$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: nHVMFFjEqD/ODdVzHFJgWuxVzTj5f0ldNNPDd074HgU= Subject key identifier: FD:4A:A1:77:CC:93:58:EB:6E:68:8B:67:A4:BE:B9:3F:8A:BF:B3:98 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 0483 Signing time: Thu 23 Oct 2025 01:17:44 +0000 Manifest this update: Thu 23 Oct 2025 01:17:44 +0000 Manifest next update: Thu 30 Oct 2025 01:17:44 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: q6BV6S9rlhyWp1tnyfSEelAq0UudxHC5GC2OgrLVMZs=) 2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=) 3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Oct 23 01:17:44 2025 GMT Not After : Oct 30 01:17:44 2025 GMT Subject: CN=68f98238-fdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:f8:24:67:f9:e6:5b:3f:7f:4d:9e:a8:b4: 61:af:11:8a:2f:56:47:b7:c0:46:6a:c1:72:82:27: c3:23:4d:e3:95:e0:40:d7:cb:70:2c:11:b4:ef:51: 2f:b6:f2:35:af:4a:32:e1:ee:06:7b:16:e9:14:80: ca:ac:63:c5:01:85:d9:59:95:ca:b1:25:be:6b:0b: dc:ee:88:30:07:9e:94:89:56:e0:86:40:f3:a8:83: f7:bb:84:83:45:9c:f6:f4:67:ed:66:47:ba:e8:76: 64:5b:90:e4:f1:9a:88:fe:3f:08:59:c0:4c:ff:34: d6:f9:ff:85:43:61:a0:80:ed:d9:e4:58:b0:86:4b: 4e:9c:c5:4c:d7:21:9e:a7:02:32:fc:fe:2e:14:07: fb:53:2f:22:d2:a6:80:42:65:2a:9a:0a:db:8c:1e: 93:84:6e:38:9d:f0:9e:7c:fd:02:9b:a1:c2:55:5c: 3d:0d:e1:4c:36:2c:66:67:77:1a:07:5d:38:62:88: 8c:79:c5:cc:db:2a:d3:87:1d:e8:fe:df:f4:cc:c9: fe:c2:7e:36:6d:ad:e1:99:8a:60:61:fa:d9:5e:3a: 98:46:05:e6:13:af:02:27:4c:95:c9:b3:88:4e:1c: 31:f7:4b:fb:f9:86:08:66:a2:a9:90:1c:30:c9:fd: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4A:A1:77:CC:93:58:EB:6E:68:8B:67:A4:BE:B9:3F:8A:BF:B3:98 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:74:a2:a2:8f:6a:0d:ab:81:86:2d:b5:5a:43:4d:00:a2:5c: 7d:eb:ca:75:a3:f3:2e:5c:1e:06:c2:5b:ae:92:b4:79:d2:0d: 05:9f:6f:ad:d8:c4:b6:2e:0b:12:44:56:52:91:73:e3:54:d5: 2d:ce:03:3f:47:4f:dd:af:19:42:f0:2a:26:a6:63:4c:2e:ec: c9:4e:f1:f0:57:82:6b:87:07:eb:72:5c:42:01:fb:ac:a0:8d: 6c:3c:a0:cf:bd:e2:51:78:81:85:96:5b:2a:f3:f6:d9:4c:41: 2c:7a:ce:8c:e0:6c:b8:a7:03:c2:b0:00:14:10:45:18:8a:7a: 8b:4d:01:01:2c:54:56:c1:c3:e2:26:b0:2a:4e:ff:15:00:79: 4e:91:94:e8:ba:72:f0:90:48:44:81:fd:92:47:dd:92:b2:c6: e2:60:f0:cb:eb:a5:a6:b3:88:48:d6:eb:10:9e:75:05:63:18: 6b:73:a9:8e:5e:10:d8:53:77:92:8c:60:6f:11:35:9f:62:3e: 86:96:42:cf:28:9c:c8:30:b8:83:f8:b2:dc:28:75:ac:07:90: 13:5e:13:50:61:ef:e7:c7:1e:44:ad:38:22:06:88:9e:f8:10: f6:97:24:87:e7:fa:71:b6:34:9b:0a:e3:0a:e3:bf:bf:6f:c4: 66:87:ac:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjUxMDIzMDExNzQ0WhcNMjUxMDMwMDExNzQ0WjAYMRYwFAYD VQQDEw02OGY5ODIzOC1mZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V34JGf55ls/f02eqLRhrxGKL1ZHt8BGasFygifDI03jleBA18twLBG071Ev tvI1r0oy4e4GexbpFIDKrGPFAYXZWZXKsSW+awvc7ogwB56UiVbghkDzqIP3u4SD RZz29GftZke66HZkW5Dk8ZqI/j8IWcBM/zTW+f+FQ2GggO3Z5FiwhktOnMVM1yGe pwIy/P4uFAf7Uy8i0qaAQmUqmgrbjB6ThG44nfCefP0Cm6HCVVw9DeFMNixmZ3ca B104YoiMecXM2yrThx3o/t/0zMn+wn42ba3hmYpgYfrZXjqYRgXmE68CJ0yVybOI Thwx90v7+YYIZqKpkBwwyf0NrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1KoXfM k1jrbmiLZ6S+uT+Kv7OYMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4dKKij2oNq4GGLbVaQ00Aolx968p1o/MuXB4GwluukrR50g0Fn2+t 2MS2LgsSRFZSkXPjVNUtzgM/R0/drxlC8CompmNMLuzJTvHwV4JrhwfrclxCAfus oI1sPKDPveJReIGFllsq8/bZTEEses6M4Gy4pwPCsAAUEEUYinqLTQEBLFRWwcPi JrAqTv8VAHlOkZTounLwkEhEgf2SR92SssbiYPDL66Wms4hI1usQnnUFYxhrc6mO XhDYU3eSjGBvETWfYj6GlkLPKJzIMLiD+LLcKHWsB5ATXhNQYe/nxx5ErTgiBoie +BD2lySH5/pxtjSbCuMK47+/b8Rmh6x+ -----END CERTIFICATE-----Generated at Thu Oct 23 10:11:00 2025 by rpki-client