$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json) Hash identifier: 9z+N3kDq7Ees/uGDeS98stKizxOmQPl2fXiRGk+EYZY= Subject key identifier: CA:B4:61:60:9E:8D:38:63:21:93:DC:70:86:E9:D6:2A:C9:64:5B:2A Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft Manifest number: 41 Signing time: Mon 03 Nov 2025 07:38:14 +0000 Manifest this update: Mon 03 Nov 2025 07:38:13 +0000 Manifest next update: Mon 10 Nov 2025 07:38:13 +0000 Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: XEtoZFbLjQ3hj+zG28vqw9vvGIuj9ke+0NPfaYQkkJQ=) 2: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: F+R2fk0YjqijE6FasKZCYAmvjOnVu/mYSIbi31Ovw6o=) 3: 7D08B8F68FDF11F0B34EBA0BC4F9AE02.roa (hash: ziDdc7ON5gmiCX4Ym4QO/xFvs2ZmtqL0y4LOF+ZKS9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Validity Not Before: Nov 3 07:38:13 2025 GMT Not After : Nov 10 07:38:13 2025 GMT Subject: CN=69085be6-63a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:3f:9e:fb:74:3b:21:21:6f:89:79:b3:c5: be:34:20:0a:98:ee:f1:54:5a:44:36:fe:cf:76:0e: 3b:ae:9f:a9:5e:8a:f7:c8:c3:a9:cc:02:54:15:c0: fc:aa:ff:87:33:77:91:22:bd:64:ee:6a:37:14:ff: e0:0a:7a:75:28:07:80:6c:a5:05:f2:f7:a0:7e:32: 37:b6:1e:07:6b:81:8e:53:2b:17:ff:6c:c3:00:32: 26:c7:6b:82:46:5c:ed:a5:ec:96:0a:7e:87:ee:1a: 1d:ef:1e:67:e6:ef:b6:91:99:29:06:83:53:2a:ea: 4b:fa:95:ab:56:51:63:38:43:af:47:b1:7e:10:7b: e8:61:90:04:89:c1:e9:7d:17:a3:f8:62:31:9a:ab: b3:b9:38:e1:4e:61:5f:e0:e8:36:ef:f2:72:39:87: d4:68:ec:de:06:29:75:23:6c:91:67:d4:75:f5:13: 87:a7:f4:b0:4d:8d:6e:11:30:bd:bd:9f:4b:1f:65: ac:c7:3f:72:7e:82:b1:8b:7f:2b:46:c5:f1:59:d5: 1f:81:24:2e:a1:46:dd:4d:d2:b2:25:8d:c3:1d:c7: 56:2d:88:bb:55:f6:70:dd:79:66:96:10:70:d6:52: 06:61:00:0a:17:27:44:98:93:cd:a9:6f:d4:0b:9d: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:61:60:9E:8D:38:63:21:93:DC:70:86:E9:D6:2A:C9:64:5B:2A X509v3 Authority Key Identifier: keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a5:39:d2:c9:a4:3f:98:65:f2:ac:90:30:19:e4:a9:b4:b3: 19:b6:fe:7b:a1:e0:46:49:c4:42:ff:3c:e5:36:dd:bd:53:c1: 7b:9e:06:b6:b9:86:1c:b1:c2:cb:37:50:19:a5:a7:7a:6c:75: 7f:78:15:59:16:06:f7:56:2f:2b:e4:db:fd:fc:13:3f:91:7a: 92:eb:18:05:90:98:a6:7d:50:ec:26:2f:04:2f:f1:ab:e3:5d: 84:05:42:fd:51:b4:47:3b:bd:93:51:2f:8d:db:f2:c7:57:84: fb:dc:f9:cc:b4:29:e5:e4:e9:ed:9d:50:06:b9:c6:12:54:f3: 79:65:7a:f8:b0:6e:39:29:bc:23:66:99:f5:c0:96:f5:85:00: dd:54:d0:9d:9f:44:ac:e5:90:68:ea:f5:8d:56:13:f3:d0:a4: ef:3e:12:04:22:6c:aa:90:8a:07:75:8b:d6:e0:60:27:0a:19: 91:50:2e:f8:fe:5a:c8:b7:1d:40:fb:97:50:5e:b3:e0:1c:88: db:cb:08:05:68:83:e9:09:42:ad:b4:c5:6f:a9:5e:47:9d:e6: 8d:b0:0a:26:74:ab:7e:11:75:73:db:9a:a1:5c:4c:26:a3:35: 18:7c:37:e7:54:96:5a:a7:ea:b4:3b:5f:cf:8c:02:e2:9a:55: e9:4e:3d:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUNFMjExMC8GA1UEBRMoREFFMUNFMEFEQTY3QjQ0NzEzQzYxQjFGQUVDNEY1RDRE NjdBMTU5RjAeFw0yNTExMDMwNzM4MTNaFw0yNTExMTAwNzM4MTNaMBgxFjAUBgNV BAMTDTY5MDg1YmU2LTYzYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Mj+e+3Q7ISFviXmzxb40IAqY7vFUWkQ2/s92Djuun6leivfIw6nMAlQVwPyq /4czd5EivWTuajcU/+AKenUoB4BspQXy96B+Mje2HgdrgY5TKxf/bMMAMibHa4JG XO2l7JYKfofuGh3vHmfm77aRmSkGg1Mq6kv6latWUWM4Q69HsX4Qe+hhkASJwel9 F6P4YjGaq7O5OOFOYV/g6Dbv8nI5h9Ro7N4GKXUjbJFn1HX1E4en9LBNjW4RML29 n0sfZazHP3J+grGLfytGxfFZ1R+BJC6hRt1N0rIljcMdx1YtiLtV9nDdeWaWEHDW UgZhAAoXJ0SYk82pb9QLnU8rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyrRhYJ6N OGMhk9xwhunWKslkWyowHwYDVR0jBBgwFoAU2uHOCtpntEcTxhsfrsT11NZ6FZ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQ0UyLzUxQ0Q3RkJBNzJD RTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZa OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnVIT0N0cG50RWNUeGhzZnJzVDExTlo2Rlo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB Q0UyLzUxQ0Q3RkJBNzJDRTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVj VHhoc2Zyc1QxMU5aNkZaOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIGlOdLJpD+YZfKskDAZ5Km0sxm2/nuh4EZJxEL/POU23b1TwXueBra5 hhyxwss3UBmlp3psdX94FVkWBvdWLyvk2/38Ez+RepLrGAWQmKZ9UOwmLwQv8avj XYQFQv1RtEc7vZNRL43b8sdXhPvc+cy0KeXk6e2dUAa5xhJU83lleviwbjkpvCNm mfXAlvWFAN1U0J2fRKzlkGjq9Y1WE/PQpO8+EgQibKqQigd1i9bgYCcKGZFQLvj+ Wsi3HUD7l1Bes+AciNvLCAVog+kJQq20xW+pXked5o2wCiZ0q34RdXPbmqFcTCaj NRh8N+dUllqn6rQ7X8+MAuKaVelOPfk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:54 2025 by rpki-client