$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json) Hash identifier: fr65n/1Zlx016eU744b7ps/Udro1nOfDVns8EteMgqs= Subject key identifier: B5:3D:68:FB:EE:0C:47:53:4E:A1:4D:0F:45:9F:94:97:F6:F6:79:08 Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft Manifest number: 7A Signing time: Wed 05 Nov 2025 07:01:15 +0000 Manifest this update: Wed 05 Nov 2025 07:01:14 +0000 Manifest next update: Wed 12 Nov 2025 07:01:14 +0000 Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: HSfZoUpIYyN2RAyZ9LxPvCyC3t6MTYJm+RUU0GoDcCw=) 2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: dT/BONoh4iz/mCrFUa2bnRPY+g4+rGXpyhnWzue1M3M=) 3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: R+1VP9LHiaevMYdKlJuk8iImqVduU78fQg6WO1Eu+k0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Validity Not Before: Nov 5 07:01:14 2025 GMT Not After : Nov 12 07:01:14 2025 GMT Subject: CN=690af63a-8854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ff:cb:34:da:00:26:88:64:af:e0:cd:d9:28: e9:66:1a:80:76:f6:ca:f3:bb:d0:23:e7:4a:c4:58: f9:50:47:76:66:d1:ca:58:30:04:b2:75:61:cb:be: 95:0e:50:8b:a2:a3:47:0a:b8:f9:38:ab:f3:ca:0b: 0f:c5:2b:96:64:3b:d3:ce:c6:5a:25:19:f1:68:d1: e2:94:8b:63:6f:55:9f:e3:bd:95:14:2c:c4:df:d7: 50:5c:1a:79:4f:ce:e4:07:4b:8d:24:7e:b4:13:61: fb:52:9d:02:77:5d:ba:83:6d:cb:75:ec:a6:a6:bc: 3b:3d:ed:53:61:5d:ef:a4:da:68:ca:f8:9b:3a:9a: 6b:34:55:ba:e4:12:99:36:57:bc:49:56:10:e6:f0: b9:2e:be:51:04:78:32:78:fd:e1:8c:fd:e5:d9:82: 6d:c2:49:2e:c7:7f:c6:97:98:b9:fd:91:0f:b3:ca: 91:ac:9b:da:6e:3b:85:bc:08:f9:aa:ae:fe:25:84: 0e:c1:d5:4b:44:f7:37:bc:73:39:91:5b:57:13:10: a7:7e:31:3e:46:ff:9a:76:b4:25:47:ee:7c:1d:9b: d3:42:56:db:8b:ca:22:28:5d:d0:f9:f6:0d:4e:01: 55:26:75:db:32:0c:8a:24:02:87:06:5a:5c:a2:a9: 51:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3D:68:FB:EE:0C:47:53:4E:A1:4D:0F:45:9F:94:97:F6:F6:79:08 X509v3 Authority Key Identifier: keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:f3:af:e7:71:78:51:1f:3f:96:32:a9:87:c8:f4:82:88:bf: 08:33:fd:ce:42:15:e1:0e:03:22:de:1f:0a:9f:f4:aa:69:f2: aa:1d:04:19:ab:af:84:49:c1:d0:7e:e4:ce:7a:4f:5a:d0:49: b5:dc:e5:94:b9:76:89:2f:11:08:a5:48:fd:3f:f3:8b:89:5f: 9d:f0:c2:67:84:77:01:6f:b7:2b:95:da:ef:51:f4:31:d6:d0: ee:db:24:d0:77:7d:44:ae:1b:1e:9b:92:10:d6:d8:e7:b9:61: 2f:ad:89:4d:82:f0:06:55:00:ad:66:7f:89:62:27:58:65:b2: 9a:25:37:09:d9:fb:58:be:f6:86:7e:3e:5f:e1:2e:f1:c8:b4: ca:ce:32:9d:5e:b0:f3:4d:1f:76:03:8d:1c:e0:91:cf:de:2a: 06:cc:d2:13:a2:98:8d:f5:cb:bf:5d:8d:e8:9c:d1:3a:96:11: db:72:6d:72:4f:7b:5b:e4:c0:4b:11:81:14:f7:2f:99:34:e7: c2:aa:31:ab:c4:1a:00:f8:49:06:4a:f5:c3:ea:1e:fb:b8:91: d9:84:81:b7:2a:82:a4:c0:9c:ed:f1:83:37:5b:69:c5:0a:7b: d4:08:1f:9d:20:8c:52:0d:d5:c4:c1:7d:a6:a5:37:d0:e6:70: dc:d5:e8:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjAxRDExMC8GA1UEBRMoREIxQjk2RTA1QTk4RDgyOEJGNTdFQTBBNzE1NUFGMUQz MzIyM0UyQzAeFw0yNTExMDUwNzAxMTRaFw0yNTExMTIwNzAxMTRaMBgxFjAUBgNV BAMTDTY5MGFmNjNhLTg4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW/8s02gAmiGSv4M3ZKOlmGoB29srzu9Aj50rEWPlQR3Zm0cpYMASydWHLvpUO UIuio0cKuPk4q/PKCw/FK5ZkO9POxlolGfFo0eKUi2NvVZ/jvZUULMTf11BcGnlP zuQHS40kfrQTYftSnQJ3XbqDbct17KamvDs97VNhXe+k2mjK+Js6mms0VbrkEpk2 V7xJVhDm8LkuvlEEeDJ4/eGM/eXZgm3CSS7Hf8aXmLn9kQ+zypGsm9puO4W8CPmq rv4lhA7B1UtE9ze8czmRW1cTEKd+MT5G/5p2tCVH7nwdm9NCVtuLyiIoXdD59g1O AVUmddsyDIokAocGWlyiqVGDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtT1o++4M R1NOoU0PRZ+Ul/b2eQgwHwYDVR0jBBgwFoAU2xuW4FqY2Ci/V+oKcVWvHTMiPiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMDFELzg1QjhDMjkwMDNG MTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnh1VzRGcVkyQ2lfVi1vS2NWV3ZIVE1pUGl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MDFELzg1QjhDMjkwMDNGMTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNp X1Ytb0tjVld2SFRNaVBpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMDzr+dxeFEfP5YyqYfI9IKIvwgz/c5CFeEOAyLeHwqf9Kpp8qodBBmr r4RJwdB+5M56T1rQSbXc5ZS5dokvEQilSP0/84uJX53wwmeEdwFvtyuV2u9R9DHW 0O7bJNB3fUSuGx6bkhDW2Oe5YS+tiU2C8AZVAK1mf4liJ1hlspolNwnZ+1i+9oZ+ Pl/hLvHItMrOMp1esPNNH3YDjRzgkc/eKgbM0hOimI31y79djeic0TqWEdtybXJP e1vkwEsRgRT3L5k058KqMavEGgD4SQZK9cPqHvu4kdmEgbcqgqTAnO3xgzdbacUK e9QIH50gjFIN1cTBfaalN9DmcNzV6D8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:00:56 2025 by rpki-client