$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: nr9QJWdSo0aOMKLRLTT1zfYprl5f6I9GJhkJW+7bs5Q= Subject key identifier: 1C:33:D8:11:26:B3:2A:CB:E1:2F:7D:20:66:9A:3B:A3:D2:E3:02:D4 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 01F6 Signing time: Thu 23 Oct 2025 03:58:10 +0000 Manifest this update: Thu 23 Oct 2025 03:58:09 +0000 Manifest next update: Thu 30 Oct 2025 03:58:09 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: PmYN0VynWnx4oNvSZ/RsL5QwTbqYGaT+uUEoGtIAgpU=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Oct 23 03:58:09 2025 GMT Not After : Oct 30 03:58:09 2025 GMT Subject: CN=68f9a7d1-0f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:e8:69:cb:37:cb:71:2d:44:c1:35:ea:a3: 70:08:ba:68:0f:86:59:cf:a3:45:6d:ef:a3:05:b7: c8:9b:b0:bd:7f:50:b7:d1:f8:ae:56:65:3a:ba:9c: 4f:29:f0:75:6e:e2:00:a5:3e:03:2c:c4:64:c5:8a: 3f:c2:5c:e2:a0:6a:5a:7b:32:cd:a9:80:ae:54:5d: eb:ce:ef:5a:53:7b:d1:ba:6f:14:aa:2c:59:41:97: 5d:ac:e3:97:3c:3e:2f:4f:64:ae:d3:b8:a9:79:1f: 94:b6:20:e8:dd:20:94:f4:03:18:63:90:c9:61:39: 1d:13:31:40:5c:91:d2:c2:ff:ad:f9:87:d7:b3:85: c7:87:88:e8:61:5a:99:9f:d8:92:92:44:aa:ac:8a: ec:63:f7:0a:3b:d5:75:ed:16:5d:8b:e2:08:59:ae: 9a:02:f6:bb:36:4a:31:c7:ec:3d:3a:1d:b3:4a:a6: e6:78:05:c7:c5:c3:10:50:a7:fb:6e:b5:c2:eb:e7: 1a:f4:d5:10:4b:19:88:61:b5:cd:96:23:45:61:22: c6:68:a3:e0:15:e2:69:34:3d:e5:a1:ed:09:ea:13: 0d:c8:4c:c6:f8:bb:19:40:b2:8c:77:9c:4e:4c:5a: 87:26:13:fe:1a:71:6f:62:e6:54:e4:f6:2a:a3:0b: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:33:D8:11:26:B3:2A:CB:E1:2F:7D:20:66:9A:3B:A3:D2:E3:02:D4 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ca:68:45:6f:ab:4f:b4:72:1a:4a:50:da:fa:91:57:41:87: b6:47:25:26:65:a3:e4:9e:c0:08:bc:33:90:da:15:c8:76:c8: 61:a0:34:7a:66:33:3c:b2:2b:24:3b:69:fa:dd:13:ed:5e:a2: af:8b:33:76:78:1a:a5:a7:e3:33:2e:fb:c3:90:ba:09:ba:d3: f1:d0:72:53:ae:26:87:84:46:52:1c:46:c2:08:61:a4:b0:f3: 8f:a9:fc:00:b6:f9:df:8b:83:d6:1d:4b:d2:15:4c:db:9a:f1: 3c:0e:7e:fc:bd:0e:c0:00:43:e0:ad:cc:a2:8f:f3:b7:d5:b4: c4:8a:c2:4f:61:45:b3:58:55:f0:d7:ea:0a:84:d0:c5:40:9c: 6b:76:ae:17:be:76:de:46:f0:c8:6b:17:75:c3:40:25:62:3b: ff:42:d1:bb:8a:d0:4e:b9:28:a4:f7:7c:b3:e9:1b:97:7d:7e: f6:86:c8:fc:34:55:f3:cd:17:49:18:7a:77:79:be:ac:80:55: 8a:85:e5:18:42:25:59:c5:ed:be:cc:e8:cf:33:f4:aa:3d:78: 5f:1b:3e:b2:36:46:f2:87:8d:6e:b3:5b:f9:30:43:03:53:3f: 72:5c:a8:f5:ce:3b:99:d2:3a:18:1f:7f:0f:8b:37:7f:3a:38: 03:73:fd:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUxMDIzMDM1ODA5WhcNMjUxMDMwMDM1ODA5WjAYMRYwFAYD VQQDEw02OGY5YTdkMS0wZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf/oacs3y3EtRME16qNwCLpoD4ZZz6NFbe+jBbfIm7C9f1C30fiuVmU6upxP KfB1buIApT4DLMRkxYo/wlzioGpaezLNqYCuVF3rzu9aU3vRum8UqixZQZddrOOX PD4vT2Su07ipeR+UtiDo3SCU9AMYY5DJYTkdEzFAXJHSwv+t+YfXs4XHh4joYVqZ n9iSkkSqrIrsY/cKO9V17RZdi+IIWa6aAva7Nkoxx+w9Oh2zSqbmeAXHxcMQUKf7 brXC6+ca9NUQSxmIYbXNliNFYSLGaKPgFeJpND3loe0J6hMNyEzG+LsZQLKMd5xO TFqHJhP+GnFvYuZU5PYqows6XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwz2BEm syrL4S99IGaaO6PS4wLUMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDymhFb6tPtHIaSlDa+pFXQYe2RyUmZaPknsAIvDOQ2hXIdshhoDR6 ZjM8siskO2n63RPtXqKvizN2eBqlp+MzLvvDkLoJutPx0HJTriaHhEZSHEbCCGGk sPOPqfwAtvnfi4PWHUvSFUzