97:4f:8c:82:a3:a4:94:ca:7d:a5:fe:58:3a:ca: 48:d2:7c:08:24:08:33:d4:2f:af:37:61:81:77:59:64:88:65: c3:e4:dd:c1:a9:ff:a9:f8:35:e5:11:54:9d:62:77:de:9a:46: a5:f0:01:d8:c1:f7:1b:ac:29:d4:4b:aa:7a:87:a4:97:cc:0f: f5:df:44:5b:24:cb:e2:a5:16:5e:06:d7:a8:f7:94:a2:ab:2d: 4e:10:29:10:79:e6:e1:2f:47:c9:a4:53:9d:71:5e:81:0d:f3: fb:dc:21:d5:c5:8a:42:fe:ff:58:77:86:a7:ee:bf:a2:de:87: d6:da:4b:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjUxMTAzMDAwMTUyWhcNMjUxMTEwMDAwMTUyWjAYMRYwFAYD VQQDEw02OTA3ZjBmMC01YWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i4RkRr4itdy7h4sAx00HL+MmsrNA3FTshjURvvOQbSUlKsVJXZTTxYlWcoQ dIDNnM+51Qcyh4fSgtle9jSkuGrKZZbMax7XMDnj5Rj6aI3GNsDwxpHz4HxtznlF 88DWgyCldlm82sJhTJ/xWp6Itrx1iAnpCDbVqErhqRpCH74umaLO6/37j2z0Wujp U9HcbdfPod0f/cnLkuU+6WSoeOsopr/WuLO8UymcvWFTwDpxG9cVZryEhamj4/xX 7qHfnPZoiH71V48lqSbf5zO/KOP14hlwptHNGfI9ZjF1YMp5Fye1aqZR3ev8NdDz 6S3AkVwM/CycLH6m0Qdaxy1ktQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbD05+I fbS0Wcb9wzII8ONv9sB0MB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL6hUnqZssxNgdI6nfhzUql4deqCt4ZgZgkPLigZHjkg1KxP7lEoqw sjbDw8VForzKfFNDtwrs2sIMAa7j4IxVyXKFO3WeqakdbjahDjiBiykJaAAO4OAw J2ed0M9DrOYWiULtrEzJsrgdLhzOvc2IkWwBMP8oWGU6lasgd0TaqFyhl0+MgqOk lMp9pf5YOspI0nwIJAgz1C+vN2GBd1lkiGXD5N3Bqf+p+DXlEVSdYnfemkal8AHY wfcbrCnUS6p6h6SXzA/130RbJMvipRZeBteo95Siqy1OECkQeebhL0fJpFOdcV6B DfP73CHVxYpC/v9Yd4an7r+i3ofW2ksw -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:01 2025 by rpki-client