$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: 4DI9Fz2/gFZhDvcanVWm/QEtpeF7f+PleeAjyz5gung= Subject key identifier: E6:AB:82:FC:41:73:FC:C5:EF:C0:25:FC:B1:79:DE:1A:BB:1A:BE:02 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 09E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 09C9 Signing time: Tue 04 Nov 2025 20:05:28 +0000 Manifest this update: Tue 04 Nov 2025 20:05:28 +0000 Manifest next update: Tue 11 Nov 2025 20:05:28 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: HjnmzcfuYn5kMAOvpXWL4z/bWcSEhtB0xeNGaAgOu74=) 2: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: HLqIoqQkySmNyWMIIry9IC33bxoaZanVi9jRVr97ewk=) 3: 08DD8180943211F09FC84074C4F9AE02.roa (hash: ip3SdK5nq+g35LDrzaKyacLzhVoTKoCaldxrPYYErIY=) 4: F03B784A8FEE11F0806DDB0BC4F9AE02.roa (hash: 0bU0l2z71DMFioEY89rJULUsuIwY2Qp7S5WbtYEHca4=) 5: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: TURUoK0EqdJvH1Sny3sw0728lsP1RbLjnRY1UT/NZtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2528 (0x9e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Nov 4 20:05:28 2025 GMT Not After : Nov 11 20:05:28 2025 GMT Subject: CN=690a5c88-5990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e2:71:54:18:22:42:47:73:5d:20:53:20:13: 40:61:d7:51:22:b5:28:39:17:9f:a4:8a:65:11:5a: 06:39:c4:98:4c:12:ad:eb:39:96:e5:42:fc:e1:56: cb:d6:1b:5d:8f:86:38:a0:e9:8b:a8:af:7e:ba:70: 37:bd:37:a5:bd:42:87:d6:77:9e:3b:12:30:dd:0a: 1e:2b:fa:50:b7:23:37:47:5d:ae:60:ba:4c:38:60: 53:74:bd:51:0a:fd:4e:e5:61:e0:62:f7:48:cf:95: 1f:23:b2:a7:7c:43:f8:44:a3:7e:c3:d6:b5:31:33: a5:c1:fc:29:5f:71:25:c6:3e:1e:0b:7f:f0:39:04: dc:c6:9b:74:ba:3d:51:bc:f3:ab:d4:98:cd:b0:3a: 31:28:5c:39:74:8e:63:09:a7:7b:71:26:12:e6:83: 83:54:d8:dd:77:0b:c4:90:ce:93:42:c6:aa:a9:23: a9:e1:ba:c0:7b:24:5e:00:6e:4c:7e:96:68:ac:b6: 18:92:72:8d:32:25:b5:a9:aa:e5:bf:b6:c3:42:5f: aa:fd:bb:78:77:14:26:83:7c:6d:c6:1b:ff:a8:68: ea:69:50:71:4a:20:f7:e8:d4:cb:97:eb:12:e3:04: 13:82:8a:a7:b7:c7:c7:6a:84:e5:f0:f5:ce:b9:c8: c1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:82:FC:41:73:FC:C5:EF:C0:25:FC:B1:79:DE:1A:BB:1A:BE:02 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e0:09:2b:29:4f:6b:a8:08:f9:a8:a2:3f:36:ee:b5:7f:d8: 1c:55:a9:a9:63:be:77:d2:be:79:4a:2a:da:fb:44:74:c4:bd: 3f:11:c0:46:a2:13:98:01:3c:47:ef:af:8e:73:32:36:ed:36: 84:c0:3e:04:67:9e:08:79:ed:e3:f3:ca:3e:19:dd:96:90:2c: 33:04:28:6c:8a:4e:34:80:63:d2:66:83:f5:20:28:b4:8f:88: 5b:0a:3c:1d:ff:ef:42:c8:a4:06:b6:78:31:9e:a3:5b:bf:33: a7:1c:b7:1e:db:07:a5:7d:54:c8:af:0a:22:db:55:ff:37:b0: 6e:21:7a:a5:da:2e:20:c9:2e:9f:b4:6c:00:a7:46:0e:64:eb: 7a:96:2a:4b:d0:1b:e6:b6:2e:bf:d3:ba:e9:dd:ed:d7:40:f6: a8:e4:84:e3:52:61:7e:5f:a3:54:d2:04:82:8a:c0:72:d5:f4: 82:cd:bb:82:fc:86:d5:7e:7a:ba:4f:2b:05:84:5d:57:dd:bb: 41:6c:18:b3:73:36:a0:39:32:4d:1a:37:92:86:5c:6c:47:89: 24:33:d8:93:1d:33:08:75:92:89:27:f4:47:4c:68:15:69:8b: 48:88:80:3d:ca:8f:82:cd:ea:6e:0c:c9:ef:ba:22:21:b0:50: 94:9b:c6:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUxMTA0MjAwNTI4WhcNMjUxMTExMjAwNTI4WjAYMRYwFAYD VQQDEw02OTBhNWM4OC01OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eJxVBgiQkdzXSBTIBNAYddRIrUoORefpIplEVoGOcSYTBKt6zmW5UL84VbL 1htdj4Y4oOmLqK9+unA3vTelvUKH1neeOxIw3QoeK/pQtyM3R12uYLpMOGBTdL1R Cv1O5WHgYvdIz5UfI7KnfEP4RKN+w9a1MTOlwfwpX3Elxj4eC3/wOQTcxpt0uj1R vPOr1JjNsDoxKFw5dI5jCad7cSYS5oODVNjddwvEkM6TQsaqqSOp4brAeyReAG5M fpZorLYYknKNMiW1qarlv7bDQl+q/bt4dxQmg3xtxhv/qGjqaVBxSiD36NTLl+sS 4wQTgoqnt8fHaoTl8PXOucjBZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOargvxB c/zF78Al/LF53hq7Gr4CMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA04AkrKU9rqAj5qKI/Nu61f9gcVampY7530r55Sira+0R0xL0/EcBG ohOYATxH76+OczI27TaEwD4EZ54Iee3j88o+Gd2WkCwzBChsik40gGPSZoP1ICi0 j4hbCjwd/+9CyKQGtngxnqNbvzOnHLce2welfVTIrwoi21X/N7BuIXql2i4gyS6f tGwAp0YOZOt6lipL0Bvmti6/07rp3e3XQPao5ITjUmF+X6NU0gSCisBy1fSCzbuC /IbVfnq6TysFhF1X3btBbBizczagOTJNGjeShlxsR4kkM9iTHTMIdZKJJ/RHTGgV aYtIiIA9yo+CzepuDMnvuiIhsFCUm8Yh -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:30 2025 by rpki-client