$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: 3P7l0lCswPPRSSaeYfPibqL6jeQlJ0fvObncLR0Usdo= Subject key identifier: E5:66:D8:50:C7:24:75:CA:53:33:2C:26:47:5F:8C:CE:FF:E4:78:D4 Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 03EC Signing time: Mon 03 Nov 2025 00:28:23 +0000 Manifest this update: Mon 03 Nov 2025 00:28:23 +0000 Manifest next update: Mon 10 Nov 2025 00:28:23 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: eQD2TM4sclX+vlkjQxs3xeAjZU19yr3cRJHfu62dyN0=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: Nov 3 00:28:23 2025 GMT Not After : Nov 10 00:28:23 2025 GMT Subject: CN=6907f727-7dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:3c:35:59:f0:bf:d4:66:4e:4b:e2:8b:3e: 44:df:65:1f:f6:62:05:f7:b6:0f:1b:73:6b:6d:a0: 75:63:80:dc:08:9e:5d:22:a3:cd:95:5a:19:ba:aa: a2:55:c6:88:cb:8f:9a:58:4e:a5:b0:9f:0e:d6:fe: f9:ba:94:48:1d:88:00:8d:2e:0f:c9:92:bb:76:60: 6f:d6:8b:a5:18:54:d0:9f:06:2f:04:45:3c:d4:ac: e7:10:7d:35:a5:b3:7d:6f:1c:79:f4:1d:a7:e1:8c: 4a:da:16:53:88:77:17:62:6e:70:1c:fa:03:9a:c4: a0:9f:59:21:69:1c:98:f9:73:51:e6:5c:d0:3c:b8: 9b:12:09:15:d7:2f:7c:b1:ef:30:1f:82:5c:8d:fc: d5:d8:31:bc:e7:00:f1:08:31:f9:30:8e:e8:32:ce: e4:91:2d:8e:70:e3:0e:74:5d:f3:2c:93:7f:e7:ce: 1f:f6:7d:82:25:4f:7c:33:de:52:c2:f4:75:18:dc: 5b:7d:41:7a:9d:bc:0b:ba:30:7b:6b:6a:ed:9f:a9: d4:77:79:ec:5b:a2:36:99:ae:2b:1d:84:da:0b:e2: 84:46:80:39:d9:97:af:62:05:a7:5d:18:f1:a1:94: bc:e6:fd:66:27:35:4e:37:54:dd:7f:26:db:90:f6: b8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:66:D8:50:C7:24:75:CA:53:33:2C:26:47:5F:8C:CE:FF:E4:78:D4 X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:45:03:9f:bd:bc:88:4a:55:a7:ed:a5:ed:2d:85:82:32:18: 19:1b:25:54:0c:26:4d:b7:ed:fd:b6:20:0b:c6:ff:5b:f8:c2: c3:95:6f:b9:76:73:3a:92:d7:f7:ea:43:73:a5:6b:72:f4:27: 6d:7f:8b:1e:b4:da:47:a2:55:f4:7a:ee:ce:5c:7d:34:4f:2b: 9b:b1:5e:b3:bc:49:b9:d0:f0:3c:03:f1:68:12:f4:50:3b:3b: 7f:64:12:ec:cc:17:29:63:3a:7e:48:ef:9c:50:93:64:10:4d: 6a:9a:c4:96:36:7d:e2:bf:3d:49:d7:8f:7f:fc:78:a4:7d:ec: da:71:71:c6:3b:9b:0b:ef:c5:e3:44:87:76:5d:d2:02:31:bb: 2b:dd:5c:8f:e6:d5:19:75:78:2e:0c:12:7b:fa:38:0d:47:bf: d1:db:25:46:db:97:99:98:96:c2:ec:e5:90:db:f6:3c:04:9e: c9:a4:13:35:10:fe:f2:a4:0f:de:ca:0e:20:f8:0d:18:bb:f9: 66:4a:e3:99:3f:d4:70:9e:e8:07:9a:95:3f:b6:1f:3e:bb:b6: fb:36:d9:99:f6:81:69:b2:d3:18:c0:a4:d1:cd:93:e0:7c:d6: 08:15:9a:5e:92:30:f3:b9:ad:6c:87:46:1a:0a:68:ca:56:2a: 95:c7:8a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjUxMTAzMDAyODIzWhcNMjUxMTEwMDAyODIzWjAYMRYwFAYD VQQDEw02OTA3ZjcyNy03ZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCY8NVnwv9RmTkviiz5E32Uf9mIF97YPG3NrbaB1Y4DcCJ5dIqPNlVoZuqqi VcaIy4+aWE6lsJ8O1v75upRIHYgAjS4PyZK7dmBv1oulGFTQnwYvBEU81KznEH01 pbN9bxx59B2n4YxK2hZTiHcXYm5wHPoDmsSgn1khaRyY+XNR5lzQPLibEgkV1y98 se8wH4JcjfzV2DG85wDxCDH5MI7oMs7kkS2OcOMOdF3zLJN/584f9n2CJU98M95S wvR1GNxbfUF6nbwLujB7a2rtn6nUd3nsW6I2ma4rHYTaC+KERoA52ZevYgWnXRjx oZS85v1mJzVON1TdfybbkPa4cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVm2FDH JHXKUzMsJkdfjM7/5HjUMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsRQOfvbyISlWn7aXtLYWCMhgZGyVUDCZNt+39tiALxv9b+MLDlW+5 dnM6ktf36kNzpWty9Cdtf4setNpHolX0eu7OXH00TyubsV6zvEm50PA8A/FoEvRQ Ozt/ZBLszBcpYzp+SO+cUJNkEE1qmsSWNn3ivz1J149//HikfezacXHGO5sL78Xj RId2XdICMbsr3VyP5tUZdXguDBJ7+jgNR7/R2yVG25eZmJbC7OWQ2/Y8BJ7JpBM1 EP7ypA/eyg4g+A0Yu/lmSuOZP9RwnugHmpU/th8+u7b7NtmZ9oFpstMYwKTRzZPg fNYIFZpekjDzua1sh0YaCmjKViqVx4oj -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:25 2025 by rpki-client