$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: cFVC+vbUkeHpLpjcm/sjH+7vhbSUuz09jFPCwLnela0= Subject key identifier: 0E:82:D0:B2:06:86:67:20:F8:EF:C3:9B:62:B4:B7:43:B8:59:82:2E Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D66 Signing time: Sun 02 Nov 2025 17:58:42 +0000 Manifest this update: Sun 02 Nov 2025 17:58:41 +0000 Manifest next update: Sun 09 Nov 2025 17:58:41 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: 1cBkNnX24Hg1drZ2c2yMYfmKBLM7AIK1D0dntfeSb1Y=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Nov 2 17:58:41 2025 GMT Not After : Nov 9 17:58:41 2025 GMT Subject: CN=69079bd2-3143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:58:37:b4:74:b2:34:d3:1a:d4:b8:1a:23: 7c:52:bf:0b:e0:a9:23:3a:2b:f7:83:e4:cf:1f:0c: c7:8c:7d:f4:9f:5c:57:24:0d:c2:af:33:2a:cb:42: 5c:c9:aa:ee:1f:78:1e:57:f3:a7:7f:cd:ca:ca:e0: 95:2f:9c:05:37:a6:90:45:68:c6:d6:0b:4a:49:ae: 9a:76:a8:b2:3f:49:e9:6b:10:a8:cf:39:b7:e5:bd: 37:06:a4:e3:45:1f:f0:58:a4:bb:95:cb:c0:8d:7b: 55:5b:bb:f0:8f:60:56:a5:49:b4:29:d2:8a:45:56: de:aa:b9:0b:08:ac:20:d4:7f:49:be:85:21:6d:8a: ca:51:c6:8e:97:2f:33:da:a9:9c:e9:40:ce:e3:3b: 47:ec:76:1d:15:20:dc:b0:bd:1e:f5:32:7b:5e:8a: 72:0a:91:a1:e3:fe:ec:4d:34:52:0a:2c:a8:2f:e2: 99:35:60:7f:6e:31:15:e8:69:02:de:b7:87:5e:cf: a5:67:67:99:06:ae:7c:5f:71:e2:09:14:1f:62:d0: ac:28:ed:94:fb:99:0e:77:c3:19:32:45:41:69:92: d7:9c:48:e0:9f:68:8b:e8:80:9d:0e:dd:33:07:db: 49:28:7c:34:bb:6b:a4:6d:4f:77:64:ae:2a:de:66: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:82:D0:B2:06:86:67:20:F8:EF:C3:9B:62:B4:B7:43:B8:59:82:2E X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:97:be:40:ae:14:f0:bf:cd:77:84:b8:aa:d7:98:79:15:7d: b4:95:0d:70:39:81:0f:81:99:f6:0b:b4:9f:39:8b:4a:f8:b0: 7f:7f:da:e9:2d:09:c2:e0:9e:17:8e:db:7f:1a:8c:75:02:e9: db:2f:02:43:47:50:95:db:38:49:b3:7a:ab:75:61:ff:ee:bc: 93:c3:65:b5:e2:1a:ff:aa:9f:46:38:f4:a4:3b:63:65:b9:4d: 43:49:d9:04:aa:b7:97:d0:4f:bc:13:5e:9a:81:b7:81:e4:89: 7a:ca:3c:90:c3:b3:70:1e:c5:ea:40:cc:9d:c0:c0:9f:1f:75: 17:50:8e:6a:a0:8c:68:75:3b:f8:fa:3b:6e:27:bd:78:94:ff: 6b:e0:21:1d:ca:fc:91:ec:af:29:4e:f5:7d:15:aa:07:9d:7b: 7a:ff:31:e9:3c:4e:22:a0:2d:1a:1e:9c:39:ca:16:01:82:0c: fb:96:59:b8:ae:e7:b2:86:81:86:f0:e9:fb:5d:79:c5:ef:69: 3d:53:64:5d:92:a4:ab:55:a4:e5:57:67:70:6f:1f:43:8c:df: d4:0b:e8:c5:b3:0d:9f:0d:55:df:cb:f8:1d:6b:ef:85:5f:2c: 33:0b:ee:21:1f:2f:88:93:69:35:b2:d5:2e:ea:22:b0:6d:4b: e3:99:9c:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUxMTAyMTc1ODQxWhcNMjUxMTA5MTc1ODQxWjAYMRYwFAYD VQQDEw02OTA3OWJkMi0zMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UxYN7R0sjTTGtS4GiN8Ur8L4KkjOiv3g+TPHwzHjH30n1xXJA3CrzMqy0Jc yaruH3geV/Onf83KyuCVL5wFN6aQRWjG1gtKSa6adqiyP0npaxCozzm35b03BqTj RR/wWKS7lcvAjXtVW7vwj2BWpUm0KdKKRVbeqrkLCKwg1H9JvoUhbYrKUcaOly8z 2qmc6UDO4ztH7HYdFSDcsL0e9TJ7XopyCpGh4/7sTTRSCiyoL+KZNWB/bjEV6GkC 3reHXs+lZ2eZBq58X3HiCRQfYtCsKO2U+5kOd8MZMkVBaZLXnEjgn2iL6ICdDt0z B9tJKHw0u2ukbU93ZK4q3mbScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6C0LIG hmcg+O/Dm2K0t0O4WYIuMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwl75ArhTwv813hLiq15h5FX20lQ1wOYEPgZn2C7SfOYtK+LB/f9rp LQnC4J4Xjtt/Gox1AunbLwJDR1CV2zhJs3qrdWH/7ryTw2W14hr/qp9GOPSkO2Nl uU1DSdkEqreX0E+8E16agbeB5Il6yjyQw7NwHsXqQMydwMCfH3UXUI5qoIxodTv4 +jtuJ714lP9r4CEdyvyR7K8pTvV9FaoHnXt6/zHpPE4ioC0aHpw5yhYBggz7llm4 rueyhoGG8On7XXnF72k9U2RdkqSrVaTlV2dwbx9DjN/UC+jFsw2fDVXfy/gda++F XywzC+4hHy+Ik2k1stUu6iKwbUvjmZy2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:13 2025 by rpki-client