$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: GsHO4FNfJLHrYZZNFb+OIgZc17+ebWJds7V3Xv8jNnc= Subject key identifier: F0:3B:F3:39:AF:91:25:CF:8F:F8:41:B4:01:0D:3A:EF:59:E6:4F:B7 Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: 0101 Signing time: Wed 05 Nov 2025 05:12:41 +0000 Manifest this update: Wed 05 Nov 2025 05:12:40 +0000 Manifest next update: Wed 12 Nov 2025 05:12:40 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: EFvoMARJi5ZM1sl89EIeXLPW80vqLNSxJMbT9dTt0qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Nov 5 05:12:40 2025 GMT Not After : Nov 12 05:12:40 2025 GMT Subject: CN=690adcc9-9497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:cc:85:8c:45:b3:32:4f:ad:a0:c6:6f:55: 73:ab:7a:69:47:6d:9c:40:07:26:6e:ff:7c:72:36: 37:af:cc:7d:b4:87:02:48:18:64:d8:5b:21:18:dc: 65:9a:04:d8:84:38:ea:25:82:9e:06:73:13:32:d4: b6:fc:ec:8d:43:d2:ab:24:c1:e0:93:11:3d:32:de: c5:c8:f4:f7:eb:4b:72:fb:48:21:ec:92:f4:8d:db: 66:63:23:d1:a1:36:a8:99:40:af:82:4c:14:66:f1: 68:f5:f0:fb:c8:07:d6:13:9a:ac:28:10:9c:1b:63: 04:bc:cc:96:98:94:17:6d:a6:90:49:15:78:bb:07: 00:e6:9e:75:f6:29:a1:67:a5:0e:33:41:22:fd:2a: f6:09:03:bd:ca:54:71:c8:7c:a6:01:61:a6:a9:7b: 9d:1a:4b:b0:50:50:74:d0:1d:05:72:97:cf:7c:cd: 35:f2:ef:6b:70:9e:33:db:84:38:99:d1:90:09:bd: eb:3c:e0:19:aa:b8:9e:9d:ed:07:fe:d8:e7:08:35: ce:58:58:a5:17:b9:fc:5b:ae:45:48:4b:f4:12:1e: 5b:61:2b:f0:a7:6a:85:1c:8c:57:03:53:72:94:d7: b4:f2:52:22:06:9a:c9:1f:09:de:28:21:3b:04:43: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3B:F3:39:AF:91:25:CF:8F:F8:41:B4:01:0D:3A:EF:59:E6:4F:B7 X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c4:86:f4:bf:97:d7:81:dd:75:9c:a8:a6:1e:03:cb:d5:e8: 19:12:cb:6d:e4:e4:b5:da:1e:ed:e5:ba:e2:3d:9d:f6:02:71: dd:13:3e:92:bd:de:40:2c:f6:a2:2e:35:80:c8:be:31:b9:25: 73:b2:11:9b:42:90:1d:a6:2a:56:1b:52:0b:a6:40:76:ed:b3: ab:17:6b:98:76:8a:fe:4b:c3:99:63:25:77:df:c6:0a:2e:75: ec:a2:e4:a2:55:b8:65:90:da:f9:b8:da:04:82:f6:d9:f6:69: a3:d8:d5:98:7f:5e:24:71:3b:6f:b2:fc:d2:19:ae:67:7e:6b: a1:10:f1:53:71:ab:19:de:e7:35:5c:19:34:39:78:0b:6a:94: 74:cf:c5:d2:a9:03:6f:e5:f9:1d:81:dc:a4:03:28:c8:2d:7f: 17:c7:95:52:a0:ae:ac:0d:d9:8b:99:a2:03:07:60:09:41:52: f8:50:3c:d7:95:89:79:8b:84:bb:7a:e5:83:29:b3:bd:da:9f: e2:4d:40:c8:1e:b9:2e:dc:8f:cf:41:8f:b1:e7:05:19:b9:89: 69:d6:c4:b3:a6:76:d7:85:45:3b:bc:5c:1d:d1:35:b6:39:0e: 41:5d:82:a6:3e:dc:06:f6:a0:df:99:2e:0b:bb:07:44:9d:55: d6:41:e8:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw QUNBNjJCRDUwHhcNMjUxMTA1MDUxMjQwWhcNMjUxMTEyMDUxMjQwWjAYMRYwFAYD VQQDEw02OTBhZGNjOS05NDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuvMhYxFszJPraDGb1Vzq3ppR22cQAcmbv98cjY3r8x9tIcCSBhk2FshGNxl mgTYhDjqJYKeBnMTMtS2/OyNQ9KrJMHgkxE9Mt7FyPT360ty+0gh7JL0jdtmYyPR oTaomUCvgkwUZvFo9fD7yAfWE5qsKBCcG2MEvMyWmJQXbaaQSRV4uwcA5p519imh Z6UOM0Ei/Sr2CQO9ylRxyHymAWGmqXudGkuwUFB00B0FcpfPfM018u9rcJ4z24Q4 mdGQCb3rPOAZqriene0H/tjnCDXOWFilF7n8W65FSEv0Eh5bYSvwp2qFHIxXA1Ny lNe08lIiBprJHwneKCE7BEMNzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA78zmv kSXPj/hBtAENOu9Z5k+3MB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOxIb0v5fXgd11nKimHgPL1egZEstt5OS12h7t5briPZ32AnHdEz6S vd5ALPaiLjWAyL4xuSVzshGbQpAdpipWG1ILpkB27bOrF2uYdor+S8OZYyV338YK LnXsouSiVbhlkNr5uNoEgvbZ9mmj2NWYf14kcTtvsvzSGa5nfmuhEPFTcasZ3uc1 XBk0OXgLapR0z8XSqQNv5fkdgdykAyjILX8Xx5VSoK6sDdmLmaIDB2AJQVL4UDzX lYl5i4S7euWDKbO92p/iTUDIHrku3I/PQY+x5wUZuYlp1sSzpnbXhUU7vFwd0TW2 OQ5BXYKmPtwG9qDfmS4LuwdEnVXWQeh+ -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:54 2025 by rpki-client