$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: 4ODfdBvNkQN0WR1/C2V6bB8E6uDkz46QdS0+ZgfYlBg= Subject key identifier: A0:76:1C:2A:01:49:EB:F6:0E:65:E0:23:4C:25:45:10:F0:F0:25:B8 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 09EB Signing time: Sun 02 Nov 2025 19:51:28 +0000 Manifest this update: Sun 02 Nov 2025 19:51:28 +0000 Manifest next update: Sun 09 Nov 2025 19:51:28 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: ICfPifMbYa9QuhYYZgtb2oBelumNPBNVpq1jbt438IE=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: BtxRntrFd2gslQewNiqZhW9mWCF+vgLPC26me/9r2bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Nov 2 19:51:28 2025 GMT Not After : Nov 9 19:51:28 2025 GMT Subject: CN=6907b640-08d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:9b:97:28:c4:7b:39:5c:ad:13:d7:b1:70: 6f:32:e1:16:c0:42:1f:a8:9c:90:d5:10:d6:23:14: 3a:88:db:a0:48:8e:58:e8:90:c4:74:2f:c8:12:a4: 5e:3b:16:7e:66:f7:69:1a:de:39:f4:ca:bf:4b:ee: 28:88:34:e9:dc:6b:38:29:31:18:e0:5a:1e:fb:f1: 33:11:34:99:47:47:93:00:73:c5:7c:ee:cb:65:3d: e3:5a:55:82:08:63:83:69:e1:d2:f3:cf:02:4f:0a: 53:eb:27:4e:d9:e1:98:3b:22:1c:ef:8f:e9:cb:15: d8:a5:99:e3:bd:f1:60:3c:87:47:c7:9f:31:90:14: 1d:b7:a6:09:2d:67:65:c3:c1:59:99:ee:66:34:42: ed:7b:07:0a:61:f4:51:cd:cf:8b:29:9b:7a:ce:58: b7:1f:66:20:f8:df:80:0b:70:91:55:de:e9:51:81: 2d:3d:5a:19:6a:4c:ae:47:9a:e9:7a:eb:b2:d1:4b: ea:a3:f4:39:0e:45:46:5f:5c:27:ee:5f:2c:b4:26: 2f:13:35:45:90:21:c8:b4:69:f8:c5:a7:3e:a3:34: 64:a2:15:da:e9:76:1f:5c:af:67:e3:76:e1:2e:42: 5a:60:d6:c8:bd:90:5c:c9:41:e8:be:ef:f3:9e:ae: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:1C:2A:01:49:EB:F6:0E:65:E0:23:4C:25:45:10:F0:F0:25:B8 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:41:81:15:6c:8c:a7:10:8f:a5:04:c7:2f:43:e4:01:6b:3a: c7:9e:9e:f3:24:05:75:5b:a4:ba:4b:a3:d0:55:86:0c:a0:0c: c7:33:b7:8f:ce:44:60:3f:2a:90:c8:94:95:95:2c:40:c7:bf: 4f:58:b3:89:e6:3a:30:68:ef:91:9b:9b:fb:f1:3b:cd:16:28: de:07:de:dc:d1:3b:ef:e4:5d:ad:3a:05:83:35:cc:13:8e:f8: 18:4b:21:08:1b:47:0f:ad:22:fe:f6:39:21:ca:47:2c:94:02: 86:e7:2f:6d:b1:b0:21:49:f4:49:d9:92:81:4a:b9:c7:db:81: 35:97:d3:bd:6f:5e:c7:67:11:0e:f8:e1:80:1b:a4:37:f6:32: 13:f0:4d:d1:30:88:cd:0e:d7:bc:53:fb:4a:7c:83:8a:0d:22: 0c:fc:64:f4:45:2a:73:12:d7:79:92:5d:36:cf:2a:2f:22:ee: 0f:13:f9:8d:68:f9:76:9c:ed:39:61:a4:eb:49:56:54:57:50: 43:88:7d:81:ad:0b:a2:b4:14:4e:ed:13:cf:d9:a6:3f:91:46: 69:9f:73:c0:f9:02:a9:78:50:20:15:49:22:2f:be:1f:85:92: ed:e5:b4:79:c9:6c:f1:81:c7:f7:e5:28:ea:41:42:1b:76:b0: 63:97:aa:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjUxMTAyMTk1MTI4WhcNMjUxMTA5MTk1MTI4WjAYMRYwFAYD VQQDEw02OTA3YjY0MC0wOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z6blyjEezlcrRPXsXBvMuEWwEIfqJyQ1RDWIxQ6iNugSI5Y6JDEdC/IEqRe OxZ+ZvdpGt459Mq/S+4oiDTp3Gs4KTEY4Foe+/EzETSZR0eTAHPFfO7LZT3jWlWC CGODaeHS888CTwpT6ydO2eGYOyIc74/pyxXYpZnjvfFgPIdHx58xkBQdt6YJLWdl w8FZme5mNELtewcKYfRRzc+LKZt6zli3H2Yg+N+AC3CRVd7pUYEtPVoZakyuR5rp euuy0Uvqo/Q5DkVGX1wn7l8stCYvEzVFkCHItGn4xac+ozRkohXa6XYfXK9n43bh LkJaYNbIvZBcyUHovu/znq7TuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB2HCoB Sev2DmXgI0wlRRDw8CW4MB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzQYEVbIynEI+lBMcvQ+QBazrHnp7zJAV1W6S6S6PQVYYMoAzHM7eP zkRgPyqQyJSVlSxAx79PWLOJ5jowaO+Rm5v78TvNFijeB97c0Tvv5F2tOgWDNcwT jvgYSyEIG0cPrSL+9jkhykcslAKG5y9tsbAhSfRJ2ZKBSrnH24E1l9O9b17HZxEO +OGAG6Q39jIT8E3RMIjNDte8U/tKfIOKDSIM/GT0RSpzEtd5kl02zyovIu4PE/mN aPl2nO05YaTrSVZUV1BDiH2BrQuitBRO7RPP2aY/kUZpn3PA+QKpeFAgFUkiL74f hZLt5bR5yWzxgcf35SjqQUIbdrBjl6qO -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:55 2025 by rpki-client