$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft File: 2cZrDkILkTQXPVU9FqoLFGt3R3M.mft (raw, json) Hash identifier: 7MfLO7jRYVH5eJmaPQoghXtfvXHBF/h2ZM/VFau0feE= Subject key identifier: 68:1A:00:67:F5:C0:42:9A:D3:51:B6:20:83:13:05:91:86:0E:E8:FA Authority key identifier: D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 Certificate issuer: /CN=A91B9B0D/serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft Manifest number: 06A0 Signing time: Tue 04 Nov 2025 22:24:34 +0000 Manifest this update: Tue 04 Nov 2025 22:24:34 +0000 Manifest next update: Tue 11 Nov 2025 22:24:33 +0000 Files and hashes: 1: 2cZrDkILkTQXPVU9FqoLFGt3R3M.crl (hash: eE6jxYUJ3uQWtFPh1U6FXy04yqO5KoYHPEfbCR8M1L0=) 2: E0147FC48AB811EB92252D18C4F9AE02.roa (hash: 7XRpzi2cKsozsds402vZG1Qa9TevGqVQRP3rG1+mDlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B0D, serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Validity Not Before: Nov 4 22:24:34 2025 GMT Not After : Nov 11 22:24:33 2025 GMT Subject: CN=690a7d22-d1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:27:0f:6a:12:a8:bc:1d:c1:0e:0a:5f:2d: 2b:d0:b4:3d:dc:48:be:aa:29:84:02:4c:78:2e:2a: 35:f3:94:d9:8c:48:83:7d:0c:a4:7c:a3:51:0d:57: 9e:0f:6a:57:97:46:15:47:26:9c:4c:42:5b:9e:5b: 82:6b:4b:bc:6e:4e:ba:10:f0:8b:a5:78:cd:14:d6: 20:af:06:56:6e:a6:f1:18:d2:2c:68:c3:7f:44:8f: 52:90:0c:53:8b:f7:ee:76:2f:f9:51:77:9d:c5:23: e8:9c:ad:f6:2a:be:30:3e:30:3d:74:25:27:8e:de: 97:9c:9a:76:5b:a1:4f:98:be:26:10:9b:04:3b:7b: 2e:bb:d6:e5:7e:36:87:32:17:3a:a5:11:7f:19:a7: ea:4a:fd:27:0e:a3:58:10:0d:14:5e:fb:cc:76:98: b9:21:80:af:04:89:cb:42:a5:93:f7:89:68:30:d7: b4:ea:12:97:41:6b:f5:e7:43:1a:88:78:66:83:37: 08:d5:aa:67:d0:31:e6:66:00:cc:dd:a0:16:c3:01: f4:10:94:68:62:ef:7c:48:f7:95:ea:54:8a:17:d6: 8c:45:1e:b3:21:8e:50:4a:24:b5:55:2e:63:49:fc: f4:0d:21:ff:f1:51:b5:fe:aa:93:e9:4e:4f:f2:cb: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:00:67:F5:C0:42:9A:D3:51:B6:20:83:13:05:91:86:0E:E8:FA X509v3 Authority Key Identifier: keyid:D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:43:64:c7:dc:3f:30:05:98:67:b9:ce:75:20:81:d4:15:45: b3:b4:7b:11:ee:a7:96:85:b8:5b:eb:0b:e5:fe:28:b4:e1:5f: 94:3f:dd:ef:91:b8:7f:6c:8a:a5:a4:a1:9a:4b:66:cb:4a:2f: 3d:cb:34:ce:d0:8d:f3:da:55:4d:12:04:b7:0a:f0:ca:72:78: 8a:88:6f:87:ec:9b:c9:e5:12:ac:5e:2b:ad:69:5d:fc:96:c6: 5a:1a:ae:17:fc:7e:be:af:f4:88:88:b5:a7:0f:fd:d3:24:e2: ec:20:68:a8:6f:24:8d:29:47:fe:8a:c7:31:0b:61:c6:aa:a6: f0:f0:91:fa:0f:1e:90:39:80:aa:c0:8b:75:b8:c8:f6:97:28: 8d:d5:c1:a9:b8:b8:a5:b6:f0:be:d1:e0:40:a7:1e:d6:68:47: 64:19:5f:94:0c:55:cd:51:c7:f6:57:ed:53:f8:21:00:41:ed: 3a:b5:5a:3a:64:a8:e4:63:9a:dd:b9:ab:70:94:c8:31:38:c6: c9:4e:7f:a2:2b:18:a5:a1:6e:87:91:08:47:1f:b4:96:88:ea: b2:2a:13:a4:12:4b:37:3c:65:9e:d2:3a:a5:49:72:e9:f2:fa: a7:f2:36:4e:a0:cd:17:5d:ac:21:eb:77:5b:f6:84:3f:af:43: a0:03:9b:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMEQxMTAvBgNVBAUTKEQ5QzY2QjBFNDIwQjkxMzQxNzNENTUzRDE2QUEwQjE0 NkI3NzQ3NzMwHhcNMjUxMTA0MjIyNDM0WhcNMjUxMTExMjIyNDMzWjAYMRYwFAYD VQQDEw02OTBhN2QyMi1kMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgcnD2oSqLwdwQ4KXy0r0LQ93Ei+qimEAkx4Lio185TZjEiDfQykfKNRDVee D2pXl0YVRyacTEJbnluCa0u8bk66EPCLpXjNFNYgrwZWbqbxGNIsaMN/RI9SkAxT i/fudi/5UXedxSPonK32Kr4wPjA9dCUnjt6XnJp2W6FPmL4mEJsEO3suu9blfjaH Mhc6pRF/GafqSv0nDqNYEA0UXvvMdpi5IYCvBInLQqWT94loMNe06hKXQWv150Ma iHhmgzcI1apn0DHmZgDM3aAWwwH0EJRoYu98SPeV6lSKF9aMRR6zIY5QSiS1VS5j Sfz0DSH/8VG1/qqT6U5P8svO9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgaAGf1 wEKa01G2IIMTBZGGDuj6MB8GA1UdIwQYMBaAFNnGaw5CC5E0Fz1VPRaqCxRrd0dz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIwRC85OEI3MjgwRThB QjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtUUVhQVlU5RnFvTEZHdDNS M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWnJEa0lMa1RRWFBWVTlGcW9MRkd0M1IzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIwRC85OEI3MjgwRThBQjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtU UVhQVlU5RnFvTEZHdDNSM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbQ2TH3D8wBZhnuc51IIHUFUWztHsR7qeWhbhb6wvl/ii04V+UP93v kbh/bIqlpKGaS2bLSi89yzTO0I3z2lVNEgS3CvDKcniKiG+H7JvJ5RKsXiutaV38 lsZaGq4X/H6+r/SIiLWnD/3TJOLsIGiobySNKUf+iscxC2HGqqbw8JH6Dx6QOYCq wIt1uMj2lyiN1cGpuLiltvC+0eBApx7WaEdkGV+UDFXNUcf2V+1T+CEAQe06tVo6 ZKjkY5rduatwlMgxOMbJTn+iKxiloW6HkQhHH7SWiOqyKhOkEks3PGWe0jqlSXLp 8vqn8jZOoM0XXawh63db9oQ/r0OgA5uE -----END CERTIFICATE-----Generated at Wed Nov 5 01:41:56 2025 by rpki-client