$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json) Hash identifier: n36PnYQtC0NT/Hvo0PCbjXy5htnJmHMlnEfc7mfbbCE= Subject key identifier: 89:F1:21:69:57:71:36:C3:8F:0C:52:26:DC:DB:41:67:4F:7E:D7:6D Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft Manifest number: 0682 Signing time: Tue 04 Nov 2025 22:34:13 +0000 Manifest this update: Tue 04 Nov 2025 22:34:13 +0000 Manifest next update: Tue 11 Nov 2025 22:34:13 +0000 Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: Xgb+Oa6kFC6m/9L76IlIzKwedLRyqZdwiAkmZPdfwLw=) 2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: KMuh5ult9LiAce0tih+7IUcHZQamzlPDZPCJthZ1JAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Validity Not Before: Nov 4 22:34:13 2025 GMT Not After : Nov 11 22:34:13 2025 GMT Subject: CN=690a7f65-281a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:97:61:d1:3d:f1:d7:d9:5b:95:c5:85:b7: f7:42:1b:bd:da:5b:21:b7:d3:9b:b8:52:d3:66:38: 0a:74:df:b8:e6:73:b8:de:51:b3:0a:f8:30:95:e4: a3:76:24:7c:35:e4:87:5c:82:7f:62:a7:ba:a9:b9: be:c9:b3:35:d8:04:e6:0e:90:f2:6f:7a:c2:9a:d7: e2:f2:83:43:f8:a9:66:19:fe:2c:9e:dc:41:eb:ca: 19:ca:8e:31:c7:b8:03:6a:a3:be:65:7d:2f:2c:e5: 04:4c:46:70:7b:2b:f6:99:8a:10:82:52:10:e9:f6: e8:d2:89:b3:60:45:ae:db:2f:01:89:9e:3f:e1:c1: e2:6a:71:28:93:3d:31:ab:c0:39:28:f8:f5:e9:11: d0:3c:76:c2:92:47:a7:c8:f4:f6:12:38:f1:43:83: 9a:3b:34:6e:cc:1c:69:3b:4d:b3:07:48:cd:2b:71: d1:aa:45:c7:25:79:1f:e1:df:2d:5a:5c:9d:1c:fe: 87:da:29:f4:d4:42:36:ab:09:fc:15:58:1e:99:66: 93:5f:92:d5:8c:00:3d:2a:e4:6d:ba:3c:01:f0:28: 29:1b:75:4f:3f:1c:94:a7:88:00:d1:2a:d2:fe:98: 78:bb:38:5b:48:69:d7:4c:59:49:06:12:9f:ce:23: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:21:69:57:71:36:C3:8F:0C:52:26:DC:DB:41:67:4F:7E:D7:6D X509v3 Authority Key Identifier: keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:98:19:eb:9b:50:74:2a:97:01:2f:17:d6:67:38:36:9f:ed: f7:09:3c:27:01:be:8d:a4:e4:0a:ac:64:09:0e:fb:63:9b:15: 7c:e4:1c:df:22:7b:57:bd:9d:50:1f:c5:69:4b:40:0c:1b:1a: 73:69:f5:1c:79:84:18:cd:0d:d8:ff:d0:31:fe:66:c1:80:88: b6:00:b3:8e:86:4e:04:e2:67:91:03:45:f1:9c:13:65:27:a0: cc:19:7f:da:3b:15:43:97:6c:50:93:15:64:61:78:36:1a:77: d6:77:a0:3d:ed:89:36:ff:ce:c2:6e:4b:75:16:53:d7:55:8b: 87:cb:4f:a3:ec:f0:34:bf:be:41:1b:96:09:20:df:5c:19:8c: 43:75:ad:cf:c7:68:03:2e:12:e2:34:f6:f6:cf:e6:96:ce:01: 91:6d:8d:9c:51:db:79:67:b7:dd:82:51:6f:39:34:a0:b2:b2: 86:2b:7e:56:f7:2c:03:4b:e2:f4:db:87:c7:77:a6:15:86:43: a8:80:ac:c6:e7:16:9d:79:c9:cb:05:33:5d:67:05:4b:bd:33: cd:45:8a:c3:1e:99:40:16:c3:19:d9:73:5a:ab:b1:f3:5c:8b: d9:2b:ce:4a:91:19:4d:61:71:a0:a2:3d:aa:e5:2f:17:d1:4f: 3a:07:82:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5 Q0YxQzRGQkUwHhcNMjUxMTA0MjIzNDEzWhcNMjUxMTExMjIzNDEzWjAYMRYwFAYD VQQDEw02OTBhN2Y2NS0yODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6qXYdE98dfZW5XFhbf3Qhu92lsht9ObuFLTZjgKdN+45nO43lGzCvgwleSj diR8NeSHXIJ/Yqe6qbm+ybM12ATmDpDyb3rCmtfi8oND+KlmGf4sntxB68oZyo4x x7gDaqO+ZX0vLOUETEZweyv2mYoQglIQ6fbo0omzYEWu2y8BiZ4/4cHianEokz0x q8A5KPj16RHQPHbCkkenyPT2EjjxQ4OaOzRuzBxpO02zB0jNK3HRqkXHJXkf4d8t WlydHP6H2in01EI2qwn8FVgemWaTX5LVjAA9KuRtujwB8CgpG3VPPxyUp4gA0SrS /ph4uzhbSGnXTFlJBhKfziObHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInxIWlX cTbDjwxSJtzbQWdPftdtMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3 OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6 V290MlhKdkFrSzZjOGNUNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQmBnrm1B0KpcBLxfWZzg2n+33CTwnAb6NpOQKrGQJDvtjmxV85Bzf IntXvZ1QH8VpS0AMGxpzafUceYQYzQ3Y/9Ax/mbBgIi2ALOOhk4E4meRA0XxnBNl J6DMGX/aOxVDl2xQkxVkYXg2GnfWd6A97Yk2/87Cbkt1FlPXVYuHy0+j7PA0v75B G5YJIN9cGYxDda3Px2gDLhLiNPb2z+aWzgGRbY2cUdt5Z7fdglFvOTSgsrKGK35W 9ywDS+L024fHd6YVhkOogKzG5xadecnLBTNdZwVLvTPNRYrDHplAFsMZ2XNaq7Hz XIvZK85KkRlNYXGgoj2q5S8X0U86B4IH -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:48 2025 by rpki-client