$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft File: md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json) Hash identifier: d/pY8B8Mw0y34LmjO+TLrV9OJpU6ybQ87kAZluy0e1g= Subject key identifier: 78:66:9F:3A:D8:C0:BC:74:D7:AD:74:F3:92:20:F2:99:EC:B8:4B:90 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 28C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft Manifest number: 2653 Signing time: Mon 20 Oct 2025 15:57:54 +0000 Manifest this update: Mon 20 Oct 2025 15:57:53 +0000 Manifest next update: Mon 27 Oct 2025 15:57:53 +0000 Files and hashes: 1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: 67LPK+uG3+DIaACm+Y6WvuhI8zfdk8RGgBdtDdvv7NY=) 2: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: fR2xj1lTYk/calodfmPwtM4tuJ3kJNQbL08yi/tixBk=) 3: 5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa (hash: N1a96Bp2XVma17pAfKJ5UoTb8QNj5J00c+8i+FNuIr8=) 4: 37B8851C654F11EFACFE1271C4F9AE02.roa (hash: y+okfpFT9YQpp93U2rW8OrppiuNopYjPz1OoR+Qnj2I=) 5: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: O3rOOeO9NEzWJisf/+SOItZOvkqX45T7Wsg+v5VOxko=) 6: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: 6Ughghag3M8XhF1VC7toIjsEX2pbDgfCtKXqxIceVlE=) 7: 379554D48E1211EFA0811E85C4F9AE02.roa (hash: ubntMGEtsmJDayuN/fPiGesqsNLnJAjuBP/Ai5jrH54=) 8: 2B535080E79B11EFB484D12EC4F9AE02.roa (hash: 0mC2d1pKz3Ej2zdvc2c87tYlc2CwYMMrgRKwXFKDado=) 9: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: KJ1ieShxvJs7gtOWoATO3HHi/9GVv+NZW0fG46TDOMw=) 10: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: /VebVtB2gpNWgw6ZNvTnR7uVpqvqNucFCcPHuD6Y3mY=) 11: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: IUEGnMjhBVnMZEjQ10jBhTDL+8RYPNGkjfY7kR3frjU=) 12: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: M40kD4TonG66uQYOaNCDeRUYMjqNRbMx31D02gr8fIs=) 13: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: 3ufFCR0mW9We+QnFQyOrOJsAywnDfn399/eLRRaKPto=) 14: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: oHo+ECJ/O1skTItJ3ufCELPifI57mULmbgxvGySOHrQ=) 15: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: MlrQFyNLV1dCVem/E1LF0TFmlekJWbf+VquXYnzkE0Q=) 16: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: KH4rcNSGK8tfemYYCLk11pmTNCXkiMJ76KYgISb1Hbw=) 17: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: 7pdFtjbSd0Y1musq+ELiSsGGWOchEoOsPebzMdEXDYo=) 18: 77F51DD83E0911EF9DC1A672C4F9AE02.roa (hash: 8U8ZGPRo8beOsdQqpoi6X8/fktuoA/yEdND3FwBKF+4=) 19: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: X4al7H6IZSpYOvqbpk8SYUAtrzrPLIqb68yIaC4bU/g=) 20: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: naq1UTFOTQIUq/99ZMv/5vXqPtne6ABUFWpYSLPsFo8=) 21: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: S2wRNHs16NkpQF0OE9CM/o0odvQGGIVO/+whEFrHXvs=) 22: E681416041C511E8BEC06D36C4F9AE02.roa (hash: Aq8N32XCDQtm390Wh19k1JiANhhFcfcimlqHuKEmpuE=) 23: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: WoUqfiV+tV6yzbH+6jqVyv24NMrJDdeNkBAHt7u3Kjc=) 24: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: rrFxKMNHt6Da3tKr2QWL8PJYOwfJNrVpuX5Yg/MllpQ=) 25: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: