$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: ltKA9niJHu5EfYYpLRpGZxawOo+5iK2wrAH+E1Ir+sg= Subject key identifier: E3:71:FD:18:14:5A:69:F0:2B:A5:28:E3:EE:B1:31:73:26:47:23:FE Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 01EB Signing time: Mon 03 Nov 2025 02:46:04 +0000 Manifest this update: Mon 03 Nov 2025 02:46:04 +0000 Manifest next update: Mon 10 Nov 2025 02:46:04 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: er2FmtUsotk68WCZ6O7X/ATTB0BAm9B2b1yNMcWSQNU=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yNjhdAnLRCwNWiJ1nMJfINPCaK225vWnJCXkmet4kyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: Nov 3 02:46:04 2025 GMT Not After : Nov 10 02:46:04 2025 GMT Subject: CN=6908176c-dbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:76:35:1c:a0:d9:ab:74:aa:03:04:c0:ee: cc:04:4e:4f:3c:b4:6f:4b:c8:03:71:9d:44:f3:da: 90:ba:51:b2:b1:80:16:80:db:61:d5:6a:89:31:3c: 24:01:69:b5:08:b7:0b:f0:5b:53:99:c1:7e:e5:fc: a1:d0:aa:de:54:6b:37:29:30:1f:2d:3b:d8:87:f4: 9c:d5:79:8f:65:a1:0a:80:89:aa:dc:87:67:66:bd: 5b:0e:b1:d4:e4:bf:24:44:28:00:99:e6:bd:21:eb: f7:5b:de:8b:61:06:7a:45:58:bf:43:23:5a:85:63: 86:ce:4e:e2:c1:cc:57:ac:7e:b6:0c:20:d6:2b:70: 48:6b:40:90:bd:31:e7:1a:f2:d5:1c:d7:1c:80:b3: de:99:45:69:e1:ef:6b:25:e8:75:81:26:7c:f3:6d: 83:11:a5:0c:df:8f:d3:9c:50:3e:d8:4c:ff:0d:f7: 5f:da:8c:61:2b:05:44:d0:65:25:dc:e5:cd:a7:68: f7:5f:13:99:e4:29:f1:1a:10:10:81:94:0c:54:39: 01:b9:13:6b:62:8d:73:2a:66:a8:4d:5e:2f:23:8b: 14:16:ac:d3:7f:ef:98:9c:58:1d:49:89:75:fe:50: 76:6f:60:05:89:73:69:ce:f7:35:81:c4:22:1f:66: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:71:FD:18:14:5A:69:F0:2B:A5:28:E3:EE:B1:31:73:26:47:23:FE X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ea:01:1d:fa:0a:b4:c9:a5:43:20:cf:30:e2:15:f2:6e:1c: 07:61:2d:5a:e1:f5:b6:15:5d:e8:4e:b1:55:b6:fa:65:e0:d8: e5:c6:08:2a:5a:c9:f4:c7:de:d4:a9:a1:d2:73:b3:ff:e8:b8: d5:62:4a:78:ba:0d:14:92:be:85:9c:33:5e:4f:9f:c2:6e:e4: 64:08:19:46:57:53:7c:88:2c:e7:64:6f:df:6e:12:36:a9:f7: 29:b1:2b:9f:57:4a:7f:ca:0a:7e:a5:4c:ca:e0:f3:62:bd:ef: 4b:6e:b4:14:ce:9b:e7:c4:41:65:0d:43:59:c9:f7:76:ec:0d: 0a:df:8f:ff:26:09:de:57:ac:07:49:8c:18:9f:0a:c5:0b:0f: 3e:48:22:21:88:53:60:f0:23:9e:17:83:f3:74:10:95:6e:a4: 32:b0:cf:e0:dd:e9:76:7f:51:a2:ec:c6:2b:35:1a:3b:b3:61: 27:e1:74:04:ed:be:44:ca:d1:19:35:73:05:de:2e:4a:15:9a: 03:f2:63:58:ee:10:f9:65:32:e0:fa:a5:b2:93:35:f4:c5:10: e0:20:d6:ff:8f:21:a6:34:c7:75:de:f8:22:24:07:24:5a:5b: d6:b3:83:d8:5b:5a:0d:be:61:3c:7c:89:22:79:57:bb:85:53: 01:8f:c1:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjUxMTAzMDI0NjA0WhcNMjUxMTEwMDI0NjA0WjAYMRYwFAYD VQQDEw02OTA4MTc2Yy1kYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSJ2NRyg2at0qgMEwO7MBE5PPLRvS8gDcZ1E89qQulGysYAWgNth1WqJMTwk AWm1CLcL8FtTmcF+5fyh0KreVGs3KTAfLTvYh/Sc1XmPZaEKgImq3IdnZr1bDrHU 5L8kRCgAmea9Iev3W96LYQZ6RVi/QyNahWOGzk7iwcxXrH62DCDWK3BIa0CQvTHn GvLVHNccgLPemUVp4e9rJeh1gSZ8822DEaUM34/TnFA+2Ez/Dfdf2oxhKwVE0GUl 3OXNp2j3XxOZ5CnxGhAQgZQMVDkBuRNrYo1zKmaoTV4vI4sUFqzTf++YnFgdSYl1 /lB2b2AFiXNpzvc1gcQiH2aiGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONx/RgU WmnwK6Uo4+6xMXMmRyP+MB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD6gEd+gq0yaVDIM8w4hXybhwHYS1a4fW2FV3oTrFVtvpl4Njlxggq Wsn0x97UqaHSc7P/6LjVYkp4ug0Ukr6FnDNeT5/CbuRkCBlGV1N8iCznZG/fbhI2 qfcpsSufV0p/ygp+pUzK4PNive9LbrQUzpvnxEFlDUNZyfd27A0K34//JgneV6wH SYwYnwrFCw8+SCIhiFNg8COeF4PzdBCVbqQysM/g3el2f1Gi7MYrNRo7s2En4XQE 7b5EytEZNXMF3i5KFZoD8mNY7hD5ZTLg+qWykzX0xRDgINb/jyGmNMd13vgiJAck WlvWs4PYW1oNvmE8fIkieVe7hVMBj8GS -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:25 2025 by rpki-client