$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: ao7z7Byr14qU8SbZNRmF5h7vsLH6YCFWDI0t5JnUmQ0= Subject key identifier: 3B:E7:BD:BA:E3:70:99:7C:6A:3A:43:CA:B8:DF:B3:23:46:30:8A:A6 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 01FC Signing time: Mon 03 Nov 2025 02:22:15 +0000 Manifest this update: Mon 03 Nov 2025 02:22:14 +0000 Manifest next update: Mon 10 Nov 2025 02:22:14 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: eO5EXhlfrRlcNiTBw7WG16UoGxKTjlkRfUfkwe5S2Ww=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Nov 3 02:22:14 2025 GMT Not After : Nov 10 02:22:14 2025 GMT Subject: CN=690811d6-5543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:9f:bd:bb:99:59:bb:cc:36:da:18:9d:f4: c0:74:03:5a:74:af:d3:f1:c4:be:e8:56:c5:6b:4f: f2:44:de:70:23:71:04:6d:78:3d:fd:8b:9f:4e:2d: 87:96:73:db:4c:15:c3:ef:47:e6:85:0e:c2:3d:d3: b1:d8:72:8f:13:8a:5a:81:f5:d3:3c:8c:a4:40:b0: 7e:0c:d4:7b:33:b6:96:79:b2:94:47:fc:1a:72:61: 76:3f:05:63:cb:42:75:15:72:f5:bf:1d:de:72:b2: e2:b7:af:32:90:89:23:22:6e:bf:0b:0e:ce:1f:ee: 35:07:b3:16:39:e5:d7:84:7e:23:1a:f0:bd:33:8b: 13:6d:6d:8c:e6:b5:e4:46:25:ee:da:b7:8d:32:0d: f3:dd:a3:7b:b8:83:f5:2f:aa:5d:70:50:02:aa:aa: 40:dc:ee:89:ab:3e:69:f5:83:ba:0c:f9:59:66:66: 19:49:73:61:74:f0:21:1d:8c:66:f0:86:0b:84:d8: 51:8b:b6:15:11:f7:9a:4f:55:3b:84:76:30:a9:68: d8:08:60:4d:49:59:80:5a:66:58:17:ae:26:1e:e9: 96:3f:95:27:a3:df:24:5b:d1:1d:08:21:18:97:d6: 05:e7:19:b7:9c:eb:cd:11:9f:bb:77:59:14:53:47: 29:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E7:BD:BA:E3:70:99:7C:6A:3A:43:CA:B8:DF:B3:23:46:30:8A:A6 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a6:06:8b:a7:b5:df:20:b5:03:83:5d:17:b8:06:70:99:be: de:ee:f0:f2:68:02:7c:59:d2:ad:b0:0c:12:05:ae:34:1e:54: 2d:64:f6:4f:e0:1d:f8:af:11:75:b9:49:28:ae:66:7c:aa:98: 05:59:6e:ce:da:ba:2b:5f:30:56:e5:1d:81:74:2a:6e:27:13: a9:1d:7c:c5:9f:a1:29:7a:5b:f2:86:5e:bc:a8:3d:7f:ff:9a: e7:f5:b5:7a:fe:e5:a3:2b:e6:8b:a1:7a:38:9e:bf:fc:bb:2e: 0a:17:3b:32:a1:9a:4c:38:45:e1:ff:44:50:a0:c2:d9:ca:19: b4:4a:12:f0:96:fe:5d:73:a0:e3:c1:f3:a9:5c:21:07:ab:12: 54:6b:08:37:ab:5d:0b:d9:38:c8:fe:6f:93:cd:79:7d:11:84: f2:ca:40:43:29:34:92:2d:59:c6:8c:e3:e5:7a:db:0b:b1:6e: b2:76:eb:16:df:f1:a7:b1:98:dc:68:29:f0:4f:5e:b2:2c:ec: dd:d1:75:e1:41:81:dd:da:fd:2e:ca:08:a8:94:aa:b0:83:91: dd:18:60:15:82:58:46:12:6d:9a:fc:25:40:75:a2:67:78:c8: aa:cd:15:08:8e:d0:1d:2b:57:ca:17:df:33:25:76:12:e7:c9: 65:43:b5:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUxMTAzMDIyMjE0WhcNMjUxMTEwMDIyMjE0WjAYMRYwFAYD VQQDEw02OTA4MTFkNi01NTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgafvbuZWbvMNtoYnfTAdANadK/T8cS+6FbFa0/yRN5wI3EEbXg9/YufTi2H lnPbTBXD70fmhQ7CPdOx2HKPE4pagfXTPIykQLB+DNR7M7aWebKUR/wacmF2PwVj y0J1FXL1vx3ecrLit68ykIkjIm6/Cw7OH+41B7MWOeXXhH4jGvC9M4sTbW2M5rXk RiXu2reNMg3z3aN7uIP1L6pdcFACqqpA3O6Jqz5p9YO6DPlZZmYZSXNhdPAhHYxm 8IYLhNhRi7YVEfeaT1U7hHYwqWjYCGBNSVmAWmZYF64mHumWP5Uno98kW9EdCCEY l9YF5xm3nOvNEZ+7d1kUU0cprQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvnvbrj cJl8ajpDyrjfsyNGMIqmMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcpgaLp7XfILUDg10XuAZwmb7e7vDyaAJ8WdKtsAwSBa40HlQtZPZP 4B34rxF1uUkormZ8qpgFWW7O2rorXzBW5R2BdCpuJxOpHXzFn6Epelvyhl68qD1/ /5rn9bV6/uWjK+aLoXo4nr/8uy4KFzsyoZpMOEXh/0RQoMLZyhm0ShLwlv5dc6Dj wfOpXCEHqxJUawg3q10L2TjI/m+TzXl9EYTyykBDKTSSLVnGjOPletsLsW6ydusW 3/GnsZjcaCnwT16yLOzd0XXhQYHd2v0uygiolKqwg5HdGGAVglhGEm2a/CVAdaJn eMiqzRUIjtAdK1fKF98zJXYS58llQ7Wa -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:34 2025 by rpki-client