$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json) Hash identifier: cUzU+Gib/FbbEcNgNaFx+XsM1DjdiHo5PGUFi/Q+YP0= Subject key identifier: 43:ED:F7:CE:8C:A8:65:4D:30:84:F6:90:13:07:5D:8D:DB:35:27:CE Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Certificate serial: 06B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft Manifest number: 0694 Signing time: Sun 02 Nov 2025 22:23:12 +0000 Manifest this update: Sun 02 Nov 2025 22:23:12 +0000 Manifest next update: Sun 09 Nov 2025 22:23:12 +0000 Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: 312+ze4HdauCSYrxSJ6PqWoTHiRpvFcTzc18JUjLZfc=) 2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: NzOCnKqg2qahRXEOik1xyZlxFZ3lrtlDe5hks5SrPJA=) 3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: IqmyGbo6lE5IdQOfP9xw6QgI0Xcsu+xkWZJJhr6ZiRQ=) 4: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: lgtMLH6i/g97QEVVbiDk03F8pSWOlpowm/3LEp7TGhw=) 5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: xoqWpk6kq9UDnJpAtKinOiTxbgS2kwe2RRE2npE/Mm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Validity Not Before: Nov 2 22:23:12 2025 GMT Not After : Nov 9 22:23:12 2025 GMT Subject: CN=6907d9d0-2a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:c0:ba:8f:b5:7d:c1:16:52:09:12:a1:3b: 4b:ef:75:02:38:9f:08:a3:c0:32:27:98:c8:42:a8: d9:95:22:cf:b1:ab:94:58:92:07:53:68:aa:c5:4b: 4d:0d:32:90:86:93:82:e3:dc:55:0d:f7:eb:ba:03: 62:db:ff:e7:a3:e9:33:97:4d:bc:16:41:d5:ea:26: d2:94:f0:18:ba:5a:b6:5d:f2:aa:24:d0:2e:0e:d8: 9e:87:b4:7a:d5:da:13:06:39:d2:44:0f:16:4e:9a: 67:d8:bb:8a:1f:49:24:bb:93:22:d1:00:95:65:b5: 67:84:88:83:9c:92:6b:1b:c0:d0:f0:64:7f:39:c1: fa:84:a3:76:25:e4:8f:84:6c:e6:56:39:30:2f:c7: f7:cc:8b:7c:e9:9d:19:07:21:82:99:c2:47:a3:88: 28:cd:b9:59:7b:f2:78:54:41:68:95:50:76:52:1c: b6:5d:83:50:33:f4:a4:c5:29:4c:55:fd:d9:b3:9c: 54:51:fa:f2:bf:7b:1e:ff:10:a3:48:1f:3c:10:38: 15:b6:83:37:89:5a:c3:b6:3f:ee:bf:b5:b0:56:45: 8e:c8:68:13:74:e1:8c:8b:5b:d1:6e:a2:c0:43:92: 72:65:11:bf:3e:a2:9a:0f:0e:c4:9b:e7:9d:f1:cf: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:ED:F7:CE:8C:A8:65:4D:30:84:F6:90:13:07:5D:8D:DB:35:27:CE X509v3 Authority Key Identifier: keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:30:75:6b:54:9f:ff:b6:88:02:4e:06:a8:f0:58:13:3e: 55:07:a2:da:53:fd:57:c3:54:5b:86:8d:20:49:4d:1b:44:44: 7e:a7:de:ac:2f:fd:3f:de:81:44:a1:d7:71:cb:94:11:61:04: da:89:b3:fe:1b:d5:73:9b:6d:c7:2c:03:cf:50:06:92:96:42: 61:0d:58:a7:e2:22:50:fc:6d:70:1d:25:16:2d:9a:a3:9a:6b: 66:5f:ec:39:0c:9a:ad:f7:34:2c:31:93:17:30:af:ea:df:d9: 6f:c5:59:9a:4c:d6:99:24:97:d3:70:62:28:a4:5b:50:92:13: 07:81:bc:95:f3:59:f0:ab:b5:ce:dd:17:72:85:7a:3c:db:c0: 87:0a:27:51:44:c5:cb:4c:99:71:90:ac:2b:9b:41:c5:11:1e: c1:66:ce:f6:44:77:3a:cb:81:46:28:97:a0:57:f5:05:d8:ad: dd:9d:c0:f1:4a:af:11:be:9b:ac:8e:aa:a2:cf:13:3b:94:2b: f7:93:ea:31:70:f0:5a:da:cf:d5:97:ad:06:94:b2:e9:5d:4d: 27:97:99:32:2d:8a:d3:97:4c:c8:bd:e9:60:aa:3c:92:35:20: 8f:ee:56:d0:f1:41:73:33:5e:c5:7e:af:bf:9d:2d:a7:46:90: 00:03:57:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBRTcxMTAvBgNVBAUTKERBQkZCM0I1OUY3RDcxNkZENTJENDVBNzQxQUYxNTlB RjdFQUY3QkEwHhcNMjUxMTAyMjIyMzEyWhcNMjUxMTA5MjIyMzEyWjAYMRYwFAYD VQQDEw02OTA3ZDlkMC0yYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhDAuo+1fcEWUgkSoTtL73UCOJ8Io8AyJ5jIQqjZlSLPsauUWJIHU2iqxUtN DTKQhpOC49xVDffrugNi2//no+kzl028FkHV6ibSlPAYulq2XfKqJNAuDtieh7R6 1doTBjnSRA8WTppn2LuKH0kku5Mi0QCVZbVnhIiDnJJrG8DQ8GR/OcH6hKN2JeSP hGzmVjkwL8f3zIt86Z0ZByGCmcJHo4gozblZe/J4VEFolVB2Uhy2XYNQM/SkxSlM Vf3Zs5xUUfryv3se/xCjSB88EDgVtoM3iVrDtj/uv7WwVkWOyGgTdOGMi1vRbqLA Q5JyZRG/PqKaDw7Em+ed8c9HPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPt986M qGVNMIT2kBMHXY3bNSfOMB8GA1UdIwQYMBaAFNq/s7WffXFv1S1Fp0GvFZr36ve6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUFFNy9FMTgyNTc5Njkw RjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNXX1ZMVVduUWE4Vm12ZnE5 N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyLXp0Wjk5Y1dfVkxVV25RYThWbXZmcTk3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUFFNy9FMTgyNTc5NjkwRjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNX X1ZMVVduUWE4Vm12ZnE5N28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAuzB1a1Sf/7aIAk4GqPBYEz5VB6LaU/1Xw1Rbho0gSU0bRER+p96s L/0/3oFEoddxy5QRYQTaibP+G9Vzm23HLAPPUAaSlkJhDVin4iJQ/G1wHSUWLZqj mmtmX+w5DJqt9zQsMZMXMK/q39lvxVmaTNaZJJfTcGIopFtQkhMHgbyV81nwq7XO 3RdyhXo828CHCidRRMXLTJlxkKwrm0HFER7BZs72RHc6y4FGKJegV/UF2K3dncDx Sq8RvpusjqqizxM7lCv3k+oxcPBa2s/Vl60GlLLpXU0nl5kyLYrTl0zIvelgqjyS NSCP7lbQ8UFzM17Ffq+/nS2nRpAAA1cp -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:51 2025 by rpki-client