$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: 2hhpscbMGwXOv4y932r52nJ1afNhB2NqWzXmviEK3B8= Subject key identifier: 50:B7:9E:6B:4D:68:08:93:06:19:56:C0:DA:01:D4:EC:62:00:25:83 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0CD3 Signing time: Sun 02 Nov 2025 18:13:07 +0000 Manifest this update: Sun 02 Nov 2025 18:13:07 +0000 Manifest next update: Sun 09 Nov 2025 18:13:06 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: PZKWrIYheUPZxqWRtzOYg9lNj9GDbdJp06MsgPhM+PI=) 2: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: AdYW9GJhci7LYEDyJ6XwBJoZPBWZtoWOpqlz3zLpEms=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=) 4: BC36A3E8A67E11F0A35CBF40C4F9AE02.roa (hash: Zy1Cr+ByTtuPlrpGjoVSDT6QhmmfCIHpbLzangTlT68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Nov 2 18:13:07 2025 GMT Not After : Nov 9 18:13:06 2025 GMT Subject: CN=69079f33-55ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:27:21:09:d4:a0:35:50:f1:0a:6f:e2:5e: ef:1f:81:0f:53:b5:02:cf:be:76:09:b5:bd:a3:9a: d0:40:c1:09:e2:7d:ab:a9:15:45:16:69:de:ad:4d: d5:12:e6:65:b6:af:f0:97:f2:d8:1c:bb:fa:15:2a: ff:56:be:ce:6e:ca:3d:ad:da:04:de:0b:be:f3:c1: 9d:8e:a9:1b:5c:a4:3a:22:7a:59:20:f1:d6:69:04: b4:cb:93:4a:f1:7a:c9:06:94:04:a3:72:c3:20:87: cc:26:40:b1:ef:51:4f:c7:99:74:d1:d4:de:d5:ef: 15:16:85:8a:e9:2d:7d:b0:b3:f4:a0:f0:e8:72:22: 40:a9:1b:a1:72:bd:a9:73:f0:60:50:00:52:7e:43: db:09:85:67:7d:9c:4c:ed:57:8f:00:05:4c:1a:26: 3b:74:b5:bf:14:0f:d2:43:59:5a:0f:7b:a0:c6:01: 50:8b:d9:ae:0b:ac:0d:77:cf:d0:b7:fa:8d:69:c7: 4e:d3:da:f2:81:1f:dd:ef:90:94:50:17:f9:df:61: 3b:1a:95:f3:60:08:e8:23:cb:11:d2:e3:1a:7d:52: aa:ab:ec:74:0a:77:07:80:98:d7:de:3f:34:dd:47: fc:90:cc:e0:8b:fc:d8:cc:5a:8e:25:8c:10:95:c4: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B7:9E:6B:4D:68:08:93:06:19:56:C0:DA:01:D4:EC:62:00:25:83 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b5:88:f5:6c:aa:ae:15:2f:9c:8f:2c:85:a8:b8:8e:45:32: 9f:7f:82:5f:5c:df:a0:83:d8:8a:cb:d9:38:77:35:a2:bd:a1: 1d:95:de:43:41:ba:09:84:1f:43:14:81:5f:51:e8:a8:46:99: 18:f1:d5:30:a8:97:7c:32:72:bd:80:55:d3:42:c3:49:a6:47: d1:ee:f8:14:55:41:2e:84:5e:5e:b9:bb:fd:a6:3b:e5:87:b0: 51:a5:2a:43:44:f3:2a:71:dc:3c:6b:c2:35:cd:16:d9:68:20: 02:ba:8c:6b:34:c7:b9:b3:72:0e:5b:8d:65:8c:72:28:0f:fb: e0:f2:de:5c:e7:bf:f3:88:12:c2:70:b9:3c:57:48:b3:d0:98: f3:5f:da:4f:63:cc:c4:8a:ba:31:60:72:47:1c:5e:fc:0d:a7: ad:74:7d:28:82:c3:06:ab:7f:9b:a1:54:04:7f:7e:7d:e5:fc: 5b:19:41:8b:c8:21:27:36:34:de:df:33:d3:70:4d:28:8c:72: 07:92:88:9f:f5:d9:87:94:09:7c:41:8e:70:d6:a4:23:d7:03: 7b:cc:ce:9d:b7:b1:d4:57:39:77:45:29:3d:25:35:60:de:b0: 85:82:cc:8e:b7:a4:d6:7d:36:7b:ee:53:02:01:d3:c0:c1:a1: dd:3b:29:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUxMTAyMTgxMzA3WhcNMjUxMTA5MTgxMzA2WjAYMRYwFAYD VQQDEw02OTA3OWYzMy01NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthYnIQnUoDVQ8Qpv4l7vH4EPU7UCz752CbW9o5rQQMEJ4n2rqRVFFmnerU3V EuZltq/wl/LYHLv6FSr/Vr7Obso9rdoE3gu+88GdjqkbXKQ6InpZIPHWaQS0y5NK 8XrJBpQEo3LDIIfMJkCx71FPx5l00dTe1e8VFoWK6S19sLP0oPDociJAqRuhcr2p c/BgUABSfkPbCYVnfZxM7VePAAVMGiY7dLW/FA/SQ1laD3ugxgFQi9muC6wNd8/Q t/qNacdO09rygR/d75CUUBf532E7GpXzYAjoI8sR0uMafVKqq+x0CncHgJjX3j80 3Uf8kMzgi/zYzFqOJYwQlcTJfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFC3nmtN aAiTBhlWwNoB1OxiACWDMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKtYj1bKquFS+cjyyFqLiORTKff4JfXN+gg9iKy9k4dzWivaEdld5D QboJhB9DFIFfUeioRpkY8dUwqJd8MnK9gFXTQsNJpkfR7vgUVUEuhF5eubv9pjvl h7BRpSpDRPMqcdw8a8I1zRbZaCACuoxrNMe5s3IOW41ljHIoD/vg8t5c57/ziBLC cLk8V0iz0JjzX9pPY8zEiroxYHJHHF78DaetdH0ogsMGq3+boVQEf3595fxbGUGL yCEnNjTe3zPTcE0ojHIHkoif9dmHlAl8QY5w1qQj1wN7zM6dt7HUVzl3RSk9JTVg 3rCFgsyOt6TWfTZ77lMCAdPAwaHdOylZ -----END CERTIFICATE-----Generated at Mon Nov 3 08:10:18 2025 by rpki-client