$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: NloZ8ut4o2r2J3UiRiqH90ny3tZGf0hxMKxBV7S9KAE= Subject key identifier: F0:CF:53:FA:DD:A0:F4:DF:B5:1D:E1:05:62:1E:4E:83:B7:89:C2:B3 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 01E2 Signing time: Wed 05 Nov 2025 02:48:34 +0000 Manifest this update: Wed 05 Nov 2025 02:48:34 +0000 Manifest next update: Wed 12 Nov 2025 02:48:34 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: 1MyltJ+ykeDLD0VtaSh7typaSKkykvPyQ21WGfPDMA4=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Nov 5 02:48:34 2025 GMT Not After : Nov 12 02:48:34 2025 GMT Subject: CN=690abb02-1f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:cb:db:3c:03:00:0f:a3:cf:c5:c4:73:cd: 53:5f:0a:c3:88:4f:2e:cc:98:ec:fb:22:24:7f:1b: ac:eb:4d:d3:47:b3:6e:a9:9b:e2:8f:40:20:d7:c0: 35:07:39:61:5f:75:0d:09:ce:3b:5c:ce:27:5a:e1: c3:47:b1:b0:b9:14:b3:66:1f:dc:8d:0d:a2:f3:7f: 50:c8:43:9b:27:23:d6:e1:ef:3d:30:c4:23:f9:48: 11:a1:7f:7f:9f:c7:bc:7b:95:a1:69:05:da:64:82: 7d:80:b2:a8:c1:90:f8:6b:57:1a:10:11:35:db:64: fa:70:bb:46:61:ca:5f:89:53:14:83:d9:db:80:4d: 2d:79:48:7e:1d:17:35:91:6d:d6:94:a7:95:ea:58: 66:7c:a9:f6:04:91:72:a6:ad:2c:d3:39:57:de:cf: 07:76:7e:0f:e3:af:11:48:31:9c:9a:70:62:ec:08: 09:ce:58:1c:8d:56:07:0d:aa:1e:16:31:57:84:e0: bd:cd:cf:0d:ad:da:bc:d7:2d:d3:f2:a9:67:22:1e: fa:f8:9f:27:6d:b7:39:59:ca:26:e0:a6:3f:d6:bc: 4a:90:dd:bf:2f:df:87:4b:c1:a6:64:83:e2:c2:2c: 57:b3:be:c4:9b:86:81:24:aa:cc:16:34:1d:5b:d9: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CF:53:FA:DD:A0:F4:DF:B5:1D:E1:05:62:1E:4E:83:B7:89:C2:B3 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:bf:45:5d:84:a4:c9:8e:21:20:d9:c9:53:c1:7d:01:ce:96: 79:4f:f7:1a:fa:d8:4f:06:fb:de:92:81:22:f8:a0:c6:96:31: 54:be:19:58:1d:4e:db:74:7f:2e:23:c9:a7:8d:61:9f:aa:c0: 85:b3:64:43:46:17:8f:2b:83:0d:89:f7:3f:5f:a0:74:c5:ba: 3e:e0:b1:7e:c8:33:9f:14:37:76:e3:e1:be:1c:61:f3:43:15: 2c:9e:e2:b2:e3:88:c1:c6:84:e0:48:a4:a0:75:5b:f1:cf:00: 99:2f:d2:c9:1f:ee:bd:4d:87:3f:0e:3a:fb:90:6b:9b:62:68: 13:0e:1c:ce:da:9a:0d:aa:15:76:d1:a2:94:b5:4c:9f:0e:31: 73:a4:e7:ba:16:a9:9e:62:0f:ba:b2:37:69:01:b8:43:17:3f: f3:a7:ab:4b:5c:59:db:be:0c:77:66:b2:4d:3d:65:8d:8d:98: c0:f3:61:81:e3:9a:37:e9:5f:69:85:5d:f9:ef:5c:dc:23:1d: 04:3c:1b:40:4f:8b:53:d8:e4:ff:38:68:06:e3:97:86:a3:63: 26:7e:70:e9:40:9e:f5:92:e0:87:15:8d:31:a3:5e:c6:36:d3: 8d:71:93:05:24:d5:c6:74:55:38:45:7c:13:8e:26:a3:80:69: f6:5f:75:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUxMTA1MDI0ODM0WhcNMjUxMTEyMDI0ODM0WjAYMRYwFAYD VQQDEw02OTBhYmIwMi0xZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPDL2zwDAA+jz8XEc81TXwrDiE8uzJjs+yIkfxus603TR7NuqZvij0Ag18A1 BzlhX3UNCc47XM4nWuHDR7GwuRSzZh/cjQ2i839QyEObJyPW4e89MMQj+UgRoX9/ n8e8e5WhaQXaZIJ9gLKowZD4a1caEBE122T6cLtGYcpfiVMUg9nbgE0teUh+HRc1 kW3WlKeV6lhmfKn2BJFypq0s0zlX3s8Hdn4P468RSDGcmnBi7AgJzlgcjVYHDaoe FjFXhOC9zc8Nrdq81y3T8qlnIh76+J8nbbc5Wcom4KY/1rxKkN2/L9+HS8GmZIPi wixXs77Em4aBJKrMFjQdW9nmFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDPU/rd oPTftR3hBWIeToO3icKzMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJv0VdhKTJjiEg2clTwX0BzpZ5T/ca+thPBvvekoEi+KDGljFUvhlY HU7bdH8uI8mnjWGfqsCFs2RDRhePK4MNifc/X6B0xbo+4LF+yDOfFDd24+G+HGHz QxUsnuKy44jBxoTgSKSgdVvxzwCZL9LJH+69TYc/Djr7kGubYmgTDhzO2poNqhV2 0aKUtUyfDjFzpOe6FqmeYg+6sjdpAbhDFz/zp6tLXFnbvgx3ZrJNPWWNjZjA82GB 45o36V9phV3571zcIx0EPBtAT4tT2OT/OGgG45eGo2MmfnDpQJ71kuCHFY0xo17G NtONcZMFJNXGdFU4RXwTjiajgGn2X3WN -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:28 2025 by rpki-client