$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: eC9U/Z7qz7uomqY5z1D6dGOTYTTyJB8g0AENSkVhtFg= Subject key identifier: 69:7F:29:D6:FE:FD:EF:AF:EF:E3:50:1E:0B:B0:97:74:40:4C:47:F7 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2A49 Signing time: Thu 18 Sep 2025 15:40:30 +0000 Manifest this update: Thu 18 Sep 2025 15:40:30 +0000 Manifest next update: Thu 25 Sep 2025 15:40:30 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: PoClL8jphNcIliw+Cug4cnQ4BlKOp/lnom4Zlh9oBjw=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10868 (0x2a74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Sep 18 15:40:30 2025 GMT Not After : Sep 25 15:40:30 2025 GMT Subject: CN=68cc27ee-b934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:7a:5c:92:09:b1:1f:f4:ff:ef:99:6c:b2: e3:17:f5:3f:fc:40:57:26:68:2f:5e:25:38:37:04: 1e:75:1a:9a:85:16:b9:e1:11:a4:29:67:ca:2b:18: 1c:44:84:9b:19:79:d4:fd:a1:8f:81:ab:90:c8:dd: ba:a0:ae:bd:35:62:50:8e:05:45:67:7f:c0:98:8b: e2:2c:d7:7d:45:2e:5d:b2:2b:d3:51:7b:81:5e:ad: 33:39:a9:02:fa:7f:b1:e9:3e:93:95:c2:c4:47:84: e3:c1:5a:f3:13:90:9e:1a:18:81:19:94:af:be:e8: 2f:34:62:99:f6:3f:9f:60:be:81:08:fa:d3:4c:d1: 08:f7:d0:06:f1:1b:35:56:0f:75:c8:dd:43:0c:56: 3f:77:dd:46:9e:7d:0f:d2:a5:2e:74:9b:d7:f5:f0: b8:1b:23:50:aa:ce:81:da:fc:6c:42:63:c2:22:bf: 31:a6:e4:79:f9:ec:92:0c:ae:78:f1:b9:8f:e3:5d: 09:6e:c5:04:d1:45:61:5f:92:6a:89:31:c0:c7:39: 29:3f:37:ab:4a:9b:db:af:89:dd:20:9b:3f:f1:22: ef:1f:a8:a6:c3:37:f4:7c:e0:9b:50:fc:81:34:f9: ba:23:e9:6a:1b:3a:56:2c:08:bb:95:f7:88:16:cf: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7F:29:D6:FE:FD:EF:AF:EF:E3:50:1E:0B:B0:97:74:40:4C:47:F7 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fe:c1:80:e2:f3:16:5a:1a:67:db:81:88:97:45:0e:45:3c: 20:b2:ce:eb:76:6d:d3:d3:c2:25:1f:c8:bc:82:14:29:b0:10: 1b:59:53:f7:ce:1c:f8:b4:9f:37:1f:cc:e3:7f:21:a6:c8:64: 58:a3:f1:ae:7c:a6:4b:82:83:4c:32:0a:34:73:9b:d0:76:67: e6:7f:9c:63:30:c7:33:fc:ea:a9:75:77:82:18:e2:4b:1e:92: d2:29:09:84:25:c6:91:81:2b:fc:aa:e1:8e:2d:fb:2a:e7:1f: ac:5e:10:98:e7:3a:c8:63:af:fc:4d:4b:24:33:55:bc:95:b0: 2f:87:26:89:91:1b:98:ec:3e:9a:41:a1:1d:c3:9c:ae:a2:a9: 8d:d6:d7:2a:1f:25:8b:84:2d:08:ca:1d:9e:66:b0:e4:bd:64: 5a:b6:64:fb:a2:be:bb:89:03:29:9c:c8:9f:7a:09:37:da:d2: 0e:26:66:2a:b3:35:69:b3:64:c0:d0:80:82:3a:76:de:36:22: 67:92:86:26:9a:f0:a4:1d:10:0a:cf:14:ea:cf:be:d6:6c:3c: bf:42:00:34:12:32:d5:6b:45:0b:e0:da:a0:b6:52:66:8c:bb: b6:f5:b3:36:4c:65:c0:ea:3d:d8:99:be:1f:4f:c1:80:7e:af: e9:39:77:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUwOTE4MTU0MDMwWhcNMjUwOTI1MTU0MDMwWjAYMRYwFAYD VQQDEw02OGNjMjdlZS1iOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mR6XJIJsR/0/++ZbLLjF/U//EBXJmgvXiU4NwQedRqahRa54RGkKWfKKxgc RISbGXnU/aGPgauQyN26oK69NWJQjgVFZ3/AmIviLNd9RS5dsivTUXuBXq0zOakC +n+x6T6TlcLER4TjwVrzE5CeGhiBGZSvvugvNGKZ9j+fYL6BCPrTTNEI99AG8Rs1 Vg91yN1DDFY/d91Gnn0P0qUudJvX9fC4GyNQqs6B2vxsQmPCIr8xpuR5+eySDK54 8bmP410JbsUE0UVhX5JqiTHAxzkpPzerSpvbr4ndIJs/8SLvH6imwzf0fOCbUPyB NPm6I+lqGzpWLAi7lfeIFs/FywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl/Kdb+ /e+v7+NQHguwl3RATEf3MB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu/sGA4vMWWhpn24GIl0UORTwgss7rdm3T08IlH8i8ghQpsBAbWVP3 zhz4tJ83H8zjfyGmyGRYo/GufKZLgoNMMgo0c5vQdmfmf5xjMMcz/OqpdXeCGOJL HpLSKQmEJcaRgSv8quGOLfsq5x+sXhCY5zrIY6/8TUskM1W8lbAvhyaJkRuY7D6a QaEdw5yuoqmN1tcqHyWLhC0Iyh2eZrDkvWRatmT7or67iQMpnMifegk32tIOJmYq szVps2TA0ICCOnbeNiJnkoYmmvCkHRAKzxTqz77WbDy/QgA0EjLVa0UL4NqgtlJm jLu29bM2TGXA6j3Ymb4fT8GAfq/pOXe6 -----END CERTIFICATE-----Generated at Thu Sep 18 20:24:45 2025 by rpki-client