$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: GAzOO7g6BkJhyVXu1oGhtq8fynvyy+g3p7Nr1jSw9NQ= Subject key identifier: 3D:9B:27:E1:FA:54:78:09:39:FA:D7:FE:16:CD:88:E0:BE:8B:B8:90 Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 07D5 Signing time: Sun 02 Nov 2025 21:10:39 +0000 Manifest this update: Sun 02 Nov 2025 21:10:39 +0000 Manifest next update: Sun 09 Nov 2025 21:10:39 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: 9WijSMjLNF0CmApE0dwFfKF7de9l4Am/2ahZBmToWB0=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: MoFjk7qNACg2EcpsgLnmKAeypnCiy+rmPy+3e+NXWEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: Nov 2 21:10:39 2025 GMT Not After : Nov 9 21:10:39 2025 GMT Subject: CN=6907c8cf-4ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:73:a1:77:52:e4:71:c0:88:d1:6a:73:ef: a4:cd:a8:79:b2:03:0d:5f:1f:38:f6:73:0d:8d:85: 8c:14:1a:90:7c:7d:d0:0a:24:31:76:32:3f:20:56: 88:ce:78:32:70:64:f6:14:28:da:99:8d:bc:23:bb: a7:20:81:5a:3a:06:4c:c5:95:5d:a7:35:b3:86:0a: 59:92:af:19:46:56:8e:c9:31:76:0e:c3:5d:3d:d5: 92:cb:84:a4:e5:7a:6b:77:19:70:2a:96:fb:cd:12: b1:7b:90:a3:86:5c:93:10:5e:5c:c2:a9:cd:0c:09: ef:95:db:f8:0c:55:06:c2:ce:9b:3e:c9:4d:11:fc: 08:14:56:71:78:6a:b5:a9:1b:e9:ef:c0:41:04:65: 3f:d2:02:a9:22:ca:ec:ef:26:38:7e:77:12:15:a4: ea:61:29:1a:b3:ba:60:a8:ee:f0:f7:9c:d6:95:4d: b0:b0:bc:92:32:31:ee:d6:08:5c:88:8f:2e:e0:8a: 13:9b:8e:d0:84:b3:36:b2:16:cb:29:c8:8a:e0:68: 36:37:f7:60:63:8e:08:56:54:b1:b6:96:d6:59:7b: 5b:d9:ae:bc:71:fb:d6:88:b1:77:e1:46:aa:83:a4: 9e:b1:86:ce:0d:0d:80:18:f5:d1:3d:3e:e9:3a:48: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:27:E1:FA:54:78:09:39:FA:D7:FE:16:CD:88:E0:BE:8B:B8:90 X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9d:61:66:4d:82:40:7d:8f:20:ae:f4:7c:36:7a:51:4f:8a: 32:63:0b:9a:c2:36:cd:bc:a3:c6:21:ea:e1:a0:12:82:3d:45: f1:29:d6:2b:2b:7a:fe:07:66:2b:62:64:1e:11:31:98:17:64: b3:25:81:6e:da:65:e5:a9:c4:08:88:91:08:e9:8b:93:2d:a5: a2:4b:d9:3e:75:f6:ea:7b:fa:83:4e:b1:65:80:36:0d:c2:a7: 69:32:fb:f9:b3:14:86:59:41:ee:9b:24:3b:f0:e2:b4:8c:ed: 06:7b:ee:f5:91:ef:c1:aa:4e:11:be:51:13:6a:ef:27:0e:5d: 20:0c:43:11:73:d6:8e:20:bb:bb:d8:df:8e:66:96:23:e0:c2: 05:2c:f3:4a:f8:8a:bd:9b:fc:d5:40:d9:d4:d9:04:d1:21:33: fe:10:b0:93:00:6b:a0:05:de:1a:2c:70:75:f7:51:fe:f3:c0: da:35:19:d1:aa:ea:37:08:6c:ab:83:8b:f1:05:91:c0:41:22: 2c:3e:8e:6b:96:21:23:bc:bb:6e:7f:ac:28:74:87:2f:e3:08: f0:b0:9e:6b:e6:fb:35:b3:10:ce:5e:20:ed:9f:62:dc:f0:2f: 06:9a:66:81:d9:99:03:9c:2c:5d:d6:59:f0:80:0f:1c:4b:d1: 57:07:d8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjUxMTAyMjExMDM5WhcNMjUxMTA5MjExMDM5WjAYMRYwFAYD VQQDEw02OTA3YzhjZi00Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXdzoXdS5HHAiNFqc++kzah5sgMNXx849nMNjYWMFBqQfH3QCiQxdjI/IFaI zngycGT2FCjamY28I7unIIFaOgZMxZVdpzWzhgpZkq8ZRlaOyTF2DsNdPdWSy4Sk 5XprdxlwKpb7zRKxe5CjhlyTEF5cwqnNDAnvldv4DFUGws6bPslNEfwIFFZxeGq1 qRvp78BBBGU/0gKpIsrs7yY4fncSFaTqYSkas7pgqO7w95zWlU2wsLySMjHu1ghc iI8u4IoTm47QhLM2shbLKciK4Gg2N/dgY44IVlSxtpbWWXtb2a68cfvWiLF34Uaq g6SesYbODQ2AGPXRPT7pOkj6XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2bJ+H6 VHgJOfrX/hbNiOC+i7iQMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKnWFmTYJAfY8grvR8NnpRT4oyYwuawjbNvKPGIerhoBKCPUXxKdYr K3r+B2YrYmQeETGYF2SzJYFu2mXlqcQIiJEI6YuTLaWiS9k+dfbqe/qDTrFlgDYN wqdpMvv5sxSGWUHumyQ78OK0jO0Ge+71ke/Bqk4RvlETau8nDl0gDEMRc9aOILu7 2N+OZpYj4MIFLPNK+Iq9m/zVQNnU2QTRITP+ELCTAGugBd4aLHB191H+88DaNRnR quo3CGyrg4vxBZHAQSIsPo5rliEjvLtuf6wodIcv4wjwsJ5r5vs1sxDOXiDtn2Lc 8C8GmmaB2ZkDnCxd1lnwgA8cS9FXB9iu -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:29 2025 by rpki-client