$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: cPDJ97pdhktNE/m/ODZYJ394bXsj26skDUBtSKUPyx8= Subject key identifier: EA:C2:B9:31:FB:E2:F7:E5:C5:67:CA:91:7E:E4:DE:C2:BB:51:C8:DB Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 01F5 Signing time: Mon 03 Nov 2025 02:33:06 +0000 Manifest this update: Mon 03 Nov 2025 02:33:05 +0000 Manifest next update: Mon 10 Nov 2025 02:33:05 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: +mKarkPRby03WBNF7OLKw9RFknW5hzJjotXg3T0b5ko=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Nov 3 02:33:05 2025 GMT Not After : Nov 10 02:33:05 2025 GMT Subject: CN=69081461-29ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:6f:2a:33:9b:8b:00:68:6c:30:ee:c0:f6: b6:8b:c2:0a:c2:37:ea:ac:86:a7:90:6f:57:8e:96: 78:50:7e:61:b8:1e:b9:38:bc:ae:9d:ff:1d:2e:85: 85:31:d9:e3:78:ce:29:8b:62:ad:dd:72:e6:01:8b: 9f:fe:36:c1:22:5b:b4:22:9c:6a:42:8a:d8:fc:c3: ef:58:b1:a5:ce:8a:af:f1:c3:b9:89:81:e1:88:fd: 4c:38:7d:fc:08:d4:63:b3:7b:c0:12:9d:b4:53:a2: 66:94:42:da:8e:14:e2:bc:4d:94:8b:4e:0f:09:09: d6:40:64:18:68:38:c5:87:29:23:51:7d:2f:38:fd: 49:af:5c:2e:90:6b:c7:57:e5:fd:a7:5f:2c:6e:18: fd:e0:16:28:e8:87:1f:3e:d0:7f:1e:93:0a:22:ce: ab:b7:ad:29:56:12:fc:b2:0b:cb:d7:47:5a:47:c2: 80:4f:3e:7a:ef:bb:75:99:95:61:dd:34:8d:58:d2: b8:34:36:b3:0f:9d:79:15:e9:d2:98:00:31:ee:c8: cf:53:dc:12:d2:0d:fd:23:ea:a8:4b:49:c6:a5:1c: 07:30:63:36:c8:da:0f:44:62:8d:7c:2e:72:5d:83: 6d:e8:36:6b:20:05:1d:b4:27:7d:6c:e8:5f:a8:1f: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:B9:31:FB:E2:F7:E5:C5:67:CA:91:7E:E4:DE:C2:BB:51:C8:DB X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:04:bd:1c:e9:06:fd:64:29:99:54:f6:3f:4c:f6:71:82:3b: d3:85:6a:e8:80:b3:23:2f:67:1b:f9:82:b7:55:17:41:fd:4c: 20:45:db:c4:52:4e:f9:33:72:df:f0:be:fe:af:eb:8f:cc:d3: e8:c8:df:4f:2d:27:3a:26:ce:1c:e2:16:8a:8c:eb:0c:3a:ce: c2:3d:63:55:96:e3:76:b1:d2:0e:61:c7:71:0b:bf:2e:f2:c0: 1e:c1:74:bb:30:ce:8a:cc:32:67:84:9c:8d:3e:7c:c1:df:a3: 73:ae:b8:a6:d1:c4:9c:c0:af:79:e9:6e:2d:15:87:aa:91:89: ad:2d:07:ad:df:93:31:3c:3f:0e:e9:c0:1a:8f:15:b4:24:9d: 3e:43:95:a7:68:dc:1d:66:82:2d:99:ea:ff:09:3e:97:56:53: 1c:12:a6:e8:73:2a:e7:b2:77:af:e4:ef:e8:a1:5c:f5:80:9d: ff:51:c3:72:52:83:5a:25:2f:0a:06:af:73:6f:64:d3:1e:a3: 89:ea:4e:29:4e:89:57:33:37:b8:a9:ad:f4:ed:65:77:1d:de: f8:0e:3b:0d:46:8e:4d:13:96:6c:bc:6b:fa:4a:db:bb:0f:82: 0c:1b:c0:8e:51:d2:d5:8d:a8:3e:22:47:7c:05:e4:ab:78:d2: 6d:3a:3b:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjUxMTAzMDIzMzA1WhcNMjUxMTEwMDIzMzA1WjAYMRYwFAYD VQQDEw02OTA4MTQ2MS0yOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbdvKjObiwBobDDuwPa2i8IKwjfqrIankG9XjpZ4UH5huB65OLyunf8dLoWF MdnjeM4pi2Kt3XLmAYuf/jbBIlu0IpxqQorY/MPvWLGlzoqv8cO5iYHhiP1MOH38 CNRjs3vAEp20U6JmlELajhTivE2Ui04PCQnWQGQYaDjFhykjUX0vOP1Jr1wukGvH V+X9p18sbhj94BYo6IcfPtB/HpMKIs6rt60pVhL8sgvL10daR8KATz5677t1mZVh 3TSNWNK4NDazD515FenSmAAx7sjPU9wS0g39I+qoS0nGpRwHMGM2yNoPRGKNfC5y XYNt6DZrIAUdtCd9bOhfqB/oRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrCuTH7 4vflxWfKkX7k3sK7UcjbMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBBL0c6Qb9ZCmZVPY/TPZxgjvThWrogLMjL2cb+YK3VRdB/UwgRdvE Uk75M3Lf8L7+r+uPzNPoyN9PLSc6Js4c4haKjOsMOs7CPWNVluN2sdIOYcdxC78u 8sAewXS7MM6KzDJnhJyNPnzB36Nzrrim0cScwK956W4tFYeqkYmtLQet35MxPD8O 6cAajxW0JJ0+Q5WnaNwdZoItmer/CT6XVlMcEqbocyrnsnev5O/ooVz1gJ3/UcNy UoNaJS8KBq9zb2TTHqOJ6k4pTolXMze4qa307WV3Hd74DjsNRo5NE5ZsvGv6Stu7 D4IMG8COUdLVjag+Ikd8BeSreNJtOjsM -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:05 2025 by rpki-client