$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json) Hash identifier: 2acW6l1ZBcSOZ3XJh6MygseZB0f2v+X3So9agbcwCK4= Subject key identifier: CF:3A:A8:B1:57:28:C6:8C:3F:39:93:8E:5D:DE:C2:B4:C1:8A:A7:07 Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft Manifest number: 0295 Signing time: Mon 03 Nov 2025 01:30:46 +0000 Manifest this update: Mon 03 Nov 2025 01:30:45 +0000 Manifest next update: Mon 10 Nov 2025 01:30:45 +0000 Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: /yEpvj+bzeQ3aF43rNxc5VNlCbyRg4mi2eGAYrCeH9Q=) 2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: 1MS8BgQSeLxFZfjzI2XVs+BA1y3N2nYBN3Uvkoalvq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Validity Not Before: Nov 3 01:30:45 2025 GMT Not After : Nov 10 01:30:45 2025 GMT Subject: CN=690805c5-d3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:cc:2f:83:14:1f:5d:e4:4a:21:55:57:cf: 8b:05:c5:ac:0b:a9:41:61:54:e6:9e:91:b8:f4:13: 3a:29:8b:15:f1:31:60:0b:b2:95:a8:2e:ec:a6:20: 67:3b:c3:f7:7b:c5:80:4c:51:1a:9f:82:c3:1c:4d: 41:78:82:ee:c0:37:f5:a6:b6:fd:81:e2:99:b2:f9: 9e:aa:2e:a8:4b:f5:fd:d5:9d:a4:04:10:b9:24:c6: 2b:b8:cb:ad:62:38:c5:90:43:7d:08:49:aa:c8:be: 81:a5:91:eb:a9:a2:3d:41:c3:4c:13:98:34:0d:e8: e5:26:28:2a:19:c9:a9:09:4a:59:e4:5f:51:7d:27: b1:09:c9:f1:73:57:ca:53:bf:d7:24:62:2d:b2:60: 5c:d0:0a:75:f8:a0:58:25:50:1c:3b:03:50:20:8e: 88:a2:d7:20:87:eb:8c:89:d8:91:2d:1f:b4:08:56: 78:a5:0f:19:33:f0:92:4a:de:93:0e:7f:b3:59:05: d5:1b:bd:f1:78:8f:8e:6c:ad:88:70:12:38:9c:10: b3:83:1a:30:15:c5:31:74:65:bb:ee:ad:09:50:7e: 39:8e:dc:59:5a:2b:48:2a:ef:74:2e:14:cb:6f:f6: 49:b1:28:fc:12:8a:84:67:c9:eb:0f:7b:06:4c:49: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3A:A8:B1:57:28:C6:8C:3F:39:93:8E:5D:DE:C2:B4:C1:8A:A7:07 X509v3 Authority Key Identifier: keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a1:6e:21:46:f7:f5:cc:c6:4d:fb:9c:14:41:93:ca:ce:7d: 6c:e0:3e:62:9f:6b:99:c6:eb:dc:84:6b:b9:12:9d:31:85:f5: e6:b9:58:c3:b2:93:37:e7:29:bf:c2:e7:8b:d8:44:93:63:af: ee:87:15:8e:f1:00:e0:74:7c:21:44:73:a4:90:22:2d:11:57: 9a:13:63:83:71:51:c7:d1:cf:9e:94:34:dc:d0:49:62:1f:fd: 9b:b1:b7:5d:41:45:9b:f3:45:dd:95:6f:0c:98:59:00:f7:b9: 18:fe:b9:1b:5c:ec:04:6c:6a:60:2f:32:70:2c:84:88:a0:6e: c6:b4:d3:21:3c:58:04:98:49:d5:fa:46:6d:a7:fd:6f:d7:89: d6:78:54:73:0f:e9:05:ec:76:e9:e1:6c:cc:99:05:f3:fd:af: da:58:b1:17:01:9e:88:44:64:15:6f:9d:89:7a:76:39:e1:2a: d2:97:e2:3d:75:dd:33:49:ef:e6:f7:9b:a6:f6:e8:b1:70:c1: 3a:d0:83:57:02:b7:6a:e5:41:8c:91:db:38:be:31:cb:14:af: 72:f6:28:47:7f:69:be:89:15:51:3c:1d:d7:cf:93:82:d7:13: 5d:a7:55:f4:29:b7:ab:8d:3d:55:d8:b9:19:c5:52:5c:ab:9a: 38:9f:22:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0 QTAwRUFFRTgwHhcNMjUxMTAzMDEzMDQ1WhcNMjUxMTEwMDEzMDQ1WjAYMRYwFAYD VQQDEw02OTA4MDVjNS1kM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwDML4MUH13kSiFVV8+LBcWsC6lBYVTmnpG49BM6KYsV8TFgC7KVqC7spiBn O8P3e8WATFEan4LDHE1BeILuwDf1prb9geKZsvmeqi6oS/X91Z2kBBC5JMYruMut YjjFkEN9CEmqyL6BpZHrqaI9QcNME5g0DejlJigqGcmpCUpZ5F9RfSexCcnxc1fK U7/XJGItsmBc0Ap1+KBYJVAcOwNQII6Iotcgh+uMidiRLR+0CFZ4pQ8ZM/CSSt6T Dn+zWQXVG73xeI+ObK2IcBI4nBCzgxowFcUxdGW77q0JUH45jtxZWitIKu90LhTL b/ZJsSj8EoqEZ8nrD3sGTEnfLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM86qLFX KMaMPzmTjl3ewrTBiqcHMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN SUF4YWxyY3UydjFLQU9ydWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeoW4hRvf1zMZN+5wUQZPKzn1s4D5in2uZxuvchGu5Ep0xhfXmuVjD spM35ym/wueL2ESTY6/uhxWO8QDgdHwhRHOkkCItEVeaE2ODcVHH0c+elDTc0Eli H/2bsbddQUWb80XdlW8MmFkA97kY/rkbXOwEbGpgLzJwLISIoG7GtNMhPFgEmEnV +kZtp/1v14nWeFRzD+kF7Hbp4WzMmQXz/a/aWLEXAZ6IRGQVb52JenY54SrSl+I9 dd0zSe/m95um9uixcME60INXArdq5UGMkds4vjHLFK9y9ihHf2m+iRVRPB3Xz5OC 1xNdp1X0KberjT1V2LkZxVJcq5o4nyI0 -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:52 2025 by rpki-client