$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: z4vam+OL/icyop9E1FJuuYX7a3ILYDpvdpa7KaluRYc= Subject key identifier: B0:D1:01:12:19:F2:23:97:8C:A9:BD:5B:C1:70:4A:D9:06:89:B8:3D Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 54 Signing time: Mon 03 Nov 2025 07:13:04 +0000 Manifest this update: Mon 03 Nov 2025 07:13:04 +0000 Manifest next update: Mon 10 Nov 2025 07:13:04 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: pxaTtaaucIwuYxj8RkgI9FyqD4xanwdNLrKH6O05Mv4=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Nov 3 07:13:04 2025 GMT Not After : Nov 10 07:13:04 2025 GMT Subject: CN=69085600-23ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:ba:1c:40:9d:eb:29:6c:a4:9b:ca:65:37: 2e:74:4a:03:95:77:56:c0:3a:e8:27:82:7b:cf:fc: d2:78:b0:89:7a:88:a0:84:7a:9e:ce:ae:f0:0e:22: 48:35:c6:ed:5a:6d:d7:b2:f3:c2:30:95:f8:9e:ab: 9e:45:61:4e:58:f7:37:e2:b6:5f:b2:26:81:b5:f2: 28:cf:66:52:8d:b1:1b:33:e7:97:a6:c7:c8:20:26: a6:cc:a0:7d:c7:e7:14:f5:67:1e:13:44:2f:40:e2: 85:b0:2b:2d:11:80:84:42:90:9f:ae:de:0d:db:7c: 59:2b:f1:30:0f:76:f5:02:e6:a0:bd:ef:d7:65:da: 3d:84:93:4e:a0:03:58:5a:96:3a:5e:19:9b:cd:0a: 14:db:13:54:d6:94:8f:ff:20:0a:01:1c:21:ee:ba: be:2a:7f:b9:92:91:0c:49:81:53:ec:8e:2b:85:77: eb:b8:a3:f3:3d:40:5b:4a:d2:7a:92:76:50:47:0f: bb:2a:0b:07:d3:96:f5:6e:e5:9a:fb:87:c7:bf:3a: a1:1f:8f:00:28:26:d6:be:81:b6:bc:29:e6:fd:54: 3d:8e:3d:4f:f1:71:77:d4:3b:dd:61:9e:40:ac:41: bb:c9:37:4c:52:c3:40:06:80:f4:22:2e:2f:de:56: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D1:01:12:19:F2:23:97:8C:A9:BD:5B:C1:70:4A:D9:06:89:B8:3D X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:27:e8:80:04:ed:3d:2e:17:56:78:41:47:44:7e:77:4e:ba: 4f:9f:8b:e7:c7:40:f7:d7:4e:b5:3f:86:74:d6:16:59:69:0f: aa:e6:f9:cf:55:34:ac:97:6e:ae:ec:ec:95:66:74:9e:f8:12: be:2a:34:7a:9a:53:46:68:de:62:a8:c9:ef:b6:a3:cc:c5:0a: c4:dc:0d:18:a1:86:f7:f2:0c:f4:05:e2:c5:ea:da:ad:5f:bc: 9f:19:8b:4f:89:ee:b2:d1:9c:4d:a2:fa:0a:d9:30:f6:f8:db: 6e:a3:34:0d:28:68:36:3d:9d:e6:01:4b:48:0a:88:2a:70:4b: a3:57:9f:d8:f3:ce:8a:7c:2b:90:b2:c7:14:13:3c:b8:b0:9a: 4b:9b:54:85:ea:e2:04:2a:f5:65:72:e6:09:21:16:80:1d:5a: 92:2b:c4:ff:cc:c3:f7:f0:bb:18:b8:f6:b9:c8:aa:d1:4a:23: 00:62:29:27:e4:fc:6e:aa:da:0e:b4:74:3f:9e:29:91:f4:60: 27:28:eb:0a:1e:ab:70:b5:03:1f:19:ef:57:ad:dc:e4:db:f0: 10:6e:e2:8d:32:32:65:16:83:1d:85:2d:dc:9c:cb:e7:75:8b: 5d:a8:f6:03:60:3c:74:6c:76:45:c0:54:e1:41:bd:f2:4a:da: 4e:74:52:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTExMDMwNzEzMDRaFw0yNTExMTAwNzEzMDRaMBgxFjAUBgNV BAMTDTY5MDg1NjAwLTIzY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0lLocQJ3rKWykm8plNy50SgOVd1bAOugngnvP/NJ4sIl6iKCEep7OrvAOIkg1 xu1abdey88Iwlfieq55FYU5Y9zfitl+yJoG18ijPZlKNsRsz55emx8ggJqbMoH3H 5xT1Zx4TRC9A4oWwKy0RgIRCkJ+u3g3bfFkr8TAPdvUC5qC979dl2j2Ek06gA1ha ljpeGZvNChTbE1TWlI//IAoBHCHuur4qf7mSkQxJgVPsjiuFd+u4o/M9QFtK0nqS dlBHD7sqCwfTlvVu5Zr7h8e/OqEfjwAoJta+gba8Keb9VD2OPU/xcXfUO91hnkCs QbvJN0xSw0AGgPQiLi/eVkjxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsNEBEhny I5eMqb1bwXBK2QaJuD0wHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcn6IAE7T0uF1Z4QUdEfndOuk+fi+fHQPfXTrU/hnTWFllpD6rm+c9V NKyXbq7s7JVmdJ74Er4qNHqaU0Zo3mKoye+2o8zFCsTcDRihhvfyDPQF4sXq2q1f vJ8Zi0+J7rLRnE2i+grZMPb4226jNA0oaDY9neYBS0gKiCpwS6NXn9jzzop8K5Cy xxQTPLiwmkubVIXq4gQq9WVy5gkhFoAdWpIrxP/Mw/fwuxi49rnIqtFKIwBiKSfk /G6q2g60dD+eKZH0YCco6woeq3C1Ax8Z71et3OTb8BBu4o0yMmUWgx2FLdycy+d1 i12o9gNgPHRsdkXAVOFBvfJK2k50Uuo= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:25 2025 by rpki-client