$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: JELhuy3ZyaLrTZ6E89CRKPk9mME6a/bv25Bx66xKnws= Subject key identifier: 27:1F:37:CD:1E:78:B5:1F:E0:70:EC:F0:C4:3B:56:C5:E8:C6:F7:2F Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0983 Signing time: Tue 04 Nov 2025 20:10:25 +0000 Manifest this update: Tue 04 Nov 2025 20:10:24 +0000 Manifest next update: Tue 11 Nov 2025 20:10:24 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: zX7TbUsFhoUh8+fRHqa7ouDHu4ghQg7khuTqzl1RpDc=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 4ExF2O2Frz9RSsUL7YBwRkgASJlP9BcJdkByxRonGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Nov 4 20:10:24 2025 GMT Not After : Nov 11 20:10:24 2025 GMT Subject: CN=690a5db0-55a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:35:21:9e:45:91:b6:7d:cc:8b:27:b1:07: 8f:56:77:02:a7:65:64:93:7a:40:96:84:0c:1e:d1: ca:d1:a6:17:fa:d5:03:47:d6:54:fd:9d:b2:b0:18: 08:88:85:39:c4:59:8c:18:67:28:b5:39:bc:a6:a8: 47:9d:ea:00:e9:4d:a7:73:fd:95:c4:a2:04:20:3e: 4f:fb:8e:a7:2f:de:d6:b0:b7:a6:dc:97:f2:d9:76: e3:7a:db:cb:9f:e6:5b:59:93:de:01:14:02:11:e8: 83:34:52:f6:bb:a0:1c:61:30:ee:3e:70:45:8b:ab: 5d:f2:87:4b:c5:38:01:a9:6d:a7:00:ce:53:e9:b7: 39:3a:a8:79:86:5b:10:4e:00:0d:c7:1a:24:71:0a: 30:79:ee:1f:48:91:9e:21:dd:a8:26:bd:8c:1b:e2: 5f:0d:04:ca:9e:7e:5d:eb:1a:c9:ce:eb:d8:82:9f: d2:84:84:fc:a1:7a:2f:84:c1:37:42:87:b2:ac:e3: 54:aa:fc:fe:63:1f:64:8c:60:1e:4a:df:59:6a:22: 80:62:09:ed:72:3c:5f:8b:30:ab:25:f6:14:4a:68: ef:06:b6:2b:f0:3d:91:cd:13:da:06:a3:f7:85:88: c1:87:8c:1c:f4:47:72:85:e5:a3:6c:6b:c7:d6:85: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:37:CD:1E:78:B5:1F:E0:70:EC:F0:C4:3B:56:C5:E8:C6:F7:2F X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bd:2e:cb:d8:0e:03:49:04:24:8b:9b:0d:3d:14:6b:c6:84: 32:fc:42:d7:88:60:56:82:9e:65:41:c8:c6:fe:63:e7:a4:ef: 07:04:9c:41:8f:0c:89:56:cf:87:21:32:54:7f:5a:52:36:b3: 9f:47:c5:ca:4f:c1:fc:18:d4:ad:60:6c:41:ad:12:d3:24:8c: b4:ae:84:90:8d:52:d0:7b:99:3a:8b:4e:93:48:ab:6d:8a:22: 8e:f6:09:52:e8:d5:be:c4:5e:b3:ed:b2:09:55:95:fd:ff:54: 4b:59:4d:15:e2:34:7b:f4:cc:ba:a3:4d:63:65:e0:52:7f:18: 57:48:59:89:9e:4e:9d:f3:c6:bb:d4:da:71:c5:2e:52:e8:58: a0:45:17:85:bd:52:8c:64:9a:35:f5:f6:62:e3:ff:9d:d6:29: 0e:52:cd:ef:bd:5a:e9:6a:38:6d:2c:9c:19:d5:98:cd:3f:ca: 72:34:fb:24:33:4e:5a:86:7b:c7:74:e4:5a:29:5c:5d:cd:5f: 88:55:c0:3d:40:b5:f5:d2:01:aa:cc:89:0a:63:1f:df:7f:b9: 87:2c:a5:0f:6f:a2:cc:b6:2f:45:89:49:65:c0:e2:6d:37:4c: 92:c1:3c:8e:85:64:98:8e:64:d9:c9:a0:d9:19:4e:e8:70:ec: 98:37:a7:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUxMTA0MjAxMDI0WhcNMjUxMTExMjAxMDI0WjAYMRYwFAYD VQQDEw02OTBhNWRiMC01NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18c1IZ5FkbZ9zIsnsQePVncCp2Vkk3pAloQMHtHK0aYX+tUDR9ZU/Z2ysBgI iIU5xFmMGGcotTm8pqhHneoA6U2nc/2VxKIEID5P+46nL97WsLem3Jfy2XbjetvL n+ZbWZPeARQCEeiDNFL2u6AcYTDuPnBFi6td8odLxTgBqW2nAM5T6bc5Oqh5hlsQ TgANxxokcQowee4fSJGeId2oJr2MG+JfDQTKnn5d6xrJzuvYgp/ShIT8oXovhME3 QoeyrONUqvz+Yx9kjGAeSt9ZaiKAYgntcjxfizCrJfYUSmjvBrYr8D2RzRPaBqP3 hYjBh4wc9EdyheWjbGvH1oXz4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcfN80e eLUf4HDs8MQ7VsXoxvcvMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6vS7L2A4DSQQki5sNPRRrxoQy/ELXiGBWgp5lQcjG/mPnpO8HBJxB jwyJVs+HITJUf1pSNrOfR8XKT8H8GNStYGxBrRLTJIy0roSQjVLQe5k6i06TSKtt iiKO9glS6NW+xF6z7bIJVZX9/1RLWU0V4jR79My6o01jZeBSfxhXSFmJnk6d88a7 1NpxxS5S6FigRReFvVKMZJo19fZi4/+d1ikOUs3vvVrpajhtLJwZ1ZjNP8pyNPsk M05ahnvHdORaKVxdzV+IVcA9QLX10gGqzIkKYx/ff7mHLKUPb6LMti9FiUllwOJt N0ySwTyOhWSYjmTZyaDZGU7ocOyYN6ct -----END CERTIFICATE-----Generated at Wed Nov 5 21:13:32 2025 by rpki-client