$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: YvrMuW4kSDBdCW5VUT/netxUOpyiAnYKnhgPOCxg5+8= Subject key identifier: B4:29:03:FB:5A:33:2B:CC:8C:C4:D7:F1:28:34:41:2D:47:DC:64:A2 Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 03ED Signing time: Wed 05 Nov 2025 00:36:08 +0000 Manifest this update: Wed 05 Nov 2025 00:36:08 +0000 Manifest next update: Wed 12 Nov 2025 00:36:08 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: JCUT8W08m0TSYIXjQ4kKwvBxZGlxkm6K9gsyPUHOZ8c=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: Nov 5 00:36:08 2025 GMT Not After : Nov 12 00:36:08 2025 GMT Subject: CN=690a9bf8-21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:c7:0a:3d:f4:9c:df:a7:c7:72:a7:6c:b3: 94:87:ea:e8:ee:a6:7f:04:c0:e6:c2:bb:3b:36:97: b2:01:0c:2e:a0:4e:db:4e:75:2e:a7:33:4f:fc:35: f3:f7:d0:55:f9:8d:79:c5:57:95:8a:0d:5c:27:e4: 82:5b:17:0a:ff:91:b0:4f:1d:2e:c3:7c:9f:12:92: c5:8d:b8:61:33:d2:ec:15:42:a2:2d:3f:b3:1e:b2: 06:e6:ac:0d:5d:e5:a0:72:fa:53:8e:91:74:7a:d0: 79:80:f4:b8:e0:e9:70:f4:11:0a:89:fa:ba:10:04: b5:74:e2:ec:ad:3f:4a:8a:7c:91:77:81:f1:cc:38: 13:75:70:f8:14:3c:9d:bb:eb:be:a5:5f:58:92:75: fa:3e:2e:58:22:d9:d1:f8:94:57:11:8f:b4:8e:71: 0e:c1:bc:93:6a:c8:27:a9:bc:f9:c6:c6:cc:94:3e: f2:d6:f9:36:aa:fc:55:68:b7:35:35:50:42:cc:e1: 51:9f:78:81:3d:75:de:a4:54:4f:ae:2e:a1:04:57: 83:64:86:06:b7:24:b7:b8:ac:48:4d:75:c1:c4:a7: 59:42:cf:3b:d7:fb:7e:fd:39:bb:17:3d:5d:1e:6e: 7e:e5:20:c0:98:c5:3c:df:6b:84:b7:65:b7:7c:1b: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:29:03:FB:5A:33:2B:CC:8C:C4:D7:F1:28:34:41:2D:47:DC:64:A2 X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:16:42:54:9e:33:e3:b4:ed:1d:40:ea:1b:2a:10:a1:36:97: c4:33:b3:97:d9:a3:60:62:87:93:65:fc:d4:92:1d:9d:8d:05: 57:01:f3:fd:cf:ea:47:91:bc:48:85:2b:b0:11:79:46:19:0d: d7:d2:b7:61:ce:24:55:49:04:4b:7a:62:0c:9a:d4:5d:4c:8a: ec:72:63:f9:fa:57:98:b2:61:a1:81:e5:5c:54:fb:de:33:95: 74:a7:fc:bc:6e:01:42:ea:58:90:1e:74:70:1c:7f:fe:27:0d: 3d:ca:5d:f3:ff:53:72:d3:6a:16:ca:7c:80:30:20:1b:93:b3: 2f:b7:2b:a9:90:d1:e2:b7:38:17:7c:af:47:90:ce:78:21:ea: 41:fe:40:9a:a2:e0:47:a5:53:a7:01:f7:dc:41:98:b3:3d:81: 21:15:11:7d:11:c7:eb:84:8f:f9:40:19:42:95:a0:63:3c:1a: 25:c5:c8:a3:ef:28:29:ef:21:d6:1b:13:31:48:89:bd:2f:64: 9c:81:e1:ca:93:d1:d1:82:6a:ef:68:ef:df:aa:7a:e2:73:86: f6:4c:97:26:9e:3c:d2:b5:dd:5e:aa:de:a9:1e:8e:b0:d0:40: 0e:d7:f4:6f:95:b0:46:3b:91:15:61:c8:9c:83:7d:d4:6e:25: 79:62:68:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjUxMTA1MDAzNjA4WhcNMjUxMTEyMDAzNjA4WjAYMRYwFAYD VQQDEw02OTBhOWJmOC0yMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumjHCj30nN+nx3KnbLOUh+ro7qZ/BMDmwrs7NpeyAQwuoE7bTnUupzNP/DXz 99BV+Y15xVeVig1cJ+SCWxcK/5GwTx0uw3yfEpLFjbhhM9LsFUKiLT+zHrIG5qwN XeWgcvpTjpF0etB5gPS44Olw9BEKifq6EAS1dOLsrT9KinyRd4HxzDgTdXD4FDyd u+u+pV9YknX6Pi5YItnR+JRXEY+0jnEOwbyTasgnqbz5xsbMlD7y1vk2qvxVaLc1 NVBCzOFRn3iBPXXepFRPri6hBFeDZIYGtyS3uKxITXXBxKdZQs871/t+/Tm7Fz1d Hm5+5SDAmMU832uEt2W3fBvQEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQpA/ta MyvMjMTX8Sg0QS1H3GSiMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuFkJUnjPjtO0dQOobKhChNpfEM7OX2aNgYoeTZfzUkh2djQVXAfP9 z+pHkbxIhSuwEXlGGQ3X0rdhziRVSQRLemIMmtRdTIrscmP5+leYsmGhgeVcVPve M5V0p/y8bgFC6liQHnRwHH/+Jw09yl3z/1Ny02oWynyAMCAbk7MvtyupkNHitzgX fK9HkM54IepB/kCaouBHpVOnAffcQZizPYEhFRF9EcfrhI/5QBlClaBjPBolxcij 7ygp7yHWGxMxSIm9L2ScgeHKk9HRgmrvaO/fqnric4b2TJcmnjzStd1eqt6pHo6w 0EAO1/RvlbBGO5EVYcicg33UbiV5YmhJ -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:23 2025 by rpki-client