$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json) Hash identifier: tSmOpkz9Pbq+2Sm+zXgFT60zRETAddfXSbJD0KCpo+0= Subject key identifier: DF:42:56:8D:2F:FE:CA:07:75:96:9C:75:FA:D4:FC:A2:6F:18:5F:63 Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft Manifest number: 0228 Signing time: Mon 03 Nov 2025 00:38:40 +0000 Manifest this update: Mon 03 Nov 2025 00:38:39 +0000 Manifest next update: Mon 10 Nov 2025 00:38:39 +0000 Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: OmYtZTAuUB4sur4TVSUaUNuRubbp66Dea+1Pgf4V43Y=) 2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: MTvQaAV2j4a15rRSTpoB41scqYTwrnry9bJaizx2K5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Validity Not Before: Nov 3 00:38:39 2025 GMT Not After : Nov 10 00:38:39 2025 GMT Subject: CN=6907f98f-8acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:06:98:35:c8:72:95:f2:5f:13:09:f5:72: 87:dd:5a:c0:14:2b:ce:ba:a1:ca:0a:f6:c0:6a:34: 07:33:01:08:67:ec:4e:4d:21:44:a0:2c:01:2d:d9: 5a:3a:0d:8e:25:f8:06:0c:e9:2b:09:3c:6f:60:66: 11:4f:ca:60:b6:03:df:fc:cb:26:57:c4:fe:2c:71: 25:53:1c:57:c0:3f:74:b2:cf:e2:c3:9a:82:cc:06: 19:82:3b:c7:5a:2e:78:94:32:b4:e6:f4:90:96:b4: d1:ce:e3:9e:ba:c0:c5:56:d3:2c:97:83:9d:49:87: 68:3d:19:55:0c:16:17:1d:12:cd:df:bf:12:c1:86: 5a:9f:d5:68:92:c3:2a:96:6f:9b:b6:3c:83:8c:57: 5e:44:da:fc:bf:cd:7d:c8:a2:9f:3b:02:f8:b9:6c: 32:58:a1:f8:1b:35:a2:0d:6e:6a:db:50:a4:9e:f5: 61:f6:37:70:32:f2:fd:9e:1b:ec:54:e3:39:49:9b: 53:88:36:38:82:ea:41:1f:d0:ca:66:f9:71:65:ec: 06:12:35:c0:f4:8e:cf:2c:1c:1c:be:72:91:21:92: f0:7d:c9:66:54:74:6b:28:02:40:ce:1f:b9:89:52: 3a:2c:84:e3:6d:ea:e5:bf:85:64:d0:dc:22:c5:55: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:42:56:8D:2F:FE:CA:07:75:96:9C:75:FA:D4:FC:A2:6F:18:5F:63 X509v3 Authority Key Identifier: keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ce:a2:b0:48:94:2a:34:2f:25:00:b4:f9:b3:10:96:60:8e: 55:4c:ec:fc:3d:61:bf:46:38:6c:7e:a8:58:5a:85:1e:58:c8: f3:b8:2e:59:2b:41:c8:16:26:69:2d:32:92:9d:98:23:6b:9d: a1:9e:1d:c7:09:35:52:3a:1a:19:bc:e2:3f:5e:eb:22:a4:1e: f8:6b:cd:03:63:74:1b:64:d8:f0:06:b8:33:49:0b:63:56:cc: eb:12:91:92:54:91:bf:cf:1b:d2:e9:e4:c3:8c:39:01:a3:d2: 1d:65:a5:81:aa:5b:bd:0e:23:ff:6d:d6:09:e8:8d:01:44:f4: b2:6f:7f:c9:e2:5b:b2:6f:41:27:9b:d3:93:c7:ac:06:17:14: ed:ea:88:76:43:0a:9b:04:f9:51:2d:35:1c:de:ad:1e:62:b8: e9:1e:36:45:eb:7e:b7:e1:55:26:43:df:0d:1e:95:bf:87:b2: 25:e2:62:47:c4:93:ce:b0:ea:13:1c:63:2e:c5:61:40:7f:63: 44:3d:4f:7b:81:92:97:0d:04:81:c9:32:d6:13:5c:98:0f:bd: 74:69:29:50:6f:46:34:7b:f3:ac:bb:cd:1e:7c:c8:51:e3:93: 1f:ea:d7:e2:0d:f5:cb:b3:95:5c:8e:e5:b1:33:35:11:7e:31: f8:4b:11:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2 QzAyNEM0RjMwHhcNMjUxMTAzMDAzODM5WhcNMjUxMTEwMDAzODM5WjAYMRYwFAYD VQQDEw02OTA3Zjk4Zi04YWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFwGmDXIcpXyXxMJ9XKH3VrAFCvOuqHKCvbAajQHMwEIZ+xOTSFEoCwBLdla Og2OJfgGDOkrCTxvYGYRT8pgtgPf/MsmV8T+LHElUxxXwD90ss/iw5qCzAYZgjvH Wi54lDK05vSQlrTRzuOeusDFVtMsl4OdSYdoPRlVDBYXHRLN378SwYZan9VoksMq lm+btjyDjFdeRNr8v819yKKfOwL4uWwyWKH4GzWiDW5q21CknvVh9jdwMvL9nhvs VOM5SZtTiDY4gupBH9DKZvlxZewGEjXA9I7PLBwcvnKRIZLwfclmVHRrKAJAzh+5 iVI6LITjberlv4Vk0NwixVVXiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9CVo0v /soHdZacdfrU/KJvGF9jMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfzqKwSJQqNC8lALT5sxCWYI5VTOz8PWG/RjhsfqhYWoUeWMjzuC5Z K0HIFiZpLTKSnZgja52hnh3HCTVSOhoZvOI/XusipB74a80DY3QbZNjwBrgzSQtj VszrEpGSVJG/zxvS6eTDjDkBo9IdZaWBqlu9DiP/bdYJ6I0BRPSyb3/J4luyb0En m9OTx6wGFxTt6oh2QwqbBPlRLTUc3q0eYrjpHjZF63634VUmQ98NHpW/h7Il4mJH xJPOsOoTHGMuxWFAf2NEPU97gZKXDQSByTLWE1yYD710aSlQb0Y0e/Osu80efMhR 45Mf6tfiDfXLs5VcjuWxMzURfjH4SxH+ -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:54 2025 by rpki-client