$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: WRZmQa5Y/MQgFLyDB23sZU1rIzhE8nh7r+Q7/nBADto= Subject key identifier: BC:70:A7:12:42:9B:1C:88:3F:06:9D:9F:D4:2C:6E:C3:2A:FB:8D:92 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2A60 Signing time: Sun 02 Nov 2025 15:34:49 +0000 Manifest this update: Sun 02 Nov 2025 15:34:48 +0000 Manifest next update: Sun 09 Nov 2025 15:34:48 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: jap0CeL1RopTuEnX/kD5NCFo1zQzYHrLa+SD8aYuQIQ=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10891 (0x2a8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Nov 2 15:34:48 2025 GMT Not After : Nov 9 15:34:48 2025 GMT Subject: CN=69077a18-a674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:47:f2:bd:8c:6b:a1:57:17:7e:54:6b:c5: 80:11:e3:92:89:03:e0:f1:a6:a1:f0:28:74:72:c1: 41:e6:db:a6:34:15:f5:bd:60:7f:9f:cf:a5:a9:92: 6f:ea:66:61:08:7d:49:45:bf:b6:a6:a5:d6:f1:f4: bf:0c:b0:9d:38:24:af:84:ad:77:94:37:77:c4:2c: d5:a8:e8:3b:87:80:ea:57:f1:09:65:71:f2:9b:f2: 9e:2a:8c:98:50:75:52:25:66:0c:62:9e:5b:32:9d: e8:bb:86:04:5f:05:8e:4d:9e:fe:dc:ff:a4:aa:b0: c6:b2:3c:e6:6a:f2:c9:8f:bc:3e:ae:c2:7c:30:cc: 8d:b8:df:7e:d7:58:6f:58:5a:35:e6:43:97:15:a1: 2f:82:28:2b:0b:a4:d1:f0:94:e2:5c:75:90:11:af: 51:4d:8f:38:74:7a:1a:c3:bf:ad:01:0d:d9:d7:e8: aa:28:79:89:c0:1f:0b:05:00:82:29:6b:2f:93:af: 64:13:f4:04:30:b2:fc:dd:42:53:75:7f:61:22:bf: 1e:3d:37:7b:7c:a6:35:49:ce:e3:04:87:d7:90:21: e5:b5:5d:ae:f2:5c:24:07:b0:0e:d6:b6:25:40:6f: 25:ff:05:52:72:e6:39:6e:86:b5:8d:19:9f:b6:b9: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:A7:12:42:9B:1C:88:3F:06:9D:9F:D4:2C:6E:C3:2A:FB:8D:92 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:92:5d:87:bb:6b:43:95:40:1a:da:ad:f8:16:75:95:1e:19: 0a:b4:3b:34:d0:e9:c9:ff:5f:7c:30:52:fa:56:5d:80:8b:4a: 0e:ca:19:f8:bd:22:33:fa:82:1a:0f:e9:89:78:63:55:cf:32: cf:bb:38:3a:dc:11:25:7d:f6:b4:6c:9b:4a:3c:de:48:55:b2: 60:56:38:ae:6a:56:e2:0c:13:45:e7:69:9e:b7:5d:4e:45:58: 15:96:cd:f4:bb:e0:0b:ed:82:cc:9d:5a:c7:0d:5d:30:26:b0: fe:de:00:2f:2d:0a:9e:96:5d:62:29:7f:79:32:62:30:3c:6a: e4:37:5d:cd:42:fa:a7:bf:c5:7e:de:d9:2a:6e:f3:e3:b4:d7: 4a:56:f8:dd:a1:2d:f0:d0:94:27:f0:13:42:04:53:8b:23:36: 25:67:7c:99:d5:72:d9:6b:fd:6c:b1:d5:75:df:4c:ef:67:e2: bb:1a:fd:3a:f1:b3:0a:23:09:82:55:41:09:e2:18:70:f9:07: d3:e2:57:7f:61:ca:5c:08:29:c6:01:be:1a:08:af:d4:1b:d4: 56:11:29:4c:c8:31:2c:ae:a3:1f:fa:92:9f:06:a9:ae:95:cd: 14:ef:88:42:b2:3b:e1:9d:03:7b:95:62:82:c5:2e:3b:f8:bd: 60:19:4c:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUxMTAyMTUzNDQ4WhcNMjUxMTA5MTUzNDQ4WjAYMRYwFAYD VQQDEw02OTA3N2ExOC1hNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xFH8r2Ma6FXF35Ua8WAEeOSiQPg8aah8Ch0csFB5tumNBX1vWB/n8+lqZJv 6mZhCH1JRb+2pqXW8fS/DLCdOCSvhK13lDd3xCzVqOg7h4DqV/EJZXHym/KeKoyY UHVSJWYMYp5bMp3ou4YEXwWOTZ7+3P+kqrDGsjzmavLJj7w+rsJ8MMyNuN9+11hv WFo15kOXFaEvgigrC6TR8JTiXHWQEa9RTY84dHoaw7+tAQ3Z1+iqKHmJwB8LBQCC KWsvk69kE/QEMLL83UJTdX9hIr8ePTd7fKY1Sc7jBIfXkCHltV2u8lwkB7AO1rYl QG8l/wVScuY5boa1jRmftrmuvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxwpxJC mxyIPwadn9QsbsMq+42SMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmkl2Hu2tDlUAa2q34FnWVHhkKtDs00OnJ/198MFL6Vl2Ai0oOyhn4 vSIz+oIaD+mJeGNVzzLPuzg63BElffa0bJtKPN5IVbJgVjiualbiDBNF52met11O RVgVls30u+AL7YLMnVrHDV0wJrD+3gAvLQqell1iKX95MmIwPGrkN13NQvqnv8V+ 3tkqbvPjtNdKVvjdoS3w0JQn8BNCBFOLIzYlZ3yZ1XLZa/1ssdV130zvZ+K7Gv06 8bMKIwmCVUEJ4hhw+QfT4ld/YcpcCCnGAb4aCK/UG9RWESlMyDEsrqMf+pKfBqmu lc0U74hCsjvhnQN7lWKCxS47+L1gGUzu -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:36 2025 by rpki-client