$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: glxCbdY0bI5w6S9eDh5fZiVhsQ3pGBY/vqUhVBkSCZY= Subject key identifier: 1E:45:3E:BE:54:46:B5:6D:8D:78:54:19:DC:A8:2D:CF:00:C3:2D:91 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C69 Signing time: Tue 04 Nov 2025 18:41:16 +0000 Manifest this update: Tue 04 Nov 2025 18:41:15 +0000 Manifest next update: Tue 11 Nov 2025 18:41:15 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: cfWM3MqME3ndA8HHP55AiT5DsqrX0jvFAO9LqxaWr6A=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Nov 4 18:41:15 2025 GMT Not After : Nov 11 18:41:15 2025 GMT Subject: CN=690a48cc-6804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:13:96:ff:9b:5a:37:14:44:ac:d0:04:5b: af:42:98:2e:fd:78:ef:64:e0:08:f9:77:a2:e8:52: 0d:dc:52:e9:48:54:e0:ae:31:ef:bb:1b:75:fc:ee: 4b:63:e1:ef:e6:8c:cb:80:3f:26:ef:16:19:f4:78: 84:5e:b8:d9:cb:b1:89:70:e4:d8:b7:ef:c4:9d:48: e8:33:96:4c:85:60:77:b4:1c:94:c8:7d:58:57:95: c1:f2:92:e0:98:8b:b2:b9:f1:72:0d:30:54:a1:20: f7:02:c5:8a:53:3d:72:ed:6d:aa:62:b8:43:bc:a1: 57:76:46:5f:a2:02:e3:11:25:4f:8c:7e:56:1f:bb: e8:1d:30:8e:cc:65:19:4d:2d:d8:3e:96:32:67:0f: 42:df:a0:7e:2e:10:f6:04:f1:d6:2f:3d:2f:df:0b: 08:93:0f:0c:1d:f3:a0:69:5c:53:e6:9a:8a:95:8e: 93:9a:b4:d8:20:35:1d:e6:c1:c7:47:92:58:a0:49: fb:cd:12:7f:5d:0f:01:09:de:50:1b:75:cb:5a:0e: 97:e5:d6:ed:2c:fc:11:77:f6:4d:b1:c9:52:27:28: 2d:e0:6d:05:c6:cc:dc:3d:fd:f8:97:a5:0e:20:10: 5a:27:55:67:5e:1e:23:d9:b5:f6:78:9f:0e:09:c4: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:3E:BE:54:46:B5:6D:8D:78:54:19:DC:A8:2D:CF:00:C3:2D:91 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f5:6a:6f:4e:dc:9e:81:27:46:52:0f:f5:58:53:9c:42:a4: ae:7b:de:61:c2:99:ba:f5:97:f2:a0:7f:59:f4:57:ef:06:35: 02:8a:5f:8b:00:ae:e0:30:a6:16:9c:b0:c2:c9:e8:d7:61:6d: 63:0b:6a:8e:83:09:e9:a4:07:ef:a2:bc:0b:63:07:6c:21:bb: 02:39:28:47:90:ea:c2:67:25:b4:2b:aa:f0:49:3d:34:40:c6: 3a:9f:d9:74:07:b5:a9:dd:30:cf:ee:16:60:15:37:4d:95:39: 8c:8d:d5:c9:98:80:b8:47:13:a1:14:c5:bf:17:5d:f7:75:64: d4:b6:dd:0b:90:6b:25:cb:1e:98:ca:75:11:37:6b:3f:65:9a: 51:62:e4:ab:e7:12:5a:d0:1d:bc:b9:76:6c:90:5d:a0:b2:99: b9:48:59:a3:e2:a8:c1:54:d1:39:3d:67:20:5f:37:bf:c5:23: e2:4d:f7:d9:75:f9:db:26:9a:a0:77:a0:b5:08:7d:d1:64:19: bf:fa:4a:da:f0:d0:43:0d:bd:3c:9f:5c:02:2d:04:ab:51:12: 93:11:a0:90:ce:e6:5b:c2:9e:5a:33:8e:2f:ba:77:f3:80:3a: 6b:9b:30:f4:bb:9f:6e:62:7e:c2:48:33:9f:09:a1:4a:11:ea: 36:57:3f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUxMTA0MTg0MTE1WhcNMjUxMTExMTg0MTE1WjAYMRYwFAYD VQQDEw02OTBhNDhjYy02ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprATlv+bWjcURKzQBFuvQpgu/XjvZOAI+Xei6FIN3FLpSFTgrjHvuxt1/O5L Y+Hv5ozLgD8m7xYZ9HiEXrjZy7GJcOTYt+/EnUjoM5ZMhWB3tByUyH1YV5XB8pLg mIuyufFyDTBUoSD3AsWKUz1y7W2qYrhDvKFXdkZfogLjESVPjH5WH7voHTCOzGUZ TS3YPpYyZw9C36B+LhD2BPHWLz0v3wsIkw8MHfOgaVxT5pqKlY6TmrTYIDUd5sHH R5JYoEn7zRJ/XQ8BCd5QG3XLWg6X5dbtLPwRd/ZNsclSJygt4G0FxszcPf34l6UO IBBaJ1VnXh4j2bX2eJ8OCcR0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5FPr5U RrVtjXhUGdyoLc8Awy2RMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF9WpvTtyegSdGUg/1WFOcQqSue95hwpm69ZfyoH9Z9FfvBjUCil+L AK7gMKYWnLDCyejXYW1jC2qOgwnppAfvorwLYwdsIbsCOShHkOrCZyW0K6rwST00 QMY6n9l0B7Wp3TDP7hZgFTdNlTmMjdXJmIC4RxOhFMW/F133dWTUtt0LkGslyx6Y ynURN2s/ZZpRYuSr5xJa0B28uXZskF2gspm5SFmj4qjBVNE5PWcgXze/xSPiTffZ dfnbJpqgd6C1CH3RZBm/+kra8NBDDb08n1wCLQSrURKTEaCQzuZbwp5aM44vunfz gDprmzD0u59uYn7CSDOfCaFKEeo2Vz8l -----END CERTIFICATE-----Generated at Wed Nov 5 15:26:16 2025 by rpki-client