$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json) Hash identifier: owqJj7lr30So2U/FA8iiPsdwwaRSdBvnku2iZZKnWEw= Subject key identifier: 81:9B:C5:C7:B6:1E:3B:1B:D1:AF:B1:B2:57:75:BA:94:4F:5F:3F:62 Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft Manifest number: 08A4 Signing time: Tue 04 Nov 2025 20:38:35 +0000 Manifest this update: Tue 04 Nov 2025 20:38:35 +0000 Manifest next update: Tue 11 Nov 2025 20:38:35 +0000 Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: nAhUUjYeeZeGz3G7zSo64YhFothyhAbIOX0uQHq79UE=) 2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: d3AVE6MmRgC9f1BP/vAUeg941gkBQiu4la3PQf5xjqo=) 3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 69lFJmCSoZqJFnlRVMecyEqrZmFOaweKrojaOmIkHVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Validity Not Before: Nov 4 20:38:35 2025 GMT Not After : Nov 11 20:38:35 2025 GMT Subject: CN=690a644b-25f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:8f:ed:8f:95:a8:44:28:a7:c7:ec:43:5d: 39:55:cb:55:83:79:21:a4:f6:91:16:11:27:bb:d1: 0c:0a:39:98:cd:f1:59:4e:5a:38:33:c1:77:fd:a5: d9:47:9b:c3:55:5e:89:ba:6c:95:dd:d1:1d:87:be: b6:3a:65:e4:a1:36:12:b1:2c:bf:1d:eb:48:c4:bd: 68:3d:fd:bf:73:ff:47:1f:3d:71:de:1c:a2:83:5a: 63:bf:84:0c:3d:dd:ea:53:49:ac:f6:77:a6:e8:26: e8:b5:29:7c:61:e3:47:ea:c7:06:cb:8c:2d:a4:2c: ad:f0:08:e1:22:c4:0e:5b:ff:d8:f6:38:d8:53:d5: ba:f0:37:a6:08:d1:d3:58:94:c9:79:48:7b:f1:1d: 21:66:a0:62:7c:67:22:bd:03:2d:f2:32:1d:cf:4e: b3:46:0c:63:51:72:a0:53:99:5b:46:c6:f5:be:89: f0:d4:58:70:0b:52:e3:95:e5:ef:e4:05:2f:d2:eb: 22:4d:74:cc:c2:21:af:68:75:7d:d8:37:ed:5e:11: bb:96:44:b8:e7:7f:6e:ef:23:b0:82:31:a4:13:de: 68:d3:1e:8d:85:bf:4b:e7:c0:c8:73:10:ab:f4:26: b3:5e:60:53:03:d5:fb:a5:27:df:01:fe:ba:01:9e: 2c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9B:C5:C7:B6:1E:3B:1B:D1:AF:B1:B2:57:75:BA:94:4F:5F:3F:62 X509v3 Authority Key Identifier: keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:22:2b:d9:09:8c:58:33:2c:6f:6f:17:c5:3b:78:df:53:29: 14:78:6a:a1:bf:14:f8:c8:a7:8c:ba:b1:fe:39:62:f3:88:8a: ad:c1:d8:5a:a9:f7:99:2f:5a:dc:6e:02:09:d3:fa:11:01:c1: 5c:85:56:98:d6:b5:73:5e:1f:67:08:65:22:77:c1:65:af:ef: 79:ce:95:19:99:7d:be:5a:3a:7f:b1:c3:ec:64:71:69:e1:a3: 80:74:b9:07:f5:df:3e:99:d9:f8:26:3e:de:51:9f:4e:ca:d2: a1:a1:aa:82:13:64:8a:64:80:82:4e:d4:3d:b9:4a:d0:79:56: 5b:5e:dd:b7:df:c8:33:de:da:cf:cb:31:cb:b8:cd:c3:88:21: 47:8f:bd:97:37:ed:48:e3:d5:de:f6:e3:e6:a1:57:0f:8d:93: b8:7e:60:52:1d:0a:08:49:7b:22:1f:e6:68:58:ab:7b:51:d0: ea:42:2e:56:f2:c1:d7:6a:c5:b6:40:3c:79:55:8b:d3:3d:f4: 4b:63:6d:5d:de:2e:63:3c:89:14:da:1e:b6:d2:b1:1d:2b:ea: f0:20:89:7d:36:76:15:c2:58:d8:c4:b5:79:46:7c:fc:87:ac: 69:72:04:51:36:59:87:b2:35:46:5d:7d:cc:93:50:38:74:50: 8e:0b:b5:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2 MUI2RDM4M0IwHhcNMjUxMTA0MjAzODM1WhcNMjUxMTExMjAzODM1WjAYMRYwFAYD VQQDEw02OTBhNjQ0Yi0yNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FGP7Y+VqEQop8fsQ105VctVg3khpPaRFhEnu9EMCjmYzfFZTlo4M8F3/aXZ R5vDVV6JumyV3dEdh762OmXkoTYSsSy/HetIxL1oPf2/c/9HHz1x3hyig1pjv4QM Pd3qU0ms9nem6CbotSl8YeNH6scGy4wtpCyt8AjhIsQOW//Y9jjYU9W68DemCNHT WJTJeUh78R0hZqBifGcivQMt8jIdz06zRgxjUXKgU5lbRsb1vonw1FhwC1LjleXv 5AUv0usiTXTMwiGvaHV92DftXhG7lkS4539u7yOwgjGkE95o0x6Nhb9L58DIcxCr 9CazXmBTA9X7pSffAf66AZ4sFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGbxce2 Hjsb0a+xsld1upRPXz9iMB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNFMi82MTgwQzBBMkNENkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2 aVZ2SFZ0YkRHaDVodHRPRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfIivZCYxYMyxvbxfFO3jfUykUeGqhvxT4yKeMurH+OWLziIqtwdha qfeZL1rcbgIJ0/oRAcFchVaY1rVzXh9nCGUid8Flr+95zpUZmX2+Wjp/scPsZHFp 4aOAdLkH9d8+mdn4Jj7eUZ9OytKhoaqCE2SKZICCTtQ9uUrQeVZbXt2338gz3trP yzHLuM3DiCFHj72XN+1I49Xe9uPmoVcPjZO4fmBSHQoISXsiH+ZoWKt7UdDqQi5W 8sHXasW2QDx5VYvTPfRLY21d3i5jPIkU2h620rEdK+rwIIl9NnYVwljYxLV5Rnz8 h6xpcgRRNlmHsjVGXX3Mk1A4dFCOC7WV -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:37 2025 by rpki-client