pSBLALWoX/QA1UpmUqJuxZj3/DOKz/+vSP1r2OR1VGg=) 26: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: I9RlqzrRC4NcmfUDKYCrUBw08VKq1V3OwJl6oMNXL/w=) 27: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: 2mOBehSzLOlEg6pGYtKJCOTxBEzrN5z5JgbqhAtegiQ=) 28: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: dYqA1V20wUtpH9KFdWjPotxYVj54QCPCzHHSDznMpdA=) 29: 350965D2992511EC94DB646EC4F9AE02.roa (hash: WTyE6rqSY4kQszGX6OaOQtHFnpElpKKF9/fDHZfzs04=) 30: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: 2t6/u72QK0o9abc9b3gHwjINMJOQ+vO/4rSwciknXYA=) 31: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: 1MhKVBhr1FCIE3XbyfyWxNr/PnCFcrhIAXC4C0I8mSE=) 32: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: niYna16irNRlmtZBxpyRCeAt3hJM5mxYia++PzmxkvU=) 33: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: W9ilJtbT3FDU8uYNWjyd/M47AQmFUh7MF5YPFTJXpFc=) 34: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: sQcoDhsToQEcNc7mGLyNVTMohSNaCdO8Q2BiVsleK/Q=) 35: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: r+C29yNQnuCXTSlOlr8783OHQQCzhGmi0bueLCwhtlk=) 36: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: YFq4tFQJezE/ALaFyMp+nnLfcNS/HtcXxXHVD43k3+0=) 37: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: 8swv3q1tRdE2xBp1BoUrrmPLsnpo8tlJTWZhFkpp8i8=) 38: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: WmTnWIPsZp2UcbFbQSrNh3JjtjUu/r34W9RYX4KGK50=) 39: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: 4RqGixbnjiRWSSMZsz5o0Nq0vcwdxd+W6tsy/uuyKyU=) 40: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: IFtPxd0PbJXpFaQdQbABz/Z16kyTHun34h4YZ/3vB58=) 41: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: YPhjOopvSzxeO6gNqobHHt3HyijtcWsKn0RvJcxLbcg=) 42: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: wRsIwv4NjmsvKxxLiH5Bh2mSjLn4rzYVvPoe1UL163U=) 43: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: EyiUl8rn1/axxkgMbnkOT+Wbf/v6WSHnBy7rIZY/OMg=) 44: F47B2136202611F08C91C683C4F9AE02.roa (hash: McIIQJS116bi4A+eQiz0CorbxRZVxovY+3wZ/IF64OY=) 45: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: +61zTYCbrxg0lkvEU/Xhwnx/hk0Ph488BDSE+C5qPdU=) 46: 5C61E59E342911F09B7E033FC4F9AE02.roa (hash: daPM14StaLBSEpKpLWzwl0jfYPLnAS0ot/OLcvdSgSU=) 47: 406928720A2411F0A2D02B4AC4F9AE02.roa (hash: 8eGArVfOYdSLWSO+FANax1XLurPiLwrIrNraHvUnN6M=) 48: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: SlMnGnHGJTw9zh4hOi0MJHciRJEwPALAOUFD/r39IJA=) 49: 411624587D2511ECA2A43549C4F9AE02.roa (hash: GuJ4Y9sxp8o3CdlaaRs5rN2aTj9swH/QSPmwZPnS9dA=) 50: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: YRVaEUusWJq/ShGXF2klZ+EodQBt+/mcs3ozyyb/SRc=) 51: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: dLiidGD52YhEOtrfUqtoyoifYgO6MY+DC3Q5pFAWJhA=) 52: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: ZHTFf5tkp7gWskGYBVALUf3aVcOVqIc2MqsjL2pd7dg=) 53: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: Ny46hTdCHTic/U8tcqJUxV4zkHEnXaL+aV1UVZePGUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10434 (0x28c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Oct 20 15:57:53 2025 