$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: dnpSv8z77TjfWwlj47rdpjeIh9NcCDUmwpE1lXtick8= Subject key identifier: CD:50:9E:24:0F:7C:5F:EB:69:1A:26:D1:07:00:12:2D:80:4F:51:F8 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2D3F Signing time: Tue 04 Nov 2025 16:30:59 +0000 Manifest this update: Tue 04 Nov 2025 16:30:59 +0000 Manifest next update: Tue 11 Nov 2025 16:30:59 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: WqApAh38hhY1GpU2vEemJwK1UbgfxJFATtV0f2sfoIs=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: Ftg4ftCr2lGn4RvcA0VVEwLsH6nD0OpE3hi7kVlpjbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Nov 4 16:30:59 2025 GMT Not After : Nov 11 16:30:59 2025 GMT Subject: CN=690a2a43-28a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ad:ec:76:f3:47:02:4d:35:2f:34:a1:96:74: a5:c4:89:b8:f1:b9:fe:a4:34:0e:1d:72:b9:a3:9d: a9:0c:82:4a:62:64:0d:da:2f:8b:31:32:b9:48:cb: 35:9f:6c:2c:fc:6f:89:ef:67:01:2c:51:8a:54:2c: a7:6b:f5:ed:e3:0b:57:48:dc:3b:58:d4:12:82:2a: 57:54:33:60:91:5b:ef:be:4b:89:42:5b:ba:f0:1d: 18:17:11:25:db:38:18:5a:b4:52:c2:2c:b0:35:78: cf:1e:57:d9:cf:25:ac:37:eb:d0:82:b8:e8:23:b3: be:9e:7a:0d:5a:5e:5c:4b:1e:17:9f:cd:25:af:bc: 7b:17:c0:64:c3:30:4b:c1:50:f7:28:e7:8a:d6:bb: 3f:f5:09:fe:ae:39:9c:6b:88:21:1f:0b:0b:43:9b: c3:f6:75:7b:b3:3a:ab:fc:25:68:5f:11:92:47:41: 3d:51:29:b6:3e:4b:ff:20:75:2f:42:4e:4d:c2:ad: 0b:b8:0d:36:68:c6:93:b0:12:49:e7:1f:3c:19:65: f6:bd:01:cd:83:7e:76:95:66:38:27:19:1c:3f:1d: 1a:d1:c6:cc:dc:07:71:21:ee:35:53:1c:87:e3:7a: cc:f8:44:a7:57:ad:f3:77:e1:db:6e:2f:25:ad:a8: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:9E:24:0F:7C:5F:EB:69:1A:26:D1:07:00:12:2D:80:4F:51:F8 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:31:22:be:12:6d:63:48:4e:92:85:f9:29:6b:fa:42:fc:07: 0e:c4:50:4f:68:c3:b9:5a:2d:bd:44:05:ab:43:57:63:32:62: da:5c:32:bb:07:9d:13:83:54:a3:80:26:55:e9:aa:4c:c9:79: 28:28:49:33:4c:ed:cf:a8:a8:31:c5:da:2a:d6:c2:9e:41:68: 15:d1:46:81:45:33:d7:78:fe:e5:3b:f5:22:8f:51:10:df:52: cd:e0:52:cf:64:ce:e9:63:a9:00:ac:a2:eb:25:22:fa:f6:bc: 45:07:a9:8b:63:e0:40:b2:75:53:e9:1d:a5:92:40:93:f2:2a: 39:0e:de:af:67:04:f2:de:ad:1e:c4:fb:6a:38:91:fd:65:58: 1b:ec:3f:d5:bc:bf:9d:cf:9d:72:57:01:b1:d4:6a:a9:89:73: 6e:79:8f:1c:c4:fa:e4:d4:38:59:8f:34:49:60:95:b7:c9:38: f8:a1:94:50:80:69:fa:b9:8e:4c:c8:54:d3:ed:a8:57:4b:65: e0:a3:b0:29:9b:c3:cb:c0:a0:cd:6d:07:d0:1a:41:a9:2e:88: 86:68:fa:c0:15:5a:a2:24:77:47:69:ec:a3:6b:3b:8a:c0:29: 79:aa:0c:24:68:c2:36:c0:e7:ab:d7:da:98:6b:19:ba:17:d3: e9:6a:4d:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjUxMTA0MTYzMDU5WhcNMjUxMTExMTYzMDU5WjAYMRYwFAYD VQQDEw02OTBhMmE0My0yOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA363sdvNHAk01LzShlnSlxIm48bn+pDQOHXK5o52pDIJKYmQN2i+LMTK5SMs1 n2ws/G+J72cBLFGKVCyna/Xt4wtXSNw7WNQSgipXVDNgkVvvvkuJQlu68B0YFxEl 2zgYWrRSwiywNXjPHlfZzyWsN+vQgrjoI7O+nnoNWl5cSx4Xn80lr7x7F8BkwzBL wVD3KOeK1rs/9Qn+rjmca4ghHwsLQ5vD9nV7szqr/CVoXxGSR0E9USm2Pkv/IHUv Qk5Nwq0LuA02aMaTsBJJ5x88GWX2vQHNg352lWY4JxkcPx0a0cbM3AdxIe41UxyH 43rM+ESnV63zd+Hbbi8lrah7jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1QniQP fF/raRom0QcAEi2AT1H4MB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgMSK+Em1jSE6Shfkpa/pC/AcOxFBPaMO5Wi29RAWrQ1djMmLaXDK7 B50Tg1SjgCZV6apMyXkoKEkzTO3PqKgxxdoq1sKeQWgV0UaBRTPXeP7lO/Uij1EQ 31LN4FLPZM7pY6kArKLrJSL69rxFB6mLY+BAsnVT6R2lkkCT8io5Dt6vZwTy3q0e xPtqOJH9ZVgb7D/VvL+dz51yVwGx1GqpiXNueY8cxPrk1DhZjzRJYJW3yTj4oZRQ gGn6uY5MyFTT7ahXS2Xgo7Apm8PLwKDNbQfQGkGpLoiGaPrAFVqiJHdHaeyjazuK wCl5qgwkaMI2wOer19qYaxm6F9Ppak04 -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:13 2025 by rpki-client