$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json) Hash identifier: MrSSDnIsWzY73ruY67UN8F0D8eOzV3t5YZJRoBGff5I= Subject key identifier: 39:FC:6E:32:F3:7F:3E:94:D0:89:92:C2:75:35:1E:9B:F0:3A:96:5E Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft Manifest number: 0290 Signing time: Mon 03 Nov 2025 01:32:16 +0000 Manifest this update: Mon 03 Nov 2025 01:32:15 +0000 Manifest next update: Mon 10 Nov 2025 01:32:15 +0000 Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: tpsC4w4okK1v7MQU3aFbA/5yVAEY5h4vwFK8ULrpLW0=) 2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: ULGKwEOFyOrsmtR9RLcNHZ1T/UHrIBp7ZTGPrjal32s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Validity Not Before: Nov 3 01:32:15 2025 GMT Not After : Nov 10 01:32:15 2025 GMT Subject: CN=6908061f-d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:8d:1b:10:75:5f:b2:bf:39:6d:b3:22:f9: 1c:05:4e:59:61:93:15:66:a1:43:36:fb:5e:4b:47: 2e:10:e3:50:3b:32:28:c9:05:3e:84:5d:2f:e0:66: ef:dc:05:07:47:6d:2c:7e:e9:fd:42:80:1d:d1:6b: ca:d6:cc:8c:70:e9:9d:40:e6:c5:5e:8a:cc:7a:f6: 4f:df:41:25:7a:fc:57:20:46:9a:e6:8a:3f:a6:3b: 9a:66:82:9e:e0:90:2d:99:8c:6b:0d:8e:98:3a:59: 8d:ce:d0:3e:e7:5d:d5:19:01:f9:c7:c5:31:b8:8a: c6:ff:3b:a5:0e:15:33:de:4b:b2:e2:f0:22:c6:3e: 36:db:9b:21:ba:3d:da:52:ef:0b:82:9a:95:bb:ad: 94:93:5d:2b:eb:5b:af:1b:46:94:79:ff:d7:85:15: b1:1e:21:68:d3:f0:b7:ed:13:96:68:1f:f5:24:fa: 5b:ba:cc:38:0f:8c:50:65:58:d9:19:55:c6:01:b1: ab:21:96:af:0e:ab:15:44:b8:88:d7:25:d2:d6:e4: d2:9d:fe:a5:41:96:b9:35:eb:9a:08:f1:c6:eb:5f: c9:90:5f:82:f0:a0:36:c9:7a:ec:00:45:c2:0a:c4: 77:ce:1f:fd:2d:bc:5a:66:7b:f1:90:bf:96:13:07: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FC:6E:32:F3:7F:3E:94:D0:89:92:C2:75:35:1E:9B:F0:3A:96:5E X509v3 Authority Key Identifier: keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:aa:35:62:bd:fd:c8:9c:8a:02:d4:c9:02:a7:18:05:62:4d: f3:8b:62:db:88:cf:ca:c3:f5:ae:c8:0c:83:f7:d7:8c:8b:f5: 99:e9:7e:25:ab:df:a7:67:4d:5f:00:13:e2:58:1f:99:4e:4b: d8:82:65:60:95:b3:0c:17:00:57:38:0f:f7:94:a9:6e:d0:a1: 4d:67:ac:34:49:36:6c:34:2c:a6:f4:c9:f9:c3:35:60:6d:bf: 8b:fc:ab:7f:af:a1:16:63:79:02:5c:af:dd:44:c1:51:c1:78: 61:3f:05:77:a2:1c:e2:67:d1:0d:7e:ca:9a:b0:18:bc:fc:cf: 25:63:14:98:3a:88:b9:fe:85:e6:ea:94:c6:23:c9:fb:ea:a5: 56:a6:c2:48:e0:fc:47:14:b3:a8:b3:c3:d4:d3:25:9e:73:de: 1e:87:12:87:27:a8:4d:8d:83:48:82:aa:56:6b:a7:79:9a:79: f9:78:87:bc:d2:d9:26:f1:79:c0:1c:e4:d9:52:e0:6e:1d:e7: 16:06:3a:68:86:ae:73:4b:3c:ec:da:e2:82:3b:1c:72:f8:32: 85:47:f2:91:dd:a5:56:1b:40:22:0a:0b:c6:d5:0c:4f:51:69: e0:57:28:c8:bc:42:2c:cd:63:0d:69:51:3f:81:c7:4f:da:42: 38:3c:65:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QTYxMTAvBgNVBAUTKERBNDc1NDAxNDEyMUQzMjY4N0Q5N0QzOTJEOTA2MDQ5 QTgxNEZDQzMwHhcNMjUxMTAzMDEzMjE1WhcNMjUxMTEwMDEzMjE1WjAYMRYwFAYD VQQDEw02OTA4MDYxZi1kNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lqNGxB1X7K/OW2zIvkcBU5ZYZMVZqFDNvteS0cuEONQOzIoyQU+hF0v4Gbv 3AUHR20sfun9QoAd0WvK1syMcOmdQObFXorMevZP30ElevxXIEaa5oo/pjuaZoKe 4JAtmYxrDY6YOlmNztA+513VGQH5x8UxuIrG/zulDhUz3kuy4vAixj4225shuj3a Uu8LgpqVu62Uk10r61uvG0aUef/XhRWxHiFo0/C37ROWaB/1JPpbusw4D4xQZVjZ GVXGAbGrIZavDqsVRLiI1yXS1uTSnf6lQZa5NeuaCPHG61/JkF+C8KA2yXrsAEXC CsR3zh/9LbxaZnvxkL+WEweepQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn8bjLz fz6U0ImSwnU1HpvwOpZeMB8GA1UdIwQYMBaAFNpHVAFBIdMmh9l9OS2QYEmoFPzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdBNi9DOEE3OTlEMjI0 NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5YUgyWDA1TFpCZ1NhZ1Vf TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrZFVBVUVoMHlhSDJYMDVMWkJnU2FnVV9NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdBNi9DOEE3OTlEMjI0NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5 YUgyWDA1TFpCZ1NhZ1VfTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPqjVivf3InIoC1MkCpxgFYk3zi2LbiM/Kw/WuyAyD99eMi/WZ6X4l q9+nZ01fABPiWB+ZTkvYgmVglbMMFwBXOA/3lKlu0KFNZ6w0STZsNCym9Mn5wzVg bb+L/Kt/r6EWY3kCXK/dRMFRwXhhPwV3ohziZ9ENfsqasBi8/M8lYxSYOoi5/oXm 6pTGI8n76qVWpsJI4PxHFLOos8PU0yWec94ehxKHJ6hNjYNIgqpWa6d5mnn5eIe8 0tkm8XnAHOTZUuBuHecWBjpohq5zSzzs2uKCOxxy+DKFR/KR3aVWG0AiCgvG1QxP UWngVyjIvEIszWMNaVE/gcdP2kI4PGVl -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:16 2025 by rpki-client