$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json) Hash identifier: 4G2j1CA4joXGim5ss+MICUcnLicDIuItyPu6gNVwk/E= Subject key identifier: A7:3C:3F:E2:BA:67:32:3F:8C:B7:4E:69:48:C6:61:0D:44:AB:09:9D Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 10EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft Manifest number: 10D2 Signing time: Sun 02 Nov 2025 17:19:40 +0000 Manifest this update: Sun 02 Nov 2025 17:19:39 +0000 Manifest next update: Sun 09 Nov 2025 17:19:39 +0000 Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: f3sIRfYdMVGjppq06p6+W43/zAOz4LL2T8ehbR9ZM+I=) 2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: Ur8W3C7QgJQkw3BnGAD55weFMOItsdqD/26WShAlLaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4331 (0x10eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: Nov 2 17:19:39 2025 GMT Not After : Nov 9 17:19:39 2025 GMT Subject: CN=690792ac-7399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:d5:19:ad:b0:b6:8a:85:ef:4f:fd:74:f2: b5:bd:a6:10:12:56:81:10:49:dc:77:3b:f0:8c:37: bd:61:8d:83:15:94:00:21:c4:da:c8:0b:99:c6:73: 4b:cf:ab:bf:73:e9:26:4c:82:94:b6:31:cd:26:39: 5f:77:76:c1:d4:51:0e:0c:48:84:ba:9f:dd:2b:86: 1b:35:84:9a:61:19:86:3b:a8:a1:05:26:6b:48:14: bb:81:c8:6e:14:dd:a4:45:47:93:4e:87:da:91:8a: 5e:fa:07:27:86:96:26:8e:49:25:77:f9:4a:af:87: 82:3f:72:c0:8d:3d:1a:ee:0d:1b:7e:c9:a6:12:ba: c2:07:2c:d1:e3:94:d6:41:21:22:c5:1d:5d:70:17: aa:ff:34:23:84:83:4a:65:f4:81:c0:b8:9d:79:c5: ac:93:02:9c:27:74:eb:6c:0e:37:a2:06:93:c0:a9: c0:cb:e4:e9:82:bd:4e:d2:fb:06:5b:1c:09:52:ba: a3:e9:33:0b:5e:64:8c:2f:2d:6b:d8:99:15:bf:62: c8:40:17:96:c0:a5:d7:0c:8e:21:b2:4e:f2:de:a4: 1b:a7:50:6c:11:c4:04:59:68:c8:92:e6:68:9d:24: fa:9d:79:95:9f:f9:c5:85:13:5f:38:c5:1a:51:6f: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:3F:E2:BA:67:32:3F:8C:B7:4E:69:48:C6:61:0D:44:AB:09:9D X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fc:eb:d8:9e:f4:dc:d8:58:07:2a:c8:ba:65:f5:84:c4:93: d2:34:fb:5a:f2:d3:dd:87:b6:be:55:29:c1:d5:a8:55:44:34: 52:7b:e5:30:66:b6:be:90:1c:a4:88:ef:dd:0f:67:e5:f1:e6: 89:ed:df:94:98:a7:0a:c2:23:84:96:00:cf:90:4c:e8:94:90: 7c:7f:2e:7c:1a:d2:2d:bb:1c:4e:b7:12:85:15:10:4c:6b:d3: b2:3c:ab:a0:eb:ae:bb:e9:64:fe:ed:25:46:fb:47:71:78:8b: 38:6d:f1:ac:5e:1a:0c:b8:f3:06:25:15:b5:4f:08:c5:b3:9a: 4f:f8:71:8a:a3:e0:02:a1:e0:df:98:a4:a8:d4:14:46:0b:16: cb:b3:78:cf:10:fc:5f:08:03:9c:65:16:ef:82:7f:42:12:dd: 3b:28:2e:5b:1c:b0:89:ee:29:7c:43:a0:92:81:88:6d:6f:54: f6:08:b8:f8:f1:36:09:9d:00:6a:98:89:f5:21:d3:ab:7a:4b: 65:64:79:20:46:e8:51:10:c7:ad:f7:4a:e3:33:37:f8:6b:bd: 2a:5e:5d:24:7f:8c:84:68:3e:a2:56:16:bf:12:2e:0d:42:ee: cd:7f:98:2d:4e:1f:5f:8d:67:6a:91:91:5f:e4:c6:4a:a0:40: e9:9d:2b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjUxMTAyMTcxOTM5WhcNMjUxMTA5MTcxOTM5WjAYMRYwFAYD VQQDEw02OTA3OTJhYy03Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF7VGa2wtoqF70/9dPK1vaYQElaBEEncdzvwjDe9YY2DFZQAIcTayAuZxnNL z6u/c+kmTIKUtjHNJjlfd3bB1FEODEiEup/dK4YbNYSaYRmGO6ihBSZrSBS7gchu FN2kRUeTTofakYpe+gcnhpYmjkkld/lKr4eCP3LAjT0a7g0bfsmmErrCByzR45TW QSEixR1dcBeq/zQjhINKZfSBwLidecWskwKcJ3TrbA43ogaTwKnAy+Tpgr1O0vsG WxwJUrqj6TMLXmSMLy1r2JkVv2LIQBeWwKXXDI4hsk7y3qQbp1BsEcQEWWjIkuZo nST6nXmVn/nFhRNfOMUaUW9mkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKc8P+K6 ZzI/jLdOaUjGYQ1EqwmdMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v MmM3N05aT05Db2VJQk1ZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo/OvYnvTc2FgHKsi6ZfWExJPSNPta8tPdh7a+VSnB1ahVRDRSe+Uw Zra+kBykiO/dD2fl8eaJ7d+UmKcKwiOElgDPkEzolJB8fy58GtItuxxOtxKFFRBM a9OyPKug66676WT+7SVG+0dxeIs4bfGsXhoMuPMGJRW1TwjFs5pP+HGKo+ACoeDf mKSo1BRGCxbLs3jPEPxfCAOcZRbvgn9CEt07KC5bHLCJ7il8Q6CSgYhtb1T2CLj4 8TYJnQBqmIn1IdOrektlZHkgRuhREMet90rjMzf4a70qXl0kf4yEaD6iVha/Ei4N Qu7Nf5gtTh9fjWdqkZFf5MZKoEDpnStg -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:56 2025 by rpki-client