$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: GQt4FhHGlUcTeW41M04fJgVC8A+H2DPvZbNJD3550Dg= Subject key identifier: 37:B5:C0:A9:8A:73:AB:E3:69:46:4C:29:BA:40:2D:FE:0D:FF:A2:EA Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 0315 Signing time: Mon 03 Nov 2025 01:05:40 +0000 Manifest this update: Mon 03 Nov 2025 01:05:40 +0000 Manifest next update: Mon 10 Nov 2025 01:05:40 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: bSfb/qh/z1ZFGgp8q+CvHC9IQxoWk01u8DbWEvXwzIE=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: V0PWHgjdigOTAk+IhNcZGbzQ+qgLVdszRbUdJLxDupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: Nov 3 01:05:40 2025 GMT Not After : Nov 10 01:05:40 2025 GMT Subject: CN=6907ffe4-1fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:ed:eb:db:11:ac:68:96:02:3e:d3:ab:d4: 67:a3:95:c5:16:df:9b:c8:de:a7:bb:14:d6:34:8c: 81:a0:7e:d4:78:44:ab:fa:69:c4:c3:fa:3e:f0:b2: 67:28:76:36:52:f3:96:46:11:a5:97:f6:4a:f3:60: 63:05:66:ba:ec:df:12:15:02:6e:16:03:eb:0f:a1: 38:f3:36:cb:4b:dc:9b:f8:83:ad:dc:2f:ac:a2:40: 8c:1c:6e:9c:12:6d:0c:91:6f:4a:4c:85:03:89:12: bf:a0:e2:34:5b:e2:25:af:69:be:78:b7:1a:97:de: fb:da:76:48:17:ae:ff:6b:8b:93:bd:c4:d8:5f:b2: 86:fc:6d:c9:b5:d8:7b:b3:ba:75:b9:8f:ef:dc:60: c6:24:34:ba:e1:53:b8:fb:e3:c0:b0:93:c0:31:d7: 9b:b0:de:15:f2:78:95:77:cd:15:d7:55:a1:b8:dd: 4a:a2:87:4b:8d:84:2d:5f:6d:b5:e4:9a:e4:9f:e5: 1e:3d:41:de:19:b4:41:7e:e9:d5:1e:b9:7f:23:3f: 45:8f:a8:be:63:fa:ac:48:22:14:94:b3:a5:80:cf: 40:da:23:b4:44:de:53:af:70:6b:41:8a:be:55:4a: 79:06:2e:95:98:93:11:a8:44:81:13:dc:be:8d:96: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B5:C0:A9:8A:73:AB:E3:69:46:4C:29:BA:40:2D:FE:0D:FF:A2:EA X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0d:5d:04:0f:dc:f1:94:84:70:77:8d:d1:c2:fd:5b:17:5d: 57:cf:33:12:5d:ff:fe:23:8d:4c:67:3d:17:29:60:67:0e:97: 58:b8:d9:98:c8:1a:80:6c:ee:3d:6d:33:6f:a2:68:2d:5e:d4: 79:66:c1:f1:66:b5:9c:87:f8:6f:af:57:c2:1b:76:0d:e2:d1: dc:a1:d9:d0:4f:ef:45:9d:9f:aa:df:40:f0:2b:49:17:69:88: 14:5a:30:02:09:f6:9b:e5:f4:a9:00:59:7e:87:86:ba:7e:2b: ee:36:c2:3f:15:21:e4:8f:5f:9d:67:01:c5:b8:84:ab:28:92: a1:f9:53:1d:5b:94:fa:c1:a7:b3:db:9d:ae:42:0a:c8:36:01: 04:84:7e:d1:f1:f2:16:11:0e:5f:94:13:2a:88:2f:e1:40:da: ca:41:4d:49:66:ca:e9:dd:fd:7b:f4:50:7b:70:93:03:2a:9a: c6:d5:72:0d:5b:38:eb:08:e7:91:82:87:2d:e5:50:31:64:8e: 32:3a:c7:95:e4:db:c9:31:76:e1:40:b6:74:82:de:45:2a:1a: 7c:26:df:ef:44:d3:3a:ff:30:8b:cc:b4:9a:e9:3b:76:f4:e4: 56:d9:f4:e5:b7:42:98:5c:b0:ae:dc:dc:a2:99:22:99:5d:2f: 20:22:fa:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjUxMTAzMDEwNTQwWhcNMjUxMTEwMDEwNTQwWjAYMRYwFAYD VQQDEw02OTA3ZmZlNC0xZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBPt69sRrGiWAj7Tq9Rno5XFFt+byN6nuxTWNIyBoH7UeESr+mnEw/o+8LJn KHY2UvOWRhGll/ZK82BjBWa67N8SFQJuFgPrD6E48zbLS9yb+IOt3C+sokCMHG6c Em0MkW9KTIUDiRK/oOI0W+Ilr2m+eLcal9772nZIF67/a4uTvcTYX7KG/G3Jtdh7 s7p1uY/v3GDGJDS64VO4++PAsJPAMdebsN4V8niVd80V11WhuN1KoodLjYQtX221 5Jrkn+UePUHeGbRBfunVHrl/Iz9Fj6i+Y/qsSCIUlLOlgM9A2iO0RN5Tr3BrQYq+ VUp5Bi6VmJMRqESBE9y+jZbkRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe1wKmK c6vjaUZMKbpALf4N/6LqMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNDV0ED9zxlIRwd43Rwv1bF11XzzMSXf/+I41MZz0XKWBnDpdYuNmY yBqAbO49bTNvomgtXtR5ZsHxZrWch/hvr1fCG3YN4tHcodnQT+9FnZ+q30DwK0kX aYgUWjACCfab5fSpAFl+h4a6fivuNsI/FSHkj1+dZwHFuISrKJKh+VMdW5T6waez 252uQgrINgEEhH7R8fIWEQ5flBMqiC/hQNrKQU1JZsrp3f179FB7cJMDKprG1XIN WzjrCOeRgoct5VAxZI4yOseV5NvJMXbhQLZ0gt5FKhp8Jt/vRNM6/zCLzLSa6Tt2 9ORW2fTlt0KYXLCu3NyimSKZXS8gIvof -----END CERTIFICATE-----Generated at Tue Nov 4 12:35:01 2025 by rpki-client