$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: YO4FBTsTaFQEJiGS5dWFZixpZavnpJq+a6bM5D7ot+A= Subject key identifier: 0C:B0:1F:7C:7A:44:29:00:B9:A1:D9:FF:49:55:5C:2E:69:C8:A2:BD Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 01EC Signing time: Mon 03 Nov 2025 02:33:31 +0000 Manifest this update: Mon 03 Nov 2025 02:33:31 +0000 Manifest next update: Mon 10 Nov 2025 02:33:31 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: c1A6YIHcPXMEH5EnzJcx3ON9yhBUyrFGZY0rxvIhBMg=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: /+RFC3ph8TBdVcE4Ho9sjOY2q50Lm+IUGN0ewBHECtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: Nov 3 02:33:31 2025 GMT Not After : Nov 10 02:33:31 2025 GMT Subject: CN=6908147b-7b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:c5:6c:d3:49:39:a8:11:f9:d0:f0:f8:1e: c1:a8:97:49:5e:79:c3:86:ee:cc:4e:b5:bb:15:b1: 6c:6c:36:31:37:78:b2:56:e5:6a:71:a0:9e:5f:c0: 11:57:b8:1d:85:de:82:34:ab:ef:b5:51:fa:c7:b8: ae:af:a6:2f:d5:c8:8f:65:41:1e:83:79:35:9d:44: 46:97:2a:07:4e:87:7d:f6:36:47:eb:38:dc:3d:fa: 29:ee:62:d5:91:fa:bc:3d:89:a5:76:10:eb:88:2d: 9a:a4:17:08:4a:f0:89:86:25:a8:75:50:bb:ad:93: 27:42:ae:0b:5a:15:dd:56:e2:f9:88:fd:30:27:bf: 3a:17:99:88:58:13:d5:5c:48:59:d7:14:b6:97:83: d8:94:c3:a0:07:d4:50:32:57:bb:d8:0c:d0:7c:c0: 74:3e:6d:4f:23:27:c8:f2:5d:40:76:f8:16:6d:4a: 1c:a8:9e:3b:b7:46:3e:cc:df:15:a7:ea:71:3d:0a: 92:43:10:21:a2:f1:d2:d2:a7:f6:aa:db:af:3c:c7: cc:a3:e2:12:5e:4f:0b:eb:20:71:84:84:22:0b:3b: 7e:bf:26:38:e7:d3:92:8a:6d:bb:31:f1:bb:81:12: 62:fa:af:cd:c1:de:28:a6:33:3a:0a:2c:f3:b5:5b: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:1F:7C:7A:44:29:00:B9:A1:D9:FF:49:55:5C:2E:69:C8:A2:BD X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:11:0c:70:99:7a:cd:52:c9:6d:a6:d0:83:dd:26:d8:ea:d4: ab:6a:3c:e6:a7:47:1e:a9:d1:53:19:9b:f1:ed:7a:44:43:e2: 62:29:97:64:a4:71:5e:82:b8:b0:9f:30:e6:cc:2e:28:23:0c: 03:fe:d7:e6:2c:d7:06:03:47:d3:b9:6d:9a:90:8f:f0:f4:81: 6d:32:58:60:62:7e:57:37:54:4d:da:0e:bb:55:d4:b0:fa:22: 6f:6b:01:46:fd:8d:8d:b0:15:cb:fd:ac:7c:54:95:37:d7:d4: d8:f5:ce:4d:58:c4:70:94:4e:11:2a:26:d6:4d:27:c8:d9:b6: 63:80:2f:55:ee:e0:1a:20:4e:3b:c8:5d:c3:f1:78:5a:9f:ba: 89:88:ed:bb:5c:bd:88:7e:40:a1:67:b4:40:aa:6c:e5:7b:a9: 4e:f2:64:7c:ef:49:bb:c0:3a:36:cb:74:e9:c6:40:21:87:6e: a6:46:36:ed:ca:2c:62:f1:04:8c:47:f0:9e:09:01:92:3d:74: e7:0f:f8:03:6a:fa:6e:fb:36:ca:f2:6a:54:c5:c6:df:a3:15: 6b:72:db:8f:8e:5e:6f:b3:f3:40:3c:f8:fb:5c:b2:14:ec:68: ff:69:75:76:d9:96:d4:25:4c:03:b0:b8:c9:82:ce:0e:74:2e: 6d:d4:fb:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjUxMTAzMDIzMzMxWhcNMjUxMTEwMDIzMzMxWjAYMRYwFAYD VQQDEw02OTA4MTQ3Yi03YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumjFbNNJOagR+dDw+B7BqJdJXnnDhu7MTrW7FbFsbDYxN3iyVuVqcaCeX8AR V7gdhd6CNKvvtVH6x7iur6Yv1ciPZUEeg3k1nURGlyoHTod99jZH6zjcPfop7mLV kfq8PYmldhDriC2apBcISvCJhiWodVC7rZMnQq4LWhXdVuL5iP0wJ786F5mIWBPV XEhZ1xS2l4PYlMOgB9RQMle72AzQfMB0Pm1PIyfI8l1AdvgWbUocqJ47t0Y+zN8V p+pxPQqSQxAhovHS0qf2qtuvPMfMo+ISXk8L6yBxhIQiCzt+vyY459OSim27MfG7 gRJi+q/Nwd4opjM6CizztVtjYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAywH3x6 RCkAuaHZ/0lVXC5pyKK9MB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1EQxwmXrNUsltptCD3SbY6tSrajzmp0ceqdFTGZvx7XpEQ+JiKZdk pHFegriwnzDmzC4oIwwD/tfmLNcGA0fTuW2akI/w9IFtMlhgYn5XN1RN2g67VdSw +iJvawFG/Y2NsBXL/ax8VJU319TY9c5NWMRwlE4RKibWTSfI2bZjgC9V7uAaIE47 yF3D8Xhan7qJiO27XL2IfkChZ7RAqmzle6lO8mR870m7wDo2y3TpxkAhh26mRjbt yixi8QSMR/CeCQGSPXTnD/gDavpu+zbK8mpUxcbfoxVrctuPjl5vs/NAPPj7XLIU 7Gj/aXV22ZbUJUwDsLjJgs4OdC5t1Pud -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:29 2025 by rpki-client