GMT Not After : Oct 27 15:57:53 2025 GMT Subject: CN=68f65c01-e113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:0f:68:5f:24:e6:7e:45:79:f8:4b:e2:b2: 35:bf:97:3e:5b:36:6e:34:e9:76:c3:bd:a8:57:6e: 36:d2:cf:d8:a6:32:f5:40:d0:06:12:7a:46:4d:81: 9a:ff:37:5a:8b:61:79:a8:32:9d:96:62:6c:2c:c5: 0d:a7:15:de:50:36:74:22:ee:e7:20:21:be:06:7e: 9d:91:5c:ed:6a:bc:63:fd:87:a0:83:2d:d1:16:bd: da:f9:c7:6f:29:06:96:fd:5a:76:c1:bb:9c:eb:69: 6e:b9:f6:5f:5a:ee:fc:8a:56:41:2a:5b:24:9f:e9: d2:b3:89:4e:83:a1:15:0f:38:b6:bc:45:55:06:c7: 78:aa:3a:7c:1c:3d:f8:25:fd:8b:1a:0e:54:21:15: 13:1e:35:06:28:89:bf:07:02:f2:22:15:f7:3d:6b: 32:e6:c1:2a:da:d6:e5:a9:9c:97:69:33:b9:af:2a: a8:aa:16:af:3d:86:8d:d0:ef:1f:a4:0c:27:04:d9: 9d:65:a9:f9:8a:80:c9:b4:ee:2b:a0:7a:ba:a1:76: 28:12:b5:03:06:c0:99:7f:4c:2b:de:88:f5:36:3e: d1:eb:24:fa:07:7d:fc:fe:89:b2:47:7c:e8:47:06: d3:c2:c3:a9:78:21:f7:90:05:29:8d:0b:26:d9:f5: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:66:9F:3A:D8:C0:BC:74:D7:AD:74:F3:92:20:F2:99:EC:B8:4B:90 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c4:4c:f1:f6:b1:30:ec:28:78:28:d1:be:b4:d5:56:da:e7: 97:87:62:18:24:1a:29:4d:a4:c3:fa:6b:ea:23:4d:56:c4:49: 1a:a0:37:a1:a9:18:4f:c5:ab:00:47:b1:f7:bb:ae:39:07:e5: c6:0c:69:d2:82:78:31:06:c9:0f:89:ff:b6:c0:24:78:28:95: 4e:d7:6f:5c:00:60:a3:3d:7b:29:87:fd:3b:56:17:b6:27:5d: f1:03:32:e1:44:bd:03:c7:26:20:7f:fa:a1:cd:78:9f:06:99: a3:bd:07:de:3f:7f:11:c3:50:fd:42:65:56:a6:0c:82:9a:0a: 11:af:5e:4e:bb:3d:6e:ff:0c:d7:8a:9d:62:79:69:7a:2f:e0: a9:07:8d:c3:fe:6c:3c:5c:a9:8f:d0:bf:ef:5e:37:d8:1b:59: a0:ba:bd:28:04:3a:ad:d4:e7:20:a3:74:ab:90:e8:f7:cf:99: ec:7b:f0:7a:ec:de:36:84:ab:16:c8:09:49:43:08:6c:1e:51: e6:e2:59:07:b5:a9:c9:d1:37:bc:3d:bd:7e:51:e3:bb:2e:12: 8f:64:68:fd:0f:ee:83:d9:a1:3d:98:6d:95:ed:05:77:63:6f: e3:23:9d:f6:9f:67:0e:0d:a5:82:8e:55:b1:a0:bb:2b:5f:de: c3:ec:62:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUxMDIwMTU1NzUzWhcNMjUxMDI3MTU1NzUzWjAYMRYwFAYD VQQDEw02OGY2NWMwMS1lMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy30PaF8k5n5FefhL4rI1v5c+WzZuNOl2w72oV2420s/YpjL1QNAGEnpGTYGa /zdai2F5qDKdlmJsLMUNpxXeUDZ0Iu7nICG+Bn6dkVztarxj/Yeggy3RFr3a+cdv KQaW/Vp2wbuc62luufZfWu78ilZBKlskn+nSs4lOg6EVDzi2vEVVBsd4qjp8HD34 Jf2LGg5UIRUTHjUGKIm/BwLyIhX3PWsy5sEq2tblqZyXaTO5ryqoqhavPYaN0O8f pAwnBNmdZan5ioDJtO4roHq6oXYoErUDBsCZf0wr3oj1Nj7R6yT6B338/omyR3zo RwbTwsOpeCH3kAUpjQsm2fXaCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhmnzrY wLx0161085Ig8pnsuEuQMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzI4RC9CREFCNjdGNjNBODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVy UUJsYVdRSlBTM1VJWTlQWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbxEzx9rEw7Ch4KNG+tNVW2ueXh2IYJBopTaTD+mvqI01WxEkaoDeh qRhPxasAR7H3u645B+XGDGnSgngxBskPif+2wCR4KJVO129cAGCjPXsph/07Vhe2 J13xAzLhRL0DxyYgf/qhzXifBpmjvQfeP38Rw1D9QmVWpgyCmgoRr15Ouz1u/wzX ip1ieWl6L+CpB43D/mw8XKmP0L/vXjfYG1mgur0oBDqt1Ocgo3SrkOj3z5nse/B6 7N42hKsWyAlJQwhsHlHm4lkHtanJ0Te8Pb1+UeO7LhKPZGj9D+6D2aE9mG2V7QV3 Y2/jI532n2cODaWCjlWxoLsrX97D7GJw -----END CERTIFICATE-----Generated at Wed Oct 22 01:10:52 2025 by rpki-client