$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: rvdjhD+ixI1GzUootEqoF32FTSrqo1RDfF4ieEwvzxs= Subject key identifier: 4E:FC:84:3A:BE:9C:2C:F9:79:47:6C:F2:9C:38:4D:8C:8E:1B:79:83 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 0830 Signing time: Sun 02 Nov 2025 20:46:13 +0000 Manifest this update: Sun 02 Nov 2025 20:46:12 +0000 Manifest next update: Sun 09 Nov 2025 20:46:12 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: 0wgYTVRXqycBpuh+y0UXGJAwc5wm6sOTrj9gbgsuq5Y=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: DuU/zvCDCUg2TONY7brDsE/++qWvSBYjnL7XCdcyag0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Nov 2 20:46:12 2025 GMT Not After : Nov 9 20:46:12 2025 GMT Subject: CN=6907c315-1756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:5b:ec:f1:d5:9a:2f:3f:c6:41:0b:15:f8: d5:c6:03:de:96:79:4d:5c:1e:7d:1b:7f:85:e6:6a: 82:fc:54:50:ce:d6:7f:08:ab:ed:ee:43:45:a5:f8: e6:00:da:cf:3f:66:c9:df:df:eb:9b:2b:15:f4:fe: 7b:4f:e8:3e:11:82:0b:f7:28:16:e2:0c:ae:e5:54: 83:56:18:18:6e:d0:2e:cd:be:4f:18:00:06:90:c7: c2:99:40:21:a7:51:dc:00:7c:42:4d:3f:0a:18:27: 9d:82:ad:e9:09:a6:b9:3d:cb:c8:b4:fc:23:4b:e3: 23:be:49:9b:ff:e5:be:5c:fd:20:29:5d:af:d8:3d: ea:fb:96:fc:ea:b2:62:ba:61:7b:a7:af:13:c0:e3: a4:f7:3b:77:40:42:92:9a:39:6e:7a:d0:1b:c0:c8: e0:69:70:8c:1e:fe:41:d4:5a:fa:53:72:e2:1b:f4: 89:9f:62:f8:19:f3:ed:09:e2:28:00:66:fe:06:18: 66:47:db:89:5f:6f:0f:40:11:95:5a:d0:2c:f9:6d: ab:39:5d:60:0b:6b:e9:ac:64:e6:f8:b7:cb:e3:88: c0:4b:f6:1f:e4:4f:98:09:b5:90:b0:e0:02:13:34: 4b:03:51:4d:c3:57:12:1b:92:41:3e:8d:1e:b5:a5: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FC:84:3A:BE:9C:2C:F9:79:47:6C:F2:9C:38:4D:8C:8E:1B:79:83 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d7:e9:c3:5c:b9:70:9c:e7:d8:6c:09:91:05:d3:5c:48:b4: 0f:a9:ea:bc:7f:36:3f:f1:2a:37:5c:63:3f:4f:4a:bc:88:61: 33:30:5b:21:b2:14:74:d0:1d:74:cc:1c:7a:e7:0e:26:6f:f4: d8:18:7b:ea:0c:ce:53:ab:70:14:93:e5:85:19:02:17:a1:40: fa:17:e1:6e:bb:2a:5c:da:99:e6:38:f9:4b:c4:16:30:9a:8f: d1:e0:31:33:f3:6a:40:d9:8d:31:89:d4:18:39:56:cb:99:7f: e3:f5:24:9b:8c:c9:fb:56:12:5e:fd:e1:f1:23:e4:57:9a:57: b2:b0:69:03:56:86:27:71:b9:27:51:56:87:9d:ff:4f:1e:e4: 08:66:8c:62:e8:e4:f6:d8:c0:e5:26:72:bf:c0:d7:15:b0:84: 7a:6b:44:f8:0c:5c:10:12:e6:46:0c:e1:1a:f5:3d:f6:5a:26: 85:f1:11:b7:cd:de:48:37:29:3c:b3:b0:1f:b2:cd:19:29:bb: a1:c9:26:a4:df:1a:af:bf:ff:9b:39:8d:39:2c:62:a9:9b:72: 73:06:be:1e:f8:33:a0:3b:b4:8c:d9:e1:3c:b6:5c:5b:ef:e5: ee:bf:75:9b:3d:46:0d:9f:c4:3c:73:ad:45:13:0d:41:6f:c9: 5f:7c:09:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUxMTAyMjA0NjEyWhcNMjUxMTA5MjA0NjEyWjAYMRYwFAYD VQQDEw02OTA3YzMxNS0xNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjNb7PHVmi8/xkELFfjVxgPelnlNXB59G3+F5mqC/FRQztZ/CKvt7kNFpfjm ANrPP2bJ39/rmysV9P57T+g+EYIL9ygW4gyu5VSDVhgYbtAuzb5PGAAGkMfCmUAh p1HcAHxCTT8KGCedgq3pCaa5PcvItPwjS+Mjvkmb/+W+XP0gKV2v2D3q+5b86rJi umF7p68TwOOk9zt3QEKSmjluetAbwMjgaXCMHv5B1Fr6U3LiG/SJn2L4GfPtCeIo AGb+BhhmR9uJX28PQBGVWtAs+W2rOV1gC2vprGTm+LfL44jAS/Yf5E+YCbWQsOAC EzRLA1FNw1cSG5JBPo0etaWpwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE78hDq+ nCz5eUds8pw4TYyOG3mDMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq1+nDXLlwnOfYbAmRBdNcSLQPqeq8fzY/8So3XGM/T0q8iGEzMFsh shR00B10zBx65w4mb/TYGHvqDM5Tq3AUk+WFGQIXoUD6F+Fuuypc2pnmOPlLxBYw mo/R4DEz82pA2Y0xidQYOVbLmX/j9SSbjMn7VhJe/eHxI+RXmleysGkDVoYncbkn UVaHnf9PHuQIZoxi6OT22MDlJnK/wNcVsIR6a0T4DFwQEuZGDOEa9T32WiaF8RG3 zd5INyk8s7Afss0ZKbuhySak3xqvv/+bOY05LGKpm3JzBr4e+DOgO7SM2eE8tlxb 7+Xuv3WbPUYNn8Q8c61FEw1Bb8lffAno -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:34 2025 by rpki-client