$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: jxCL5dnji3X1HaSPZDcuVcB7BVlGuiR8/duaxt0uilI= Subject key identifier: 08:0A:EA:5F:8B:21:EB:E0:B2:F7:3D:9D:55:A0:27:03:A8:47:2A:B0 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 01F4 Signing time: Mon 03 Nov 2025 02:27:06 +0000 Manifest this update: Mon 03 Nov 2025 02:27:05 +0000 Manifest next update: Mon 10 Nov 2025 02:27:05 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: qyAzx4WqNy2XdeXNqJF/oYPACAvzHqMa9NjBNdnB7As=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Nov 3 02:27:05 2025 GMT Not After : Nov 10 02:27:05 2025 GMT Subject: CN=690812fa-5807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:a3:4f:84:ea:bc:b5:ef:cb:34:40:47:61: 45:15:49:2a:a6:5b:a8:63:01:a3:2d:f0:f5:a9:37: c5:9b:03:8b:36:9e:37:7e:64:c1:28:e0:ac:96:a3: 4e:eb:b7:3e:dc:20:d2:59:3d:76:8f:92:1d:c3:00: 58:7f:c6:43:09:e8:19:c5:68:8b:48:07:e4:88:e8: a9:eb:b7:b4:c9:ac:80:7e:73:3a:d6:87:95:17:33: e2:b1:cd:e2:a8:c6:a7:e0:82:dc:e8:56:ea:d5:9e: e4:53:47:38:6b:33:38:56:aa:60:2b:54:03:ae:d0: 2a:98:39:f8:5d:b9:2c:d8:9e:54:0a:fb:ca:33:f2: ca:d2:e4:03:46:4b:15:2e:7b:4c:2d:de:c9:6e:ed: b8:3d:ee:84:ac:db:21:90:3d:2f:b6:1c:70:3e:e9: 0e:08:a3:95:c2:a5:4f:3a:2e:45:dd:fe:4b:04:c1: 4d:9d:c1:e8:ea:fb:dc:0f:24:64:f2:3f:ea:f9:30: 63:00:ca:dc:18:07:f6:dd:2f:03:92:4a:80:03:25: 51:0a:92:86:6e:97:45:61:52:b1:19:a3:b0:36:f4: 27:69:a9:f8:5e:39:ff:da:57:91:0b:b5:48:2f:e4: a6:20:76:4e:f4:bf:7d:11:25:74:cc:a1:29:ed:07: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0A:EA:5F:8B:21:EB:E0:B2:F7:3D:9D:55:A0:27:03:A8:47:2A:B0 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a8:a2:cc:16:8a:a1:13:63:1d:e9:08:3b:73:11:8c:f0:ef: b8:e0:78:6b:8c:3b:8e:0f:8f:c8:47:67:8f:4c:fb:ac:3d:b3: e9:04:35:d9:23:8b:c5:b7:3d:04:57:24:e6:2a:48:28:e5:d3: 54:bb:b8:34:d6:50:87:e6:10:d7:2f:89:16:16:b9:ba:13:b9: 6c:52:53:c5:31:25:a2:8d:2a:b9:03:37:9a:54:b3:ec:7f:8c: 28:54:37:af:d9:04:50:79:8c:5f:ee:24:fb:11:66:e7:8a:ed: 44:73:66:13:9d:10:de:97:9b:9f:59:fb:08:46:62:d0:29:d8: 55:35:86:f7:0c:1b:40:f9:d6:89:e0:01:da:0b:ae:ba:33:88: 71:f8:13:08:ce:27:d6:7c:33:18:c9:c2:df:2f:99:4b:5d:7e: c4:7a:1d:cb:36:fc:2f:36:ea:87:b5:a6:64:1b:13:22:fa:8f: fc:74:18:71:f8:1b:7a:4b:97:8c:1d:b2:09:d0:78:85:c1:f6: 46:a9:96:f0:69:8b:42:7f:16:ce:05:7d:b2:05:e3:fa:ec:bc: 5b:4c:dd:39:d4:b7:9e:48:77:3c:93:85:0c:c9:82:06:02:aa: ae:56:95:4c:ba:de:18:a1:34:19:ae:19:5d:53:42:7b:d3:e8: 08:6d:06:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUxMTAzMDIyNzA1WhcNMjUxMTEwMDIyNzA1WjAYMRYwFAYD VQQDEw02OTA4MTJmYS01ODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eyjT4TqvLXvyzRAR2FFFUkqpluoYwGjLfD1qTfFmwOLNp43fmTBKOCslqNO 67c+3CDSWT12j5IdwwBYf8ZDCegZxWiLSAfkiOip67e0yayAfnM61oeVFzPisc3i qMan4ILc6Fbq1Z7kU0c4azM4VqpgK1QDrtAqmDn4Xbks2J5UCvvKM/LK0uQDRksV LntMLd7Jbu24Pe6ErNshkD0vthxwPukOCKOVwqVPOi5F3f5LBMFNncHo6vvcDyRk 8j/q+TBjAMrcGAf23S8DkkqAAyVRCpKGbpdFYVKxGaOwNvQnaan4Xjn/2leRC7VI L+SmIHZO9L99ESV0zKEp7QclZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgK6l+L Ievgsvc9nVWgJwOoRyqwMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHqKLMFoqhE2Md6Qg7cxGM8O+44HhrjDuOD4/IR2ePTPusPbPpBDXZ I4vFtz0EVyTmKkgo5dNUu7g01lCH5hDXL4kWFrm6E7lsUlPFMSWijSq5AzeaVLPs f4woVDev2QRQeYxf7iT7EWbniu1Ec2YTnRDel5ufWfsIRmLQKdhVNYb3DBtA+daJ 4AHaC666M4hx+BMIzifWfDMYycLfL5lLXX7Eeh3LNvwvNuqHtaZkGxMi+o/8dBhx +Bt6S5eMHbIJ0HiFwfZGqZbwaYtCfxbOBX2yBeP67LxbTN051LeeSHc8k4UMyYIG AqquVpVMut4YoTQZrhldU0J70+gIbQbB -----END CERTIFICATE-----Generated at Wed Nov 5 01:38:49 2025 by rpki-client