$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: P6BXmD+GZOxmIxrkJdoCk/opqkMaOQEAN2emRqcJaPQ= Subject key identifier: 47:1A:98:3F:5E:81:70:27:08:F1:12:93:B6:BD:09:41:98:CE:FE:17 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 2502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 24EC Signing time: Tue 04 Nov 2025 15:50:39 +0000 Manifest this update: Tue 04 Nov 2025 15:50:38 +0000 Manifest next update: Tue 11 Nov 2025 15:50:38 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: irtrCUSURRSXP1rCNJpT8U914BBZDQWNtDIKHGrGYE0=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: gjGyoU6UehPX0w4evr1O57YIj1TJSqlSY6y93UsHPOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9474 (0x2502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Nov 4 15:50:38 2025 GMT Not After : Nov 11 15:50:38 2025 GMT Subject: CN=690a20ce-9414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e4:f4:08:3f:53:e1:10:56:1f:27:47:ab:6a: e0:be:5f:6f:87:72:c5:5b:30:6f:41:60:0f:1a:77: 7a:84:c4:a8:7d:a5:91:ca:0d:f6:6a:99:a6:b9:57: 71:d8:92:56:7b:99:49:8f:8b:eb:d4:8d:ce:8f:4d: 13:cb:42:28:20:de:71:c1:05:ac:f7:1d:1a:dd:04: 4d:9f:4e:19:3d:32:47:68:8d:5f:f5:f3:1f:9e:c0: 1f:18:bf:05:ed:a5:fa:aa:b2:1c:bc:71:2c:cb:3f: f2:bc:42:ec:01:84:be:61:dc:ea:6d:12:50:cd:32: df:fc:fb:b7:7f:9f:0a:5b:9f:e5:45:17:77:e5:f5: d5:2f:58:5a:a7:ee:96:4a:f7:08:70:c3:02:23:88: c8:e9:51:be:bd:2e:db:07:c0:70:97:af:23:58:66: 6a:c1:18:99:1f:03:bd:21:f3:a8:ae:03:2b:7c:c9: 87:dc:c7:c0:83:2c:11:60:e8:2e:f2:79:87:a2:a4: 5e:17:c6:4b:d5:c0:c7:82:fd:07:fa:52:46:5d:c1: 65:8b:dd:2e:46:45:86:99:0f:e5:2f:7f:f8:a7:88: 5b:f2:f7:d3:48:2f:d6:15:2e:51:25:1c:dc:ee:ff: 13:79:2d:15:dd:11:4e:77:2f:24:c0:70:d3:62:d7: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1A:98:3F:5E:81:70:27:08:F1:12:93:B6:BD:09:41:98:CE:FE:17 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5d:9b:ba:5b:6f:b7:1c:d3:6a:ef:02:96:ad:b9:59:6c:0a: b9:85:7e:57:d2:a8:ee:20:51:0c:37:bd:ad:9d:9a:ec:cb:05: 80:e5:bd:48:b1:82:da:ef:38:4d:b8:ce:2a:1f:6e:e1:03:c0: db:40:49:c3:d1:80:8d:c5:67:3f:3e:e8:33:18:97:b1:03:95: cb:fc:e5:a7:3e:95:b3:1b:c7:69:7a:8b:4e:75:1e:a9:a5:d2: 88:de:66:9c:b5:65:23:95:64:91:fc:4f:87:85:3d:e8:57:e9: 53:6e:cd:76:21:bc:76:1d:58:71:b4:48:86:0b:a1:1a:ec:02: 6b:ac:95:46:3d:d8:18:b8:12:a1:a4:4f:3f:2a:ba:48:3a:e5: 6c:d4:1a:9e:8b:99:3a:9d:f7:26:be:c6:d0:52:a9:a3:9f:0d: a4:62:bb:32:4c:01:09:76:5d:ba:2b:c3:9c:e4:d2:02:dd:5d: 5a:69:3c:34:c9:2b:48:3b:35:41:2d:1b:59:fe:e2:d5:fd:da: 1e:2d:7b:49:e3:51:6f:0e:65:f0:63:82:ec:f2:5c:23:84:87: d5:a7:84:b2:ae:0f:f5:c2:9b:d4:82:8b:98:c7:6d:38:5f:a1: 20:c6:8a:21:87:3e:ff:2e:1f:03:19:bd:b4:2a:10:27:c7:f6: 21:c2:24:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUxMTA0MTU1MDM4WhcNMjUxMTExMTU1MDM4WjAYMRYwFAYD VQQDEw02OTBhMjBjZS05NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uT0CD9T4RBWHydHq2rgvl9vh3LFWzBvQWAPGnd6hMSofaWRyg32apmmuVdx 2JJWe5lJj4vr1I3Oj00Ty0IoIN5xwQWs9x0a3QRNn04ZPTJHaI1f9fMfnsAfGL8F 7aX6qrIcvHEsyz/yvELsAYS+YdzqbRJQzTLf/Pu3f58KW5/lRRd35fXVL1hap+6W SvcIcMMCI4jI6VG+vS7bB8Bwl68jWGZqwRiZHwO9IfOorgMrfMmH3MfAgywRYOgu 8nmHoqReF8ZL1cDHgv0H+lJGXcFli90uRkWGmQ/lL3/4p4hb8vfTSC/WFS5RJRzc 7v8TeS0V3RFOdy8kwHDTYtc2jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcamD9e gXAnCPESk7a9CUGYzv4XMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuXZu6W2+3HNNq7wKWrblZbAq5hX5X0qjuIFEMN72tnZrsywWA5b1I sYLa7zhNuM4qH27hA8DbQEnD0YCNxWc/PugzGJexA5XL/OWnPpWzG8dpeotOdR6p pdKI3mactWUjlWSR/E+HhT3oV+lTbs12Ibx2HVhxtEiGC6Ea7AJrrJVGPdgYuBKh pE8/KrpIOuVs1Bqei5k6nfcmvsbQUqmjnw2kYrsyTAEJdl26K8Oc5NIC3V1aaTw0 yStIOzVBLRtZ/uLV/doeLXtJ41FvDmXwY4Ls8lwjhIfVp4Syrg/1wpvUgouYx204 X6Egxoohhz7/Lh8DGb20KhAnx/YhwiRk -----END CERTIFICATE-----Generated at Tue Nov 4 22:49:10 2025 by rpki-client