$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: 2nONhLNXkfRkpdEUeAvTE7jJDSuyU7DbVPrHnpi+pn0= Subject key identifier: 2A:79:AA:40:E7:D4:5C:08:D6:D3:28:C4:62:65:43:F9:95:B8:FA:0F Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 017C Signing time: Mon 03 Nov 2025 03:44:54 +0000 Manifest this update: Mon 03 Nov 2025 03:44:54 +0000 Manifest next update: Mon 10 Nov 2025 03:44:54 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: eHyGfZagOEexF1rQ7MyrBzI8WqFkpcBbPasvrH10qYA=) 2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: Nov 3 03:44:54 2025 GMT Not After : Nov 10 03:44:54 2025 GMT Subject: CN=69082536-33de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:de:9e:84:68:e9:a1:1e:21:41:33:61:ce: 58:4b:4b:25:0f:c3:ea:a3:ae:7f:0d:e9:f6:af:dd: 08:56:09:9f:80:ee:f2:a4:67:fa:fc:99:3c:f1:4b: 6e:8e:ce:06:01:d9:11:d4:f6:85:06:19:5d:26:ad: 35:96:a9:68:9d:71:86:8e:45:bb:ad:83:80:40:3b: 31:df:dc:da:59:49:63:97:76:48:5e:41:45:1e:54: 10:25:06:f1:c9:21:78:26:57:96:03:3e:98:2d:1a: 76:cf:ed:66:47:d9:a7:a2:d1:0b:4b:6f:b4:90:d1: 88:39:69:c8:98:0b:56:50:e3:92:90:3f:5b:4c:4c: a2:37:5e:91:32:65:7a:da:17:12:1b:09:b1:88:bb: e3:4e:65:29:9b:53:b2:ec:1e:4d:c8:45:9a:4a:3c: 25:53:cb:9e:49:2f:19:8e:d1:1e:07:d8:56:17:8c: ca:f9:f0:ba:d5:90:17:a0:08:14:d1:79:fe:0b:97: 55:49:64:9b:07:c4:81:20:6e:6d:60:54:d5:c7:b7: cd:42:a4:43:23:b2:e6:9c:47:f5:0e:c3:31:3f:ef: 28:92:8f:04:b8:9e:54:a4:04:49:6c:ee:d6:67:75: 75:20:89:a6:01:4b:e5:5a:fa:d1:91:c0:bd:54:e6: ee:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:79:AA:40:E7:D4:5C:08:D6:D3:28:C4:62:65:43:F9:95:B8:FA:0F X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d2:17:f5:71:bc:42:da:1d:ca:bd:f0:ce:d5:bd:cf:00:0a: 5f:e3:b3:2f:96:af:2a:ae:6c:c6:8e:6e:7c:74:b4:89:ea:bd: 0b:e0:77:02:0c:e4:8c:32:ca:24:d3:31:34:b1:15:83:40:f1: 40:53:e3:95:9e:a2:2b:87:7e:e8:19:a3:f7:3f:a9:a9:f4:1a: c8:8a:2e:74:bb:35:c6:26:e0:4f:d1:61:fa:cb:25:a7:2a:f4: 58:83:64:b7:4c:bd:a2:de:34:d9:4f:a5:61:8f:1b:c5:dc:1d: 87:6a:6f:a3:46:29:d5:11:44:b8:59:36:31:81:4b:39:28:80: db:e2:7b:4d:83:53:1c:c7:20:b8:aa:32:22:fb:a4:b6:4c:4f: 25:63:c5:49:51:8e:0f:b4:d0:f6:d3:89:81:59:4c:f6:92:af: 07:a5:07:21:1e:63:16:b0:49:7d:45:c1:1f:7d:fb:6c:db:fc: fb:8d:72:a0:0f:f6:fa:5d:21:69:a5:07:32:72:f0:5a:6a:3b: 88:62:5e:d8:ce:9b:e2:fc:97:b1:e2:1c:28:7e:21:1d:e4:04: 54:9e:a5:75:f0:30:5a:27:19:42:23:0d:40:e9:83:ef:85:80: 45:3a:3f:95:cc:82:5c:22:9c:39:5d:13:80:be:cc:37:88:b1: ee:9e:b6:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjUxMTAzMDM0NDU0WhcNMjUxMTEwMDM0NDU0WjAYMRYwFAYD VQQDEw02OTA4MjUzNi0zM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HzenoRo6aEeIUEzYc5YS0slD8Pqo65/Den2r90IVgmfgO7ypGf6/Jk88Utu js4GAdkR1PaFBhldJq01lqlonXGGjkW7rYOAQDsx39zaWUljl3ZIXkFFHlQQJQbx ySF4JleWAz6YLRp2z+1mR9mnotELS2+0kNGIOWnImAtWUOOSkD9bTEyiN16RMmV6 2hcSGwmxiLvjTmUpm1Oy7B5NyEWaSjwlU8ueSS8ZjtEeB9hWF4zK+fC61ZAXoAgU 0Xn+C5dVSWSbB8SBIG5tYFTVx7fNQqRDI7LmnEf1DsMxP+8oko8EuJ5UpARJbO7W Z3V1IImmAUvlWvrRkcC9VObuVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp5qkDn 1FwI1tMoxGJlQ/mVuPoPMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK0hf1cbxC2h3KvfDO1b3PAApf47Mvlq8qrmzGjm58dLSJ6r0L4HcC DOSMMsok0zE0sRWDQPFAU+OVnqIrh37oGaP3P6mp9BrIii50uzXGJuBP0WH6yyWn KvRYg2S3TL2i3jTZT6VhjxvF3B2Ham+jRinVEUS4WTYxgUs5KIDb4ntNg1McxyC4 qjIi+6S2TE8lY8VJUY4PtND204mBWUz2kq8HpQchHmMWsEl9RcEfffts2/z7jXKg D/b6XSFppQcycvBaajuIYl7Yzpvi/Jex4hwofiEd5ARUnqV18DBaJxlCIw1A6YPv hYBFOj+VzIJcIpw5XROAvsw3iLHunrZI -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:13 2025 by rpki-client