$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: RwxH7r5uMPF4G4a3CUuZMpZ9ORnGRsF/sfhb3ggGgGQ= Subject key identifier: 00:8D:2E:CD:55:2B:F1:69:71:64:DC:84:70:B8:EF:E2:4D:A0:AD:B7 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 0273 Signing time: Wed 05 Nov 2025 01:44:50 +0000 Manifest this update: Wed 05 Nov 2025 01:44:50 +0000 Manifest next update: Wed 12 Nov 2025 01:44:50 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: OCidTuE0RXQwI4qS4qP8xFwmnYbu/WYJrgWgjT1yRUY=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Nov 5 01:44:50 2025 GMT Not After : Nov 12 01:44:50 2025 GMT Subject: CN=690aac12-8f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:5b:6a:10:c1:00:bc:c4:a4:70:de:45:b3: d3:a8:bc:68:01:42:6c:2a:7b:73:73:d1:9b:40:e6: 1e:28:d7:db:6b:df:46:5b:1b:38:c2:11:7a:b1:91: c2:43:fc:31:d2:0a:0a:55:a4:e7:11:95:d3:8b:e0: f7:72:7e:53:6d:ca:b8:9c:7b:33:0d:13:1e:df:e6: bc:4e:7e:27:aa:a4:b1:c5:51:08:74:3e:36:7b:1d: d0:f1:c4:99:59:49:3c:70:04:9d:53:d6:b1:dd:3e: 39:2c:84:bb:e3:62:d6:68:db:fe:57:65:eb:e5:fa: de:3b:03:8b:74:24:48:4b:ab:d0:60:1f:ba:92:01: 4a:1b:5b:a4:d5:2f:d7:df:97:51:61:c6:b2:20:78: c8:fc:2f:ff:6b:8e:2c:42:80:a0:a5:25:a5:c7:2d: 96:de:4e:4a:7f:d3:98:77:cd:bf:20:5d:62:72:4b: 64:f9:84:9a:7a:f5:9e:cd:61:e6:86:83:17:e5:46: 52:c7:0a:26:f4:57:df:91:3d:61:07:92:f3:55:86: 2b:a2:df:93:35:04:79:08:4e:2f:99:be:80:e2:af: 04:51:b2:16:21:9f:4e:93:b6:fa:47:c9:08:9d:d8: 78:e4:d2:b8:28:55:81:aa:11:74:f4:c2:70:e7:a9: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:2E:CD:55:2B:F1:69:71:64:DC:84:70:B8:EF:E2:4D:A0:AD:B7 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:d4:ba:f4:bc:bf:64:39:cd:3b:f3:8e:65:c6:11:bc:ee: 21:12:97:7a:62:1c:61:2a:d3:16:ea:29:98:f2:f6:10:ea:79: 81:cd:ae:8d:72:e3:02:1b:c8:33:ca:d0:30:28:02:16:09:cb: b4:54:70:b4:b5:3c:b1:df:79:4f:59:e3:35:8a:ec:56:bc:75: d1:0a:51:66:22:a0:c5:bd:2c:78:f7:4c:83:0a:c8:18:b7:a0: 07:08:a3:e9:92:0c:05:0d:c2:89:dc:db:1b:46:c3:a9:51:ed: 03:e1:19:c6:1c:b2:f8:69:a1:e0:c9:e2:fe:06:40:0f:09:eb: 92:d1:c2:21:0b:ab:15:fe:76:31:18:6b:95:fd:43:79:f3:2d: c1:d4:d6:73:43:ad:2c:f4:06:74:eb:64:68:71:bf:6f:07:1b: d2:bb:e6:d3:4f:a2:ae:b8:03:8f:1f:7d:aa:f9:5b:f4:e4:76: f6:1a:55:cd:cb:a2:cd:c6:8b:da:25:4a:d4:75:9e:be:75:34: 52:9e:7c:08:cc:ee:ba:e1:ec:ca:cf:c3:db:ea:95:39:6c:fc: 48:e0:2e:a2:b4:85:4f:04:65:75:f5:a8:26:7a:93:7c:3a:5f: 32:10:a0:e1:9d:30:93:20:15:94:f7:6a:b8:ee:2d:e7:19:5f: 86:66:6e:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUxMTA1MDE0NDUwWhcNMjUxMTEyMDE0NDUwWjAYMRYwFAYD VQQDEw02OTBhYWMxMi04ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHRbahDBALzEpHDeRbPTqLxoAUJsKntzc9GbQOYeKNfba99GWxs4whF6sZHC Q/wx0goKVaTnEZXTi+D3cn5Tbcq4nHszDRMe3+a8Tn4nqqSxxVEIdD42ex3Q8cSZ WUk8cASdU9ax3T45LIS742LWaNv+V2Xr5freOwOLdCRIS6vQYB+6kgFKG1uk1S/X 35dRYcayIHjI/C//a44sQoCgpSWlxy2W3k5Kf9OYd82/IF1icktk+YSaevWezWHm hoMX5UZSxwom9FffkT1hB5LzVYYrot+TNQR5CE4vmb6A4q8EUbIWIZ9Ok7b6R8kI ndh45NK4KFWBqhF09MJw56mmzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACNLs1V K/FpcWTchHC47+JNoK23MB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1tS69Ly/ZDnNO/OOZcYRvO4hEpd6YhxhKtMW6imY8vYQ6nmBza6N cuMCG8gzytAwKAIWCcu0VHC0tTyx33lPWeM1iuxWvHXRClFmIqDFvSx490yDCsgY t6AHCKPpkgwFDcKJ3NsbRsOpUe0D4RnGHLL4aaHgyeL+BkAPCeuS0cIhC6sV/nYx GGuV/UN58y3B1NZzQ60s9AZ062Rocb9vBxvSu+bTT6KuuAOPH32q+Vv05Hb2GlXN y6LNxovaJUrUdZ6+dTRSnnwIzO664ezKz8Pb6pU5bPxI4C6itIVPBGV19agmepN8 Ol8yEKDhnTCTIBWU92q47i3nGV+GZm6T -----END CERTIFICATE-----Generated at Thu Nov 6 02:38:55 2025 by rpki-client