$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: LHQsTpQ/ZNNJn9Hgj2N6s0zhR8AGXDaoqKeZYZJISBc= Subject key identifier: AE:AB:56:FA:F1:51:D6:EC:E3:B5:C9:DB:41:2D:B6:5D:47:BD:19:60 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: E9 Signing time: Mon 03 Nov 2025 05:20:22 +0000 Manifest this update: Mon 03 Nov 2025 05:20:22 +0000 Manifest next update: Mon 10 Nov 2025 05:20:22 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: oFKm+aKDNVKM7zAUJBHvhELmKDbAKtsHKPMKX9+26to=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: yG8pJzZvCKmicDw0dwhTP12v3DvDJugGeiv6wIDOe9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Nov 3 05:20:22 2025 GMT Not After : Nov 10 05:20:22 2025 GMT Subject: CN=69083b96-4f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:75:6e:29:59:86:63:eb:22:59:c2:dd:c1: f3:94:b0:6a:c8:1a:ff:0e:1c:7d:e2:de:2b:cc:c5: f2:0b:09:39:27:e7:bd:fc:30:59:a2:8f:a6:37:b8: 98:95:78:01:fb:87:d3:9c:5d:d1:98:04:3c:12:29: 44:2c:2d:44:90:98:62:22:f1:28:89:53:dd:d4:f6: b5:21:47:d8:ae:54:93:46:44:ec:49:8b:b0:23:c5: 13:4b:79:e9:e9:c7:42:17:45:0d:b7:89:c0:af:be: ce:cd:e4:1e:19:99:c9:b5:80:39:a3:0e:68:d6:3f: f9:b6:eb:75:8e:53:c6:3c:93:ed:8a:10:04:de:9d: d3:41:b4:12:c1:41:96:d3:16:d1:e3:61:56:8a:4a: ec:41:7d:5b:74:86:9d:bc:68:65:de:ec:3a:5d:77: cb:60:09:f5:df:41:82:c3:79:b7:4b:1d:7d:b2:d5: a4:6c:ae:d2:f2:29:50:69:8b:06:94:2d:1f:56:5c: 40:08:f9:2d:16:d3:ee:23:e6:c7:61:0d:c1:17:7a: 94:d0:8a:86:84:ff:58:9c:64:32:71:ea:1d:80:44: 89:04:48:bc:0e:21:15:08:3d:29:3b:0d:13:41:2b: df:ff:c4:e5:01:0d:c7:2e:4b:c5:d1:6b:b0:0f:f6: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AB:56:FA:F1:51:D6:EC:E3:B5:C9:DB:41:2D:B6:5D:47:BD:19:60 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:8b:34:3a:4c:87:65:ac:1f:10:38:0c:14:d5:02:d7:2d:25: 4d:1e:67:9c:67:c1:6c:41:ba:11:ed:df:12:18:95:8a:75:98: 8c:58:6e:92:44:68:b1:ef:7f:f1:34:ea:42:3d:86:12:27:7b: bd:83:6c:f2:a4:26:31:4d:74:f9:aa:73:e7:77:66:4a:49:70: b0:2c:d5:bb:de:f9:12:ea:f3:70:7b:8d:54:79:95:d6:61:79: 37:65:f2:35:b3:a3:11:c0:65:57:b9:2c:89:b3:4b:c0:30:50: 4d:03:6b:03:6f:26:42:6d:78:d8:5a:5f:8a:46:dd:36:87:2b: 36:f4:71:b5:ac:b3:1e:ec:17:9f:b6:2c:99:5e:8f:c6:4a:0b: ef:80:e0:1a:09:b2:fd:ee:cf:b9:4d:1c:72:02:e8:f7:6d:3f: 7b:8a:4e:ae:60:dd:e4:a2:31:a1:04:f5:1c:55:ab:e5:cf:ce: c4:e2:f3:f1:ac:9d:7c:e5:b2:33:61:ab:f1:40:bd:b4:27:dd: 52:ec:32:cb:df:56:85:1e:78:c2:53:e6:3e:c7:da:1f:64:03: b6:18:a8:34:b6:9a:4e:c4:ff:85:f1:02:0a:b1:87:67:8b:f3: 09:3b:ac:15:c0:03:66:2c:6b:3e:8e:19:ad:51:f0:f9:b1:dc: 5d:3f:a3:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUxMTAzMDUyMDIyWhcNMjUxMTEwMDUyMDIyWjAYMRYwFAYD VQQDEw02OTA4M2I5Ni00ZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHN1bilZhmPrIlnC3cHzlLBqyBr/Dhx94t4rzMXyCwk5J+e9/DBZoo+mN7iY lXgB+4fTnF3RmAQ8EilELC1EkJhiIvEoiVPd1Pa1IUfYrlSTRkTsSYuwI8UTS3np 6cdCF0UNt4nAr77OzeQeGZnJtYA5ow5o1j/5tut1jlPGPJPtihAE3p3TQbQSwUGW 0xbR42FWikrsQX1bdIadvGhl3uw6XXfLYAn130GCw3m3Sx19stWkbK7S8ilQaYsG lC0fVlxACPktFtPuI+bHYQ3BF3qU0IqGhP9YnGQyceodgESJBEi8DiEVCD0pOw0T QSvf/8TlAQ3HLkvF0WuwD/bsrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6rVvrx Udbs47XJ20Ettl1HvRlgMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6izQ6TIdlrB8QOAwU1QLXLSVNHmecZ8FsQboR7d8SGJWKdZiMWG6S RGix73/xNOpCPYYSJ3u9g2zypCYxTXT5qnPnd2ZKSXCwLNW73vkS6vNwe41UeZXW YXk3ZfI1s6MRwGVXuSyJs0vAMFBNA2sDbyZCbXjYWl+KRt02hys29HG1rLMe7Bef tiyZXo/GSgvvgOAaCbL97s+5TRxyAuj3bT97ik6uYN3kojGhBPUcVavlz87E4vPx rJ185bIzYavxQL20J91S7DLL31aFHnjCU+Y+x9ofZAO2GKg0tppOxP+F8QIKsYdn i/MJO6wVwANmLGs+jhmtUfD5sdxdP6Nq -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:37 2025 by rpki-client