$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: KvRFRJYj4qwtILvjA9pkRsVMljZIJ1Ohupuou+T1qzg= Subject key identifier: 3C:03:96:82:37:51:2A:39:12:08:2C:6C:8D:2A:7D:9B:A2:4B:0E:29 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0665 Signing time: Wed 22 Oct 2025 23:52:58 +0000 Manifest this update: Wed 22 Oct 2025 23:52:57 +0000 Manifest next update: Wed 29 Oct 2025 23:52:57 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: nShirzFP/Rb/EF22doAPCRfZTWyeQdzb2c8bpBSJRpQ=) 2: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 3: E81D407A84E111F0BD6D9525C4F9AE02.roa (hash: gAkZlfREF6dDXBi5+4FArRtO8IoYltgxsB8gMPbG7rI=) 4: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) 5: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) 6: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Oct 22 23:52:57 2025 GMT Not After : Oct 29 23:52:57 2025 GMT Subject: CN=68f96e5a-4a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:d3:86:1d:61:5f:b2:6b:ce:93:26:b7:d5: 19:66:41:22:fc:dc:da:b8:a6:d9:f6:6c:3c:f3:5d: 55:13:1d:3b:fa:92:2d:7e:4f:55:35:13:5b:bb:a5: 91:1b:6f:32:f7:60:b6:00:f0:e1:7a:a7:f1:85:77: 4c:fd:eb:bd:db:c2:cb:46:8d:7b:59:06:ab:38:2c: a0:4c:5b:5f:d1:09:b1:35:59:b0:5f:20:14:60:dd: ac:ad:1c:65:57:85:fd:de:cb:31:1d:b9:c8:13:1f: d1:91:39:41:47:1f:25:fb:cf:05:25:c8:96:48:05: b1:41:5e:58:2f:4c:a5:c6:7a:37:e5:fa:f9:f4:20: 6d:92:3f:61:0e:1b:7f:47:3f:dd:4f:47:05:be:9b: 8f:22:74:00:87:dd:20:36:09:98:83:6d:07:5c:b5: 44:e1:3e:7b:da:f2:5a:f3:ee:0d:b8:cf:4b:90:d8: e5:d4:4b:49:f9:d9:2e:a3:ff:b2:d2:ad:de:0f:73: f5:57:a9:20:38:49:ae:da:a4:7d:6a:ca:69:b7:eb: c9:d1:15:40:4b:bd:92:28:ca:9e:f7:d8:85:57:d3: b7:9f:de:d6:50:03:77:fc:23:02:0d:6c:f5:e1:41: 3e:ca:cd:cc:06:a4:a5:b8:6c:be:6e:f8:7b:93:1e: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:03:96:82:37:51:2A:39:12:08:2C:6C:8D:2A:7D:9B:A2:4B:0E:29 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ab:29:99:9e:1f:98:25:8a:dd:33:c6:ce:9e:87:10:97:d3: 3f:87:27:9f:ca:9f:95:fe:49:68:0c:fa:ec:7e:b9:87:e2:be: bf:b3:0a:9c:f4:80:00:22:16:d7:c7:d6:27:16:df:e8:6d:01: 31:fd:89:ad:22:d5:0c:4e:b4:0d:47:db:2b:97:f2:d5:7a:e0: 28:b9:e4:40:b2:bf:12:41:a6:60:3a:24:5f:68:2d:04:2b:33: ac:91:d6:8b:56:b4:13:59:19:7e:52:01:1f:96:d7:16:d9:ee: 71:60:6e:fb:fc:5b:77:dd:a3:dd:e3:08:4e:0a:8e:7e:66:92: 44:8b:fb:f7:f3:80:0b:08:e2:83:dc:94:71:4b:3e:ed:d9:64: e9:16:1d:19:7b:53:4b:db:f1:fa:a5:2f:62:cc:68:2e:ce:0d: dc:54:b4:2a:47:35:b4:09:79:f1:e3:73:eb:47:3f:bf:21:4f: 14:c6:d4:b4:1a:4c:ab:bf:03:7e:65:c1:fa:40:ba:e2:51:03: 02:d7:96:9e:e0:06:29:90:f7:3c:d4:13:c5:01:c4:b3:90:f7: bd:32:cc:5a:f9:db:ef:c4:40:74:28:f6:f8:fa:21:a2:8b:07: c0:b6:fc:79:6d:b1:89:62:ee:47:70:49:54:01:32:d1:1f:52: 46:6a:89:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUxMDIyMjM1MjU3WhcNMjUxMDI5MjM1MjU3WjAYMRYwFAYD VQQDEw02OGY5NmU1YS00YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPjThh1hX7JrzpMmt9UZZkEi/NzauKbZ9mw8811VEx07+pItfk9VNRNbu6WR G28y92C2APDheqfxhXdM/eu928LLRo17WQarOCygTFtf0QmxNVmwXyAUYN2srRxl V4X93ssxHbnIEx/RkTlBRx8l+88FJciWSAWxQV5YL0ylxno35fr59CBtkj9hDht/ Rz/dT0cFvpuPInQAh90gNgmYg20HXLVE4T572vJa8+4NuM9LkNjl1EtJ+dkuo/+y 0q3eD3P1V6kgOEmu2qR9asppt+vJ0RVAS72SKMqe99iFV9O3n97WUAN3/CMCDWz1 4UE+ys3MBqSluGy+bvh7kx68MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwDloI3 USo5EggsbI0qfZuiSw4pMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWqymZnh+YJYrdM8bOnocQl9M/hyefyp+V/kloDPrsfrmH4r6/swqc 9IAAIhbXx9YnFt/obQEx/YmtItUMTrQNR9srl/LVeuAoueRAsr8SQaZgOiRfaC0E KzOskdaLVrQTWRl+UgEfltcW2e5xYG77/Ft33aPd4whOCo5+ZpJEi/v384ALCOKD 3JRxSz7t2WTpFh0Ze1NL2/H6pS9izGguzg3cVLQqRzW0CXnx43PrRz+/IU8UxtS0 GkyrvwN+ZcH6QLriUQMC15ae4AYpkPc81BPFAcSzkPe9Msxa+dvvxEB0KPb4+iGi iwfAtvx5bbGJYu5HcElUATLRH1JGaokr -----END CERTIFICATE-----Generated at Thu Oct 23 21:01:47 2025 by rpki-client