$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: d+QK/CzzDmS6k5AlQIMH5rK1SK1w48FprN/+Z8KoYSM= Subject key identifier: 42:61:B5:6A:4F:27:86:49:9A:BD:CA:AE:A1:1F:97:81:EA:F6:34:C1 Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 0316 Signing time: Wed 05 Nov 2025 01:13:19 +0000 Manifest this update: Wed 05 Nov 2025 01:13:19 +0000 Manifest next update: Wed 12 Nov 2025 01:13:19 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: 6aajJTUuZe4/jkpAct844cfWDLY9OYUklqOBX/2m3Ac=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: V0PWHgjdigOTAk+IhNcZGbzQ+qgLVdszRbUdJLxDupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: Nov 5 01:13:19 2025 GMT Not After : Nov 12 01:13:19 2025 GMT Subject: CN=690aa4af-c71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:f8:52:79:fd:92:49:6e:f1:61:78:86:46: 0f:fa:c5:4f:d0:f2:a1:5a:d6:f3:59:67:35:e9:b4: 36:28:7d:10:6f:31:ca:47:96:9a:d0:77:79:33:5d: c3:43:9e:b0:f1:dd:7d:6e:89:ae:3d:1a:03:31:2f: 79:3d:dd:01:07:e9:53:3a:4d:a5:e2:d4:45:20:f4: cc:cb:bd:b4:05:77:90:3a:56:76:1e:46:32:2e:01: 99:d8:5b:61:cf:b4:42:0c:db:eb:9c:98:d6:c5:6f: 63:a7:dd:01:6d:e5:47:f9:1a:9c:8e:bf:88:bd:a1: b6:6b:d8:00:24:e2:fd:40:56:d6:08:f8:b9:fc:b3: bc:ba:81:f7:22:b9:59:5a:f5:94:8d:fc:82:36:02: 7a:a2:1e:07:ac:5a:62:fe:96:19:39:a7:89:56:02: a3:b5:68:2e:46:80:e5:01:00:c1:60:6d:46:2b:28: 80:09:12:d1:e6:47:76:26:eb:10:bd:bc:92:10:51: 41:a0:5e:d4:34:b6:3e:86:2e:c2:f5:be:15:91:3d: cd:5e:2f:47:9a:b7:8f:12:e0:44:a5:aa:91:e2:e8: 01:59:51:52:24:f9:a1:2a:dd:91:59:50:6c:17:96: 55:3a:32:f1:8d:3e:8d:a6:14:59:65:fa:cd:54:53: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:61:B5:6A:4F:27:86:49:9A:BD:CA:AE:A1:1F:97:81:EA:F6:34:C1 X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:85:e9:3b:92:66:ed:8b:51:41:14:20:de:05:7d:40:cb:0a: 38:ad:1c:c3:71:e9:b6:7f:4a:4d:23:55:e6:4a:f6:c2:23:76: 66:62:d2:6e:e7:bd:0d:45:f3:ea:37:ab:ef:d8:ac:90:6c:9d: c5:ca:1f:49:20:e2:c7:de:6d:4b:0e:36:e5:f1:9a:f1:7b:ce: f5:60:0f:7c:3b:8c:3e:5c:a0:45:db:63:a5:db:d8:a5:77:fd: f0:47:77:44:b8:6d:dc:11:ea:49:f2:8d:48:4d:a5:9f:31:45: 51:ea:d7:ab:6b:19:54:e5:a8:7e:c4:db:d7:e2:e4:26:05:3c: d3:45:c2:d0:dc:9e:0d:cc:61:78:68:ad:bf:93:0a:ee:98:da: 1f:a7:64:a2:46:57:bb:3e:69:b3:29:fe:f2:37:3e:92:28:53: 08:ea:bc:e0:e7:7b:b6:1d:f1:f0:19:b7:d7:09:92:1b:90:01: 05:1f:54:f7:8b:70:90:4e:52:20:f6:d8:5d:4d:f5:63:21:cc: ca:e4:9d:4b:fb:28:fe:85:62:56:a3:9a:24:ba:fe:4b:24:ab: 0a:64:30:e6:65:c6:59:ea:f5:2c:6b:58:ba:b4:e1:fa:29:4c: 64:85:6b:13:69:ad:bc:3b:e2:c2:b4:d7:28:cf:52:23:b8:41: 0b:cb:7e:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjUxMTA1MDExMzE5WhcNMjUxMTEyMDExMzE5WjAYMRYwFAYD VQQDEw02OTBhYTRhZi1jNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbr4Unn9kklu8WF4hkYP+sVP0PKhWtbzWWc16bQ2KH0QbzHKR5aa0Hd5M13D Q56w8d19bomuPRoDMS95Pd0BB+lTOk2l4tRFIPTMy720BXeQOlZ2HkYyLgGZ2Fth z7RCDNvrnJjWxW9jp90BbeVH+Rqcjr+IvaG2a9gAJOL9QFbWCPi5/LO8uoH3IrlZ WvWUjfyCNgJ6oh4HrFpi/pYZOaeJVgKjtWguRoDlAQDBYG1GKyiACRLR5kd2JusQ vbySEFFBoF7UNLY+hi7C9b4VkT3NXi9HmrePEuBEpaqR4ugBWVFSJPmhKt2RWVBs F5ZVOjLxjT6NphRZZfrNVFM+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJhtWpP J4ZJmr3KrqEfl4Hq9jTBMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLhek7kmbti1FBFCDeBX1Aywo4rRzDcem2f0pNI1XmSvbCI3ZmYtJu 570NRfPqN6vv2KyQbJ3Fyh9JIOLH3m1LDjbl8Zrxe871YA98O4w+XKBF22Ol29il d/3wR3dEuG3cEepJ8o1ITaWfMUVR6teraxlU5ah+xNvX4uQmBTzTRcLQ3J4NzGF4 aK2/kwrumNofp2SiRle7PmmzKf7yNz6SKFMI6rzg53u2HfHwGbfXCZIbkAEFH1T3 i3CQTlIg9thdTfVjIczK5J1L+yj+hWJWo5okuv5LJKsKZDDmZcZZ6vUsa1i6tOH6 KUxkhWsTaa28O+LCtNcoz1IjuEELy36n -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:56 2025 by rpki-client