$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: 88FRXb9ktu5WC7x01FOUcaf+k0FK14lyy5uQHgpbhFc= Subject key identifier: D0:C4:AE:B0:9C:79:7F:CA:AC:05:92:E0:BB:C8:48:A9:9C:4B:CC:74 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 01E7 Signing time: Tue 07 Oct 2025 02:50:15 +0000 Manifest this update: Tue 07 Oct 2025 02:50:14 +0000 Manifest next update: Tue 14 Oct 2025 02:50:14 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: NBNvU5nT2XBICn9NfZdpr4SLZHnuFmn2kG47tuzAH7c=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Oct 7 02:50:14 2025 GMT Not After : Oct 14 02:50:14 2025 GMT Subject: CN=68e47fe7-9ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:19:6d:9a:bf:2b:ad:d4:6c:9e:f7:69:4c: e1:e0:89:7d:60:a1:ab:ae:24:0d:74:58:c6:06:d2: fd:84:b0:4c:56:a9:51:36:bf:7a:5e:d8:cf:82:eb: 5c:51:d1:f4:27:66:20:ab:4c:4c:b4:04:9e:d4:f2: fd:14:cc:d8:4f:c1:de:ff:d6:55:19:de:5e:d7:7c: 7b:4b:b9:73:ab:70:88:90:5e:ad:0b:86:07:21:ab: a3:3b:9c:57:f2:17:32:3a:40:b9:62:94:cd:ca:a8: 67:38:48:5a:21:20:59:a6:23:d8:39:30:46:84:56: e2:2a:35:99:ba:c6:dd:3f:bd:05:29:20:10:91:e0: 8b:89:f5:3e:9c:0f:83:12:76:8d:64:da:a6:3e:ed: 3e:0d:2d:47:2d:51:07:7b:09:80:f4:75:fb:fc:45: 8b:62:47:65:8a:ca:2d:a4:77:7a:52:e6:75:d2:ac: 30:96:b4:95:ac:94:ad:c1:11:d5:dd:c1:ae:33:23: 59:75:03:da:a3:e4:42:53:4b:cb:97:08:6d:f1:f7: dd:36:83:09:67:a4:a7:71:43:c9:43:32:47:79:0a: dd:a1:af:e3:9f:2e:18:c4:f6:20:75:49:00:8b:4f: ef:8e:1f:09:73:75:96:e4:22:8a:cf:25:2b:1c:0e: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:AE:B0:9C:79:7F:CA:AC:05:92:E0:BB:C8:48:A9:9C:4B:CC:74 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:a6:e8:e2:68:ed:f6:a9:12:c2:94:bd:c0:35:24:1c:64: f0:d6:15:eb:5b:7f:91:cc:64:97:33:07:73:52:92:70:e3:45: a1:bb:09:90:38:77:3d:3b:25:49:12:31:f6:5d:ee:1d:c5:eb: 81:84:9d:2b:af:63:26:8d:43:44:8c:11:0e:17:f4:47:16:b8: e9:6d:c5:31:5d:c3:79:3e:59:55:de:79:96:c3:55:75:57:a6: 10:28:54:e9:c2:4e:4e:c0:a6:e2:c8:18:a6:7e:a2:d2:84:95: 6c:7d:99:a3:01:5f:67:64:1d:30:ce:98:57:4f:72:92:cf:db: ca:59:30:09:51:8c:76:51:34:7b:a8:84:74:54:15:ab:eb:7b: 88:91:3d:df:25:8f:be:8e:b1:a2:df:aa:3d:b9:ea:01:94:79: 30:23:69:32:f1:8c:73:46:0f:c7:b5:f3:a1:6a:7c:5b:58:b3: 60:f0:8d:54:2e:75:a0:a6:ff:91:17:a2:02:18:6b:8b:e2:f1: fc:06:8e:0e:bc:ac:ef:c1:8c:5d:51:30:fc:fb:b6:01:45:0f: 75:5f:c5:f3:6b:8c:f6:eb:c8:25:e7:c5:f6:a2:b9:99:05:9b: 75:d3:a4:eb:5f:f1:21:d7:fe:e4:98:43:e2:9a:c8:e2:57:59: 73:7e:2d:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUxMDA3MDI1MDE0WhcNMjUxMDE0MDI1MDE0WjAYMRYwFAYD VQQDEw02OGU0N2ZlNy05YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQUZbZq/K63UbJ73aUzh4Il9YKGrriQNdFjGBtL9hLBMVqlRNr96XtjPgutc UdH0J2Ygq0xMtASe1PL9FMzYT8He/9ZVGd5e13x7S7lzq3CIkF6tC4YHIaujO5xX 8hcyOkC5YpTNyqhnOEhaISBZpiPYOTBGhFbiKjWZusbdP70FKSAQkeCLifU+nA+D EnaNZNqmPu0+DS1HLVEHewmA9HX7/EWLYkdlisotpHd6UuZ10qwwlrSVrJStwRHV 3cGuMyNZdQPao+RCU0vLlwht8ffdNoMJZ6SncUPJQzJHeQrdoa/jny4YxPYgdUkA i0/vjh8Jc3WW5CKKzyUrHA5g5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDErrCc eX/KrAWS4LvISKmcS8x0MB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPrqbo4mjt9qkSwpS9wDUkHGTw1hXrW3+RzGSXMwdzUpJw40WhuwmQ OHc9OyVJEjH2Xe4dxeuBhJ0rr2MmjUNEjBEOF/RHFrjpbcUxXcN5PllV3nmWw1V1 V6YQKFTpwk5OwKbiyBimfqLShJVsfZmjAV9nZB0wzphXT3KSz9vKWTAJUYx2UTR7 qIR0VBWr63uIkT3fJY++jrGi36o9ueoBlHkwI2ky8YxzRg/HtfOhanxbWLNg8I1U LnWgpv+RF6ICGGuL4vH8Bo4OvKzvwYxdUTD8+7YBRQ91X8Xza4z268gl58X2ormZ BZt106TrX/Eh1/7kmEPimsjiV1lzfi08 -----END CERTIFICATE-----Generated at Wed Oct 8 15:48:21 2025 by rpki-client