$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: Lfxl3rLAPW0Kfs3t1oGxakg3uLxMWIvLbocAPj2150A= Subject key identifier: 16:08:09:63:16:B3:AE:C9:6A:4A:0C:3F:4C:AA:1E:1B:75:AF:34:9D Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 0148 Signing time: Mon 03 Nov 2025 04:19:34 +0000 Manifest this update: Mon 03 Nov 2025 04:19:33 +0000 Manifest next update: Mon 10 Nov 2025 04:19:33 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: RnKP/zsDl2jk+8NjrRkTPdKMjRJhybNN68K6ErElSa8=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: G8LAWFDM7ySLTe/ZJTkJCLPXRoKFmaYaIusDW3bZoi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: Nov 3 04:19:33 2025 GMT Not After : Nov 10 04:19:33 2025 GMT Subject: CN=69082d55-1653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:54:22:09:41:36:ab:da:92:28:78:89:fa:a6: 67:2f:e7:ad:9e:ef:bd:0e:d4:9e:31:94:00:d7:14: 2d:10:0e:96:ee:d3:5b:d3:77:b0:82:04:72:28:c0: f3:c7:0d:d1:18:80:7a:6c:08:da:da:47:e3:9d:92: 1d:50:74:71:f3:5a:56:59:1c:4a:12:ab:77:ca:74: 1e:25:26:d1:ae:df:bf:a8:cb:83:a3:79:31:e9:a8: 38:33:c7:88:19:89:7e:ea:53:d3:15:97:84:e0:27: 1a:f3:5d:e3:2d:41:61:83:3f:9d:3b:fa:44:17:23: e8:70:49:8c:25:80:23:27:e3:d1:1e:09:fd:18:8f: c3:ed:16:c5:42:30:98:b4:d3:5c:55:c5:38:a5:15: 1a:74:b6:7c:7f:91:6b:3c:22:23:61:98:98:ca:15: 88:76:78:b2:b4:f2:3a:33:bb:37:0e:64:0f:9f:fa: 6c:ef:f2:26:ed:7e:82:ae:8c:19:44:19:f0:df:44: fb:b5:db:51:9a:81:4f:c2:86:46:a8:36:9e:9b:b2: 63:38:f1:d5:6d:f7:d2:27:0a:f3:8c:00:58:2b:70: f1:0e:e2:ba:ff:59:7f:3d:8d:af:1e:0d:4e:22:8b: a1:4d:a6:f8:ff:4f:4f:0c:cb:2a:ba:0a:28:49:74: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:08:09:63:16:B3:AE:C9:6A:4A:0C:3F:4C:AA:1E:1B:75:AF:34:9D X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:5e:35:e5:6a:d2:31:f5:20:f1:be:69:fb:ca:7d:84:00:66: e2:c6:06:d2:dd:c6:a7:0f:b0:fd:99:4d:0f:3f:c2:4e:28:d8: f7:97:ca:8d:54:7f:b0:4f:e4:5e:f9:e9:83:fe:bb:fd:17:01: 04:e9:f2:1d:e2:df:27:22:95:c7:91:9a:42:b1:37:cb:81:d8: 35:07:fb:9e:6b:bc:e2:f3:17:08:6b:0e:ea:af:65:9a:9e:53: a0:1f:02:00:f4:27:cc:10:69:21:51:a5:55:ba:4a:b0:23:9c: 91:7e:92:1c:63:25:c6:41:b4:39:98:d2:23:34:a3:73:8c:24: 4c:e0:e2:6d:3b:0e:5c:e1:bb:e4:9f:14:ed:32:ce:0a:fd:33: 3b:8e:ec:80:f8:db:c5:f2:9a:4b:a3:ee:9e:d0:c6:eb:0f:7c: 84:a9:3d:ae:b6:cf:d3:9d:78:f6:f3:ac:0d:6c:53:6a:31:97: c1:1a:fa:63:de:c9:73:05:eb:27:82:1f:02:2a:b5:1f:31:cb: 26:fe:dd:54:e5:59:34:c1:da:3b:8f:bc:18:77:7a:4d:f7:1c: f6:a8:6c:9a:01:59:65:af:89:2a:a4:5a:c6:d2:79:7a:cd:2f: b3:ef:1a:3c:a3:99:59:2c:34:10:1e:3c:03:d6:59:ac:37:29: 56:7a:8c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD OEQ2NDNCODQwHhcNMjUxMTAzMDQxOTMzWhcNMjUxMTEwMDQxOTMzWjAYMRYwFAYD VQQDEw02OTA4MmQ1NS0xNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VQiCUE2q9qSKHiJ+qZnL+etnu+9DtSeMZQA1xQtEA6W7tNb03ewggRyKMDz xw3RGIB6bAja2kfjnZIdUHRx81pWWRxKEqt3ynQeJSbRrt+/qMuDo3kx6ag4M8eI GYl+6lPTFZeE4Cca813jLUFhgz+dO/pEFyPocEmMJYAjJ+PRHgn9GI/D7RbFQjCY tNNcVcU4pRUadLZ8f5FrPCIjYZiYyhWIdniytPI6M7s3DmQPn/ps7/Im7X6CrowZ RBnw30T7tdtRmoFPwoZGqDaem7JjOPHVbffSJwrzjABYK3DxDuK6/1l/PY2vHg1O IouhTab4/09PDMsqugooSXTZqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYICWMW s67JakoMP0yqHht1rzSdMB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs Y18xZHRFOEtnNGJJMWtPNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiXjXlatIx9SDxvmn7yn2EAGbixgbS3canD7D9mU0PP8JOKNj3l8qN VH+wT+Re+emD/rv9FwEE6fId4t8nIpXHkZpCsTfLgdg1B/uea7zi8xcIaw7qr2Wa nlOgHwIA9CfMEGkhUaVVukqwI5yRfpIcYyXGQbQ5mNIjNKNzjCRM4OJtOw5c4bvk nxTtMs4K/TM7juyA+NvF8ppLo+6e0MbrD3yEqT2uts/TnXj286wNbFNqMZfBGvpj 3slzBesngh8CKrUfMcsm/t1U5Vk0wdo7j7wYd3pN9xz2qGyaAVllr4kqpFrG0nl6 zS+z7xo8o5lZLDQQHjwD1lmsNylWeoxx -----END CERTIFICATE-----Generated at Wed Nov 5 00:20:21 2025 by rpki-client