$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: jav1F9e+HiQKm4L+zeagfBL4IA33+xrNNrK3fF4EHtw= Subject key identifier: 5C:8A:F1:02:89:5E:08:F3:B6:A4:2A:F6:46:62:78:C8:EE:05:AA:20 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01E0 Signing time: Mon 03 Nov 2025 02:41:39 +0000 Manifest this update: Mon 03 Nov 2025 02:41:38 +0000 Manifest next update: Mon 10 Nov 2025 02:41:38 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: jNX6/+j14QrwEe7c//Q+TjOjygWymUw5m33Gn876h5M=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Nov 3 02:41:38 2025 GMT Not After : Nov 10 02:41:38 2025 GMT Subject: CN=69081662-b72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:dd:1d:f5:64:03:54:9c:6e:64:2e:88:79: b7:16:61:70:98:8b:8f:38:35:ec:e3:97:05:21:1c: 51:97:a0:5b:d6:27:d0:df:d8:01:1f:b7:36:6c:00: 52:c1:a3:bb:2d:b5:33:77:5c:d7:a5:98:e1:7b:a2: 8d:75:0c:0b:a0:6c:cc:c4:09:b9:3a:1f:bd:e2:de: a3:1e:8f:f4:9b:75:13:ad:b7:60:a0:8d:3e:3e:25: d3:45:8a:e5:51:32:97:18:c5:67:96:b7:9c:30:34: e1:86:9f:2c:48:0d:dd:d8:e0:98:42:fa:86:ba:12: 7f:cf:e4:15:f9:b0:a2:af:1f:ca:c5:8d:3c:6d:6e: 67:4c:cc:92:8b:dd:62:df:ce:2a:0b:44:e8:58:2b: 89:c8:3e:1b:61:fb:5d:32:4b:7f:1b:79:8b:65:f3: 46:46:16:c2:4a:6b:83:12:fd:cb:53:12:72:12:07: 01:6f:e1:c5:2c:d1:29:aa:ba:21:f4:e4:c3:57:45: 51:ec:f2:ad:10:22:59:8e:b6:75:6a:c5:74:41:dd: 98:a8:2f:f8:67:1d:c9:27:fd:78:5a:f4:ac:9c:8c: 71:bd:58:3d:f3:1a:0a:fd:d9:af:99:86:a2:68:fb: c7:86:b3:b6:e7:9c:5a:75:56:d5:3b:79:b5:a0:64: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:F1:02:89:5E:08:F3:B6:A4:2A:F6:46:62:78:C8:EE:05:AA:20 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c7:99:93:38:49:c2:14:a2:5e:c7:ca:4f:f0:88:7d:cb:e9: 9c:81:9a:c6:55:a4:38:a5:b7:d3:b0:7d:c0:50:2f:84:61:b6: 18:b1:d3:9e:fe:d6:1e:fd:e0:83:47:27:ef:92:14:f9:2a:df: 98:2d:b8:ae:ef:84:04:56:d0:59:13:da:61:c0:99:60:70:ed: ed:ae:5c:94:01:da:00:ad:31:84:1e:74:af:6a:4e:10:12:c1: 0b:02:7c:e5:3b:56:a7:b4:0b:2d:9d:f2:d3:3a:d4:e4:3f:0f: 33:03:7d:b3:4c:09:d3:f9:02:73:61:fc:96:09:f1:26:e9:a0: dc:de:2f:61:36:98:59:9e:62:29:2a:e4:37:1f:14:50:a4:2d: b4:7d:27:90:ab:d3:6b:62:cb:f0:17:83:7c:4c:17:df:e1:85: 14:e4:81:2d:4d:35:35:fb:82:2e:80:9c:5f:d5:fa:7e:c0:c3: eb:97:e6:f6:fd:78:d4:97:a3:d7:0a:93:45:5f:fa:ac:13:b2: b4:de:68:8e:a7:e0:4a:8e:06:1b:7c:87:f5:7f:53:cf:f6:6b: 82:2d:6b:d9:3b:c1:28:53:19:f8:cb:0b:76:70:7d:a2:34:30: 6e:49:e5:c5:43:cb:65:f5:e7:10:8f:06:b7:d6:11:a0:09:45: 8c:ac:91:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUxMTAzMDI0MTM4WhcNMjUxMTEwMDI0MTM4WjAYMRYwFAYD VQQDEw02OTA4MTY2Mi1iNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHLdHfVkA1ScbmQuiHm3FmFwmIuPODXs45cFIRxRl6Bb1ifQ39gBH7c2bABS waO7LbUzd1zXpZjhe6KNdQwLoGzMxAm5Oh+94t6jHo/0m3UTrbdgoI0+PiXTRYrl UTKXGMVnlrecMDThhp8sSA3d2OCYQvqGuhJ/z+QV+bCirx/KxY08bW5nTMySi91i 384qC0ToWCuJyD4bYftdMkt/G3mLZfNGRhbCSmuDEv3LUxJyEgcBb+HFLNEpqroh 9OTDV0VR7PKtECJZjrZ1asV0Qd2YqC/4Zx3JJ/14WvSsnIxxvVg98xoK/dmvmYai aPvHhrO255xadVbVO3m1oGRE1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyK8QKJ XgjztqQq9kZieMjuBaogMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAx5mTOEnCFKJex8pP8Ih9y+mcgZrGVaQ4pbfTsH3AUC+EYbYYsdOe /tYe/eCDRyfvkhT5Kt+YLbiu74QEVtBZE9phwJlgcO3trlyUAdoArTGEHnSvak4Q EsELAnzlO1antAstnfLTOtTkPw8zA32zTAnT+QJzYfyWCfEm6aDc3i9hNphZnmIp KuQ3HxRQpC20fSeQq9NrYsvwF4N8TBff4YUU5IEtTTU1+4IugJxf1fp+wMPrl+b2 /XjUl6PXCpNFX/qsE7K03miOp+BKjgYbfIf1f1PP9muCLWvZO8EoUxn4ywt2cH2i NDBuSeXFQ8tl9ecQjwa31hGgCUWMrJGx -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:57 2025 by rpki-client