$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft File: R2e2k72EYu6vqD2egDydKGtiHcg.mft (raw, json) Hash identifier: f2FMzOlHxTmlIEnXTebp2D10apF+kKMa7l+wvqmBB2U= Subject key identifier: 10:75:F5:FD:82:AF:EB:95:5D:AB:7F:26:B8:CC:F6:20:B5:63:C3:A8 Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 Certificate issuer: /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft Manifest number: 81 Signing time: Wed 05 Nov 2025 06:55:37 +0000 Manifest this update: Wed 05 Nov 2025 06:55:36 +0000 Manifest next update: Wed 12 Nov 2025 06:55:36 +0000 Files and hashes: 1: R2e2k72EYu6vqD2egDydKGtiHcg.crl (hash: 73fHDBf4nganKh7aqN/c5826v5anyR2vQ0hqa/FMwig=) 2: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (hash: yLFkoGvAUsdVN5oxAs3J8MXs+0h1YiH2nhkES11B0AE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Validity Not Before: Nov 5 06:55:36 2025 GMT Not After : Nov 12 06:55:36 2025 GMT Subject: CN=690af4e8-987d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:74:4c:a4:bd:31:71:4b:f1:25:5c:18:9a: b4:a6:24:0f:7e:9e:de:8c:6f:c1:34:8a:90:38:ac: ae:44:71:af:b7:a1:e0:22:3a:b0:4a:ff:35:7b:46: a1:c0:05:f5:bc:7f:10:34:c0:b5:a0:c2:55:a0:bb: 09:93:99:3e:d7:b2:9e:c5:52:66:e9:cf:8e:d3:10: e8:62:5c:1a:f0:2a:e3:8f:8d:7e:3b:84:d6:bb:43: f8:ef:49:be:23:1d:20:35:80:75:61:cf:33:d4:61: dc:77:cf:a0:30:31:85:1a:47:83:e0:78:7a:c6:ba: b3:1c:14:92:b2:d4:12:af:d8:27:ae:20:e7:a3:00: 50:a3:2c:68:2b:4b:16:c6:2b:be:19:b6:fe:9a:69: 62:a0:74:4f:3a:17:1c:da:e6:bf:91:a5:3f:16:51: 8c:f8:cb:90:f5:3c:64:b3:fc:8b:8a:1c:c7:01:dc: 31:65:50:6a:4c:71:2e:70:2b:ad:23:88:4e:8d:2b: 05:2d:ba:bb:d4:ea:b4:2a:1b:11:09:3e:1f:e6:8a: 7c:cc:d4:9c:c3:12:53:93:d3:de:61:04:db:de:bc: 28:af:1f:e3:ed:0f:1d:4a:c6:84:2f:18:33:52:fd: 1d:e0:75:9c:9d:17:02:ab:d9:83:9f:86:56:fa:be: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:75:F5:FD:82:AF:EB:95:5D:AB:7F:26:B8:CC:F6:20:B5:63:C3:A8 X509v3 Authority Key Identifier: keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:41:cb:a9:e2:1f:69:11:66:82:c6:f0:d9:94:11:35:31:41: 6b:fe:b2:96:0b:8e:5a:f9:19:8f:16:14:6b:cc:46:b2:37:15: 64:3d:57:22:c5:e7:ea:9f:f4:ff:7b:98:20:a5:c9:d8:c2:10: 83:48:72:27:b8:bd:4b:a4:7b:19:13:bb:bb:07:6f:62:6e:fc: a5:18:9e:d1:8b:54:87:c9:9c:5b:59:af:22:4f:a8:80:ff:93: 09:8a:e5:fd:f6:34:54:93:6c:bb:af:0d:3b:1c:6b:b3:46:c4: f2:0a:9c:8c:81:37:12:af:fa:ca:19:b5:21:a9:ce:6c:6c:81: fd:d9:07:8c:10:95:3f:26:99:83:a4:4b:4f:24:f0:c1:9b:2c: 6f:15:be:67:ce:67:01:10:2b:2e:60:b3:4c:4e:77:4f:58:88: e4:23:c5:3c:f5:9d:63:7c:f2:cc:a9:81:fb:62:3b:cd:62:9a: 2c:4f:9e:c5:4e:71:b8:64:d0:91:46:96:e0:41:01:23:1f:33: c7:df:87:e3:db:68:83:2a:74:2d:89:63:10:a1:07:c3:47:ec: d3:56:05:25:b3:9f:cd:9e:68:90:43:35:73:39:5e:ec:48:a8: 76:18:0e:62:3b:d0:a4:88:d6:b1:ac:38:ad:a5:b9:93:37:45: 31:cd:f8:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCNkMxMTAvBgNVBAUTKDQ3NjdCNjkzQkQ4NDYyRUVBRkE4M0Q5RTgwM0M5RDI4 NkI2MjFEQzgwHhcNMjUxMTA1MDY1NTM2WhcNMjUxMTEyMDY1NTM2WjAYMRYwFAYD VQQDEw02OTBhZjRlOC05ODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4N0TKS9MXFL8SVcGJq0piQPfp7ejG/BNIqQOKyuRHGvt6HgIjqwSv81e0ah wAX1vH8QNMC1oMJVoLsJk5k+17KexVJm6c+O0xDoYlwa8Crjj41+O4TWu0P470m+ Ix0gNYB1Yc8z1GHcd8+gMDGFGkeD4Hh6xrqzHBSSstQSr9gnriDnowBQoyxoK0sW xiu+Gbb+mmlioHRPOhcc2ua/kaU/FlGM+MuQ9Txks/yLihzHAdwxZVBqTHEucCut I4hOjSsFLbq71Oq0KhsRCT4f5op8zNScwxJTk9PeYQTb3rworx/j7Q8dSsaELxgz Uv0d4HWcnRcCq9mDn4ZW+r76yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB19f2C r+uVXat/JrjM9iC1Y8OoMB8GA1UdIwQYMBaAFEdntpO9hGLur6g9noA8nShrYh3I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUI2Qy9EN0RCMEEwOEZB NUQxMUVGQUUzNzRENjhDNEY5QUUwMi9SMmUyazcyRVl1NnZxRDJlZ0R5ZEtHdGlI Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyZTJrNzJFWXU2dnFEMmVnRHlkS0d0aUhjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUI2Qy9EN0RCMEEwOEZBNUQxMUVGQUUzNzRENjhDNEY5QUUwMi9SMmUyazcyRVl1 NnZxRDJlZ0R5ZEtHdGlIY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQcup4h9pEWaCxvDZlBE1MUFr/rKWC45a+RmPFhRrzEayNxVkPVci xefqn/T/e5ggpcnYwhCDSHInuL1LpHsZE7u7B29ibvylGJ7Ri1SHyZxbWa8iT6iA /5MJiuX99jRUk2y7rw07HGuzRsTyCpyMgTcSr/rKGbUhqc5sbIH92QeMEJU/JpmD pEtPJPDBmyxvFb5nzmcBECsuYLNMTndPWIjkI8U89Z1jfPLMqYH7YjvNYposT57F TnG4ZNCRRpbgQQEjHzPH34fj22iDKnQtiWMQoQfDR+zTVgUls5/NnmiQQzVzOV7s SKh2GA5iO9CkiNaxrDitpbmTN0Uxzfgi -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:04 2025 by rpki-client