$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: 7lzYOvj1Pj/YWaAI8eFCeHQMWZBll6cdiIfGoNrNCJo= Subject key identifier: 2B:F5:CB:EF:D4:DC:07:50:86:EE:69:B1:25:DF:7C:57:C7:97:E1:5F Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 025E Signing time: Mon 03 Nov 2025 01:38:58 +0000 Manifest this update: Mon 03 Nov 2025 01:38:57 +0000 Manifest next update: Mon 10 Nov 2025 01:38:57 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: 1W7LBQIM1nhMUhJOzSiFX6GJ32wzeILwxWtuPUgWDBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: Nov 3 01:38:57 2025 GMT Not After : Nov 10 01:38:57 2025 GMT Subject: CN=690807b2-26f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:48:d2:dc:8a:b6:1a:23:cd:fb:3c:40:b4: 42:69:a3:cf:5f:0f:e3:ed:34:2a:d2:a3:9e:4e:df: 97:2f:7a:3f:ca:f2:bc:25:b9:d9:b3:26:83:a0:da: 05:75:d0:ba:43:b5:f4:05:2b:ea:6c:ed:3e:0c:32: 4f:64:94:43:0d:42:f0:43:64:9a:86:d5:a2:74:f2: f4:a7:12:56:9e:6c:21:ed:47:10:a8:09:64:52:da: 40:84:0e:5d:48:8b:b0:a7:c1:13:e2:1a:55:7a:e2: 82:7a:8b:a3:84:af:42:d4:cb:83:7a:da:2e:10:fc: 03:19:4d:3d:b8:44:54:c9:3f:1a:af:77:64:d8:f7: f3:a8:c8:b7:a3:13:fe:60:57:97:41:18:2d:30:df: c7:a4:23:d9:21:1c:6b:4b:35:48:22:33:71:a4:7e: 9f:0f:6b:64:e1:bd:f9:c0:f0:27:3b:ac:5b:79:36: b7:75:85:3f:31:94:cc:88:8e:52:ca:a2:fb:9c:a6: 2a:ea:21:be:00:96:84:a2:8c:b8:f7:c5:0a:15:9a: 83:91:92:dd:17:3e:c1:dd:27:05:06:93:e5:b8:8d: e0:bf:9a:20:07:cd:ca:c0:25:0f:24:4d:c4:21:6e: 80:10:91:10:1c:3f:d6:67:73:1f:dc:3d:55:57:11: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F5:CB:EF:D4:DC:07:50:86:EE:69:B1:25:DF:7C:57:C7:97:E1:5F X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ff:bd:d2:bb:fc:0f:51:be:85:11:09:aa:65:ba:21:2e:bd: 3e:8f:58:44:22:3d:8c:5f:e0:90:6b:c5:af:09:41:66:5f:80: e5:b9:b2:27:47:ce:72:46:82:94:2e:9d:07:e5:3e:7c:dd:31: a1:d9:fe:af:f3:7c:71:bd:38:c9:e5:33:91:57:9c:d9:d7:03: 08:16:80:a3:19:ec:71:65:1b:cf:ea:d0:78:22:30:49:bb:a3: 61:67:ba:32:98:68:50:9c:22:81:5b:0e:dc:d3:ef:90:a7:0d: d1:2e:ac:cb:2c:85:ba:70:42:eb:ec:18:fb:12:5e:dc:d5:19: 3a:6a:8e:14:e8:63:cb:74:a9:e2:2f:7e:0d:79:cd:17:69:e2: b7:9d:33:94:57:85:ed:14:4a:6f:fc:4b:e7:f8:f0:de:c7:ee: a8:13:18:5f:99:e5:0b:43:08:a3:5b:2b:b2:6b:36:02:34:25: 4d:a9:f4:7a:28:b2:4b:66:78:50:0b:f7:2f:e8:76:86:fd:dc: 52:34:4a:38:59:c6:3a:6a:5f:f0:8f:5a:b8:db:12:3d:25:65: 03:7b:c9:51:25:be:fa:13:b6:64:1b:a0:6c:63:5c:bd:c4:83: 72:45:9d:cd:1f:f9:62:8c:7c:24:5d:0e:fd:96:bc:67:3d:fd: 9f:a2:8c:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjUxMTAzMDEzODU3WhcNMjUxMTEwMDEzODU3WjAYMRYwFAYD VQQDEw02OTA4MDdiMi0yNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjdI0tyKthojzfs8QLRCaaPPXw/j7TQq0qOeTt+XL3o/yvK8JbnZsyaDoNoF ddC6Q7X0BSvqbO0+DDJPZJRDDULwQ2SahtWidPL0pxJWnmwh7UcQqAlkUtpAhA5d SIuwp8ET4hpVeuKCeoujhK9C1MuDetouEPwDGU09uERUyT8ar3dk2PfzqMi3oxP+ YFeXQRgtMN/HpCPZIRxrSzVIIjNxpH6fD2tk4b35wPAnO6xbeTa3dYU/MZTMiI5S yqL7nKYq6iG+AJaEooy498UKFZqDkZLdFz7B3ScFBpPluI3gv5ogB83KwCUPJE3E IW6AEJEQHD/WZ3Mf3D1VVxF5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCv1y+/U 3AdQhu5psSXffFfHl+FfMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU/73Su/wPUb6FEQmqZbohLr0+j1hEIj2MX+CQa8WvCUFmX4DlubIn R85yRoKULp0H5T583TGh2f6v83xxvTjJ5TORV5zZ1wMIFoCjGexxZRvP6tB4IjBJ u6NhZ7oymGhQnCKBWw7c0++Qpw3RLqzLLIW6cELr7Bj7El7c1Rk6ao4U6GPLdKni L34Nec0XaeK3nTOUV4XtFEpv/Evn+PDex+6oExhfmeULQwijWyuyazYCNCVNqfR6 KLJLZnhQC/cv6HaG/dxSNEo4WcY6al/wj1q42xI9JWUDe8lRJb76E7ZkG6BsY1y9 xINyRZ3NH/lijHwkXQ79lrxnPf2foowo -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:06 2025 by rpki-client