$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: imJt7KPCcf58cUoYa4avqj7O2V6Y3fV62uSzrErJ0wQ= Subject key identifier: 0D:F9:3F:06:D8:DC:36:20:5B:03:A3:47:E4:3F:70:11:F0:E4:50:48 Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 02BE Signing time: Sat 01 Nov 2025 01:41:24 +0000 Manifest this update: Sat 01 Nov 2025 01:41:23 +0000 Manifest next update: Sat 08 Nov 2025 01:41:23 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: 9DpaknuCXakkX1kfTL9yka6cXCeTf5UMk5BD4ZpfTIs=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: l25pt6xsGqTRyB7Z9iKfisGtCqvwzSPP/vuUSztNwvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: Nov 1 01:41:23 2025 GMT Not After : Nov 8 01:41:23 2025 GMT Subject: CN=69056544-ed1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:f0:a4:29:1a:56:a4:f8:ff:3e:fc:7d:7a: 54:e4:fc:ba:33:9d:10:54:91:46:88:b8:0b:ca:f0: 49:6e:4b:53:4e:fb:73:c8:63:05:66:bf:04:08:f0: 81:4f:75:25:db:5e:12:42:99:7d:b5:fb:2a:de:c2: 5d:39:ec:60:52:eb:fe:25:5c:a6:c6:3a:88:e7:80: 1a:a7:ce:85:1b:ab:13:89:96:af:41:78:6a:18:b5: 27:fb:37:0d:f7:5d:6d:61:d4:31:51:52:9b:ab:33: d0:b6:e7:43:f4:32:fe:d3:bb:98:3d:e1:a8:d4:6f: ae:e1:79:36:b6:f4:6d:53:85:0d:6e:07:25:20:2e: b5:2c:bd:42:e3:68:79:54:b5:b4:86:db:c3:b0:20: a5:32:f4:d4:b9:1a:f4:8a:cf:53:32:b8:09:ca:57: 39:34:db:b6:71:74:56:2a:d6:3c:c9:70:10:c2:ed: 0d:85:d0:8d:da:ee:d6:aa:f7:59:1e:90:c3:0c:34: c8:33:0e:85:b2:ac:dc:01:0b:47:19:25:8f:18:bd: 60:00:4e:8d:13:bd:0d:57:53:e3:b1:d0:74:d5:8e: d8:46:29:0e:a0:f1:11:af:46:37:c4:f3:6b:87:39: 10:dc:6e:61:bd:0e:61:cf:be:f3:5a:7d:70:57:76: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:3F:06:D8:DC:36:20:5B:03:A3:47:E4:3F:70:11:F0:E4:50:48 X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a4:5c:e1:56:df:2f:4b:73:f1:7f:ad:ce:a4:99:e1:ec:3d: 75:c8:b6:98:35:61:a7:dc:c7:fe:6a:86:12:c2:07:23:14:3b: 60:3a:79:b7:3a:2c:6f:88:3b:79:c0:1e:08:76:3d:34:0a:58: c5:9b:20:28:3e:35:5b:f5:41:11:6b:c2:7e:e3:49:6f:10:5d: 6e:09:ee:2c:76:6c:bd:4c:e1:18:de:1c:db:fb:3b:b4:2d:ea: c6:dd:87:b6:89:b1:7e:ac:fe:d7:5a:12:ef:93:e5:aa:a2:3b: 9b:d6:08:0d:3f:8f:37:f5:56:48:d6:3c:a7:31:d1:d8:94:fe: 86:b8:c3:3a:6d:ce:b7:eb:be:ec:7f:06:0b:51:7c:4c:6e:26: 68:cf:fb:7d:11:77:2f:78:30:8c:0b:e5:7d:c5:8d:90:cc:7e: 5d:99:18:a0:b5:29:09:0f:e8:42:9c:25:fc:5d:0c:4f:9b:16: 68:96:3b:49:f5:0c:da:22:10:b6:15:95:5e:b1:c9:fc:23:f1: 86:0b:fc:ae:62:34:d3:9f:f6:14:3e:0f:0d:97:6e:c3:12:a4: d9:8c:b0:a1:6a:8e:50:79:51:69:51:a9:06:18:2e:2d:c3:54: 96:64:3b:54:99:f7:19:85:69:12:95:a1:1f:9b:be:4c:1d:6f: bf:b0:f5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjUxMTAxMDE0MTIzWhcNMjUxMTA4MDE0MTIzWjAYMRYwFAYD VQQDEw02OTA1NjU0NC1lZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx23wpCkaVqT4/z78fXpU5Py6M50QVJFGiLgLyvBJbktTTvtzyGMFZr8ECPCB T3Ul214SQpl9tfsq3sJdOexgUuv+JVymxjqI54Aap86FG6sTiZavQXhqGLUn+zcN 911tYdQxUVKbqzPQtudD9DL+07uYPeGo1G+u4Xk2tvRtU4UNbgclIC61LL1C42h5 VLW0htvDsCClMvTUuRr0is9TMrgJylc5NNu2cXRWKtY8yXAQwu0NhdCN2u7WqvdZ HpDDDDTIMw6FsqzcAQtHGSWPGL1gAE6NE70NV1PjsdB01Y7YRikOoPERr0Y3xPNr hzkQ3G5hvQ5hz77zWn1wV3bwNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA35PwbY 3DYgWwOjR+Q/cBHw5FBIMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAopFzhVt8vS3Pxf63OpJnh7D11yLaYNWGn3Mf+aoYSwgcjFDtgOnm3 OixviDt5wB4Idj00CljFmyAoPjVb9UERa8J+40lvEF1uCe4sdmy9TOEY3hzb+zu0 LerG3Ye2ibF+rP7XWhLvk+Wqojub1ggNP4839VZI1jynMdHYlP6GuMM6bc63677s fwYLUXxMbiZoz/t9EXcveDCMC+V9xY2QzH5dmRigtSkJD+hCnCX8XQxPmxZoljtJ 9QzaIhC2FZVescn8I/GGC/yuYjTTn/YUPg8Nl27DEqTZjLChao5QeVFpUakGGC4t w1SWZDtUmfcZhWkSlaEfm75MHW+/sPXV -----END CERTIFICATE-----Generated at Sun Nov 2 23:56:23 2025 by rpki-client