$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: 6Zv7dYxaBsi19EOQujtKHZ9HyaCOI4gEP3XP6NLVNJ4= Subject key identifier: 25:9D:69:83:15:EE:77:98:93:8B:BD:5C:FC:03:A5:81:38:77:2D:B7 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 163A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 1629 Signing time: Tue 04 Nov 2025 16:50:04 +0000 Manifest this update: Tue 04 Nov 2025 16:50:04 +0000 Manifest next update: Tue 11 Nov 2025 16:50:04 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: juV5Z+9ANeRfZpqDatSa3H9sulFaO7c8Io0cb4VN4ag=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5690 (0x163a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Nov 4 16:50:04 2025 GMT Not After : Nov 11 16:50:04 2025 GMT Subject: CN=690a2ebc-8494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:f1:56:a6:c0:48:fe:54:ac:ff:63:fc:63: 92:38:ba:e4:51:7b:90:f5:26:75:f6:3b:20:72:6a: e6:02:66:49:04:2c:69:4e:8d:79:a0:a3:d5:c9:de: 7e:68:2a:02:a2:d9:27:be:ff:39:3c:05:80:ce:f2: 05:d8:ca:37:26:f6:f3:9b:11:b5:25:89:45:58:12: 89:31:14:88:72:57:5e:72:e9:c3:1c:77:41:51:c4: c3:d5:0d:96:80:27:49:15:cf:b0:c6:9f:2f:c6:bd: 23:1c:01:83:be:60:38:af:19:2c:99:48:7d:4f:a4: 83:59:55:9c:d8:f4:f3:07:e8:60:71:22:2d:3c:28: 85:be:9f:14:78:b9:3e:91:2f:35:48:cb:ad:60:e8: 44:4a:cf:7e:89:ac:8a:c5:a9:18:74:75:9d:43:96: d8:3b:40:d9:9c:20:cc:06:98:b0:85:9a:59:b0:59: ce:50:a4:77:a0:1e:67:02:0c:7b:98:3d:b3:dc:df: c3:23:98:fb:66:31:91:09:40:3d:fe:9e:6e:d1:83: 9e:bb:9a:b0:8e:d6:b6:7d:13:d9:29:60:da:7d:f9: b6:d0:61:1f:29:7c:91:82:25:16:06:8a:1d:2a:2e: af:c8:44:8c:40:24:d3:d4:e1:ef:8d:3c:e2:d9:3e: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:69:83:15:EE:77:98:93:8B:BD:5C:FC:03:A5:81:38:77:2D:B7 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:8f:9c:b7:c1:f5:fd:ac:67:d1:bd:ce:dd:70:e1:15:37:0f: b6:a6:76:4e:bd:04:67:3e:f8:66:35:c7:df:e9:f8:4e:de:c1: 91:38:ac:11:43:25:08:11:b7:5d:bf:10:7d:b4:54:45:db:f0: eb:dc:b2:e7:71:98:16:b9:9e:cf:67:f4:77:5b:2d:e0:b8:31: b0:f1:9f:8a:8f:23:af:3e:3e:4b:21:05:33:88:3c:77:ae:18: 8b:48:4c:e1:6a:80:44:a2:a4:5f:6d:42:9b:90:0b:fb:0f:3e: 4d:2b:a1:3d:ca:72:e6:c9:aa:e9:70:a9:a1:67:00:85:8e:80: de:df:a1:33:f0:5a:a7:0c:70:1c:19:4a:b7:b7:a2:60:a4:da: f8:30:57:6f:b3:8e:0d:9c:97:43:82:f1:bc:d6:c3:1a:42:a9: 07:06:89:55:a4:0c:fe:92:0b:bd:50:7e:72:9b:eb:00:b0:01: e4:0a:8f:50:93:62:95:61:56:b7:1e:f0:53:ad:c7:e6:d6:8b: 33:b6:e4:5f:ed:ee:f5:14:66:e5:46:e0:55:87:e4:fd:86:40: fa:ad:e7:cc:39:0c:c4:2b:61:6b:c9:c8:ac:94:01:13:2d:58: 75:8f:ef:94:15:65:4e:e9:2a:93:24:8f:ac:9f:22:54:27:0c: d2:49:35:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUxMTA0MTY1MDA0WhcNMjUxMTExMTY1MDA0WjAYMRYwFAYD VQQDEw02OTBhMmViYy04NDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VHxVqbASP5UrP9j/GOSOLrkUXuQ9SZ19jsgcmrmAmZJBCxpTo15oKPVyd5+ aCoCotknvv85PAWAzvIF2Mo3JvbzmxG1JYlFWBKJMRSIcldecunDHHdBUcTD1Q2W gCdJFc+wxp8vxr0jHAGDvmA4rxksmUh9T6SDWVWc2PTzB+hgcSItPCiFvp8UeLk+ kS81SMutYOhESs9+iayKxakYdHWdQ5bYO0DZnCDMBpiwhZpZsFnOUKR3oB5nAgx7 mD2z3N/DI5j7ZjGRCUA9/p5u0YOeu5qwjta2fRPZKWDaffm20GEfKXyRgiUWBood Ki6vyESMQCTT1OHvjTzi2T66fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWdaYMV 7neYk4u9XPwDpYE4dy23MB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIj5y3wfX9rGfRvc7dcOEVNw+2pnZOvQRnPvhmNcff6fhO3sGROKwR QyUIEbddvxB9tFRF2/Dr3LLncZgWuZ7PZ/R3Wy3guDGw8Z+KjyOvPj5LIQUziDx3 rhiLSEzhaoBEoqRfbUKbkAv7Dz5NK6E9ynLmyarpcKmhZwCFjoDe36Ez8FqnDHAc GUq3t6JgpNr4MFdvs44NnJdDgvG81sMaQqkHBolVpAz+kgu9UH5ym+sAsAHkCo9Q k2KVYVa3HvBTrcfm1osztuRf7e71FGblRuBVh+T9hkD6refMOQzEK2FrycislAET LVh1j++UFWVO6SqTJI+snyJUJwzSSTV/ -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:37 2025 by rpki-client