$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft File: k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json) Hash identifier: zQ6KBaWUu20457r53LpwtIXX+MMzLGzwUmEyDq+Ba10= Subject key identifier: 2E:DA:24:80:19:09:75:C8:CF:73:7F:3A:21:30:AE:85:16:2C:0F:14 Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C Certificate issuer: /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft Manifest number: 07CC Signing time: Tue 04 Nov 2025 21:19:50 +0000 Manifest this update: Tue 04 Nov 2025 21:19:50 +0000 Manifest next update: Tue 11 Nov 2025 21:19:49 +0000 Files and hashes: 1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: uzkiiZOR2HXu8NyjHpnzbFMKR7U/vAlD8Ej1f3Bdmf0=) 2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: 9S4PdbQBnS1bjpFuDpIOJsT6W0eeeQu3f8/ulTYvG/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C Validity Not Before: Nov 4 21:19:50 2025 GMT Not After : Nov 11 21:19:49 2025 GMT Subject: CN=690a6df6-3a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:6b:88:9f:d0:51:22:41:1f:81:a0:da:b3: 9f:a4:a1:64:17:1c:aa:a9:6b:0a:21:af:6b:93:90: ba:eb:fc:b1:f9:94:15:f3:1c:e1:ed:39:fd:ce:52: 6a:9e:33:6c:4b:b4:19:c4:61:46:69:fc:73:d8:61: fc:b6:24:f8:f3:fb:36:7e:87:63:51:52:55:35:83: 43:31:45:d9:88:e5:f3:d4:0f:b0:2d:d1:dd:dc:f2: 57:4a:07:b4:d3:44:b3:fb:a9:fc:3d:55:23:0f:56: 16:14:78:54:d4:4b:2c:25:6c:98:09:a5:b3:71:c3: 4a:2b:c5:84:2e:1e:7b:9a:b1:92:09:d8:d1:29:92: 7c:3e:05:82:b8:7d:fe:89:15:84:56:4c:62:6f:94: 3d:61:18:c5:36:4e:ee:e8:8e:1b:1e:39:2c:26:a9: 8c:f0:6f:20:f5:8a:ff:25:6f:8a:61:b6:2c:b1:a1: 10:1e:92:46:e4:f4:b1:1a:a3:37:96:7c:1f:97:9e: 7d:c6:b7:72:fc:2c:6b:98:7d:10:26:5b:cf:3a:b7: cc:20:39:4f:3a:ba:29:4f:c7:e5:33:64:3d:85:71: b5:5b:5c:8a:70:c7:f4:e9:2b:1e:cc:5a:ed:bd:47: 3e:b2:ba:c3:c5:83:ba:28:a5:a6:72:b0:56:0e:a3: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:24:80:19:09:75:C8:CF:73:7F:3A:21:30:AE:85:16:2C:0F:14 X509v3 Authority Key Identifier: keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:00:02:44:1d:c0:a0:1a:a2:88:a7:d0:1e:c5:39:11:0f:c2: 89:19:66:ab:8a:21:c0:5e:8f:35:60:9c:b8:37:b0:af:4d:56: 7b:ba:c5:63:a0:c6:94:81:a9:a6:34:c0:6a:b4:14:58:ee:e2: 67:6e:f5:cc:e2:a8:0c:4b:be:7b:1c:37:aa:59:6d:f3:fc:4e: 6a:22:74:4a:9c:c1:d1:ef:01:80:53:30:2d:36:e8:e7:6a:17: 05:f0:14:01:51:0c:92:d7:a9:3e:8e:d5:cb:38:94:bc:4b:99: ab:ee:35:ca:b2:ea:72:7b:c5:8b:3f:05:1b:53:ee:d8:90:bd: 88:f0:2b:87:54:29:f7:63:31:16:c8:0c:6b:b4:88:36:5e:16: 08:4f:e9:d4:b5:09:ac:98:f6:53:7b:bf:dc:ab:a5:f4:e5:38: 2e:03:fc:b7:75:0a:4f:4f:0c:35:9c:90:59:f2:1a:4b:ff:f7: 88:22:eb:4b:8d:79:83:c4:bd:73:87:5f:2b:f9:ff:6d:9f:7f: 85:67:e4:50:d2:6e:51:ef:96:aa:86:13:89:93:54:cd:7b:7a: 10:ed:ec:7c:a3:f4:c0:c4:68:9e:50:a3:58:0d:ae:6c:5f:bd: 4f:59:48:8e:82:62:d6:8e:45:86:3a:e3:78:50:0a:a0:36:9c: 53:c5:12:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEwQjcxMTAvBgNVBAUTKDkzNjhFQTQ5NEY1MTFFMjBDMUQ1RjczREQ1MzlFM0Q4 NDY1QkRBOUMwHhcNMjUxMTA0MjExOTUwWhcNMjUxMTExMjExOTQ5WjAYMRYwFAYD VQQDEw02OTBhNmRmNi0zYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozlriJ/QUSJBH4Gg2rOfpKFkFxyqqWsKIa9rk5C66/yx+ZQV8xzh7Tn9zlJq njNsS7QZxGFGafxz2GH8tiT48/s2fodjUVJVNYNDMUXZiOXz1A+wLdHd3PJXSge0 00Sz+6n8PVUjD1YWFHhU1EssJWyYCaWzccNKK8WELh57mrGSCdjRKZJ8PgWCuH3+ iRWEVkxib5Q9YRjFNk7u6I4bHjksJqmM8G8g9Yr/JW+KYbYssaEQHpJG5PSxGqM3 lnwfl559xrdy/CxrmH0QJlvPOrfMIDlPOropT8flM2Q9hXG1W1yKcMf06SsezFrt vUc+srrDxYO6KKWmcrBWDqOQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7aJIAZ CXXIz3N/OiEwroUWLA8UMB8GA1UdIwQYMBaAFJNo6klPUR4gwdX3PdU549hGW9qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTBCNy83NUFCQzlGQzEz QUUxMUVCQkM3QzY4MTVDNEY5QUUwMi9rMmpxU1U5UkhpREIxZmM5MVRuajJFWmIy cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2syanFTVTlSSGlEQjFmYzkxVG5qMkVaYjJwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTBCNy83NUFCQzlGQzEzQUUxMUVCQkM3QzY4MTVDNEY5QUUwMi9rMmpxU1U5Ukhp REIxZmM5MVRuajJFWmIycHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiAAJEHcCgGqKIp9AexTkRD8KJGWariiHAXo81YJy4N7CvTVZ7usVj oMaUgammNMBqtBRY7uJnbvXM4qgMS757HDeqWW3z/E5qInRKnMHR7wGAUzAtNujn ahcF8BQBUQyS16k+jtXLOJS8S5mr7jXKsupye8WLPwUbU+7YkL2I8CuHVCn3YzEW yAxrtIg2XhYIT+nUtQmsmPZTe7/cq6X05TguA/y3dQpPTww1nJBZ8hpL//eIIutL jXmDxL1zh18r+f9tn3+FZ+RQ0m5R75aqhhOJk1TNe3oQ7ex8o/TAxGieUKNYDa5s X71PWUiOgmLWjkWGOuN4UAqgNpxTxRID -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:36 2025 by rpki-client