$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: ApAKx20SPynutc90MDIxqzKwv9+oR/+cvF3g0WJkWeQ= Subject key identifier: F9:D2:4F:16:7D:81:B7:E4:A2:D9:A0:96:3F:A2:87:F0:D3:8D:98:53 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C68 Signing time: Sun 02 Nov 2025 18:34:06 +0000 Manifest this update: Sun 02 Nov 2025 18:34:05 +0000 Manifest next update: Sun 09 Nov 2025 18:34:05 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: b2hOFOjy+tWGjkUOYmxvJlri4mz7bfkr3K3S60ugiaI=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Nov 2 18:34:05 2025 GMT Not After : Nov 9 18:34:05 2025 GMT Subject: CN=6907a41d-d372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:d1:4e:a6:87:a3:24:5f:59:e8:d9:3c:a5: a0:28:67:0f:78:31:89:c3:cc:19:da:13:f0:86:42: 83:ee:a8:84:ce:3e:15:a0:48:19:4c:3d:5c:ec:03: 34:f0:36:65:3a:da:d2:28:11:ae:45:4a:98:6f:35: c2:1d:7c:17:9b:89:a3:54:b7:65:8b:7b:73:28:8a: 97:50:67:fd:6a:0a:5e:c3:20:9a:66:f5:27:2d:fa: 69:20:71:f5:88:80:3b:5e:8b:0a:40:eb:f8:98:9c: 3c:04:ac:68:c8:64:37:72:d3:4b:e8:ef:64:0d:a0: 34:3e:f1:50:f4:7e:9a:a8:7a:4e:d8:ca:47:4f:5b: 6c:79:d6:bd:c0:44:69:23:80:98:97:ec:4e:21:b8: ed:72:b8:37:eb:5e:54:aa:4d:da:49:6d:b1:0a:d5: 1f:0d:ec:55:41:cc:e5:c2:3b:29:a5:2c:a9:db:dc: 85:1b:e4:ab:51:10:f1:a9:3f:0c:c6:9d:b5:0a:88: 47:a8:ac:23:fb:87:8e:6e:1e:ce:17:d5:0b:f8:30: f5:fb:b8:e0:8c:75:e2:3c:f2:5a:03:f0:12:6e:51: 89:c8:11:64:b0:63:e9:de:d5:af:7d:94:1a:44:71: a8:47:cf:19:d3:db:b4:e3:0c:a7:56:fa:b7:f7:3e: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D2:4F:16:7D:81:B7:E4:A2:D9:A0:96:3F:A2:87:F0:D3:8D:98:53 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b1:f8:42:e7:1f:8a:49:43:2a:84:eb:c1:3a:c2:4f:9f:4b: 53:32:ab:e0:b8:42:37:90:b0:2f:ca:0b:fd:d1:81:17:3c:19: 1c:99:47:cf:08:b1:4a:89:65:cb:bd:cf:27:fd:77:74:ad:ab: 19:3b:bc:5e:d1:4d:40:5d:f3:03:02:0e:e0:fb:fb:16:2a:45: 7f:42:26:69:db:88:a5:9b:9f:1a:41:83:10:5d:e0:1b:45:36: f6:57:bb:55:42:2f:9a:88:3c:95:a7:26:ae:17:af:6f:71:dd: c4:67:a3:05:38:17:8d:41:4a:b0:22:73:1f:ce:85:68:41:19: d2:66:d5:f6:fd:f9:9c:6a:3e:52:4c:5a:78:e8:13:45:17:3f: 20:ed:89:a6:4b:5c:98:d0:7f:d3:2a:57:5e:33:5d:39:f5:0a: 76:f8:96:c5:6f:6f:7f:04:d5:3b:d0:f5:54:88:6b:e8:4d:f5: 48:27:b9:c7:4f:6f:8c:a7:1d:f9:12:e6:01:f4:a1:6c:53:f9: 18:82:f8:d8:a7:09:f1:65:fe:8b:a9:a7:86:3e:02:f7:f6:79: 3b:65:37:ce:f1:dc:bf:21:5f:1d:a3:dd:e4:f4:15:48:09:f1: 63:d9:dc:4e:f6:92:14:ea:1e:4b:ea:60:ec:0a:e4:1d:30:07: b6:2a:84:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUxMTAyMTgzNDA1WhcNMjUxMTA5MTgzNDA1WjAYMRYwFAYD VQQDEw02OTA3YTQxZC1kMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wHRTqaHoyRfWejZPKWgKGcPeDGJw8wZ2hPwhkKD7qiEzj4VoEgZTD1c7AM0 8DZlOtrSKBGuRUqYbzXCHXwXm4mjVLdli3tzKIqXUGf9agpewyCaZvUnLfppIHH1 iIA7XosKQOv4mJw8BKxoyGQ3ctNL6O9kDaA0PvFQ9H6aqHpO2MpHT1tseda9wERp I4CYl+xOIbjtcrg3615Uqk3aSW2xCtUfDexVQczlwjsppSyp29yFG+SrURDxqT8M xp21CohHqKwj+4eObh7OF9UL+DD1+7jgjHXiPPJaA/ASblGJyBFksGPp3tWvfZQa RHGoR88Z09u04wynVvq39z6QOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnSTxZ9 gbfkotmglj+ih/DTjZhTMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3sfhC5x+KSUMqhOvBOsJPn0tTMqvguEI3kLAvygv90YEXPBkcmUfP CLFKiWXLvc8n/Xd0rasZO7xe0U1AXfMDAg7g+/sWKkV/QiZp24ilm58aQYMQXeAb RTb2V7tVQi+aiDyVpyauF69vcd3EZ6MFOBeNQUqwInMfzoVoQRnSZtX2/fmcaj5S TFp46BNFFz8g7YmmS1yY0H/TKldeM1059Qp2+JbFb29/BNU70PVUiGvoTfVIJ7nH T2+Mpx35EuYB9KFsU/kYgvjYpwnxZf6LqaeGPgL39nk7ZTfO8dy/IV8do93k9BVI CfFj2dxO9pIU6h5L6mDsCuQdMAe2KoTK -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:30 2025 by rpki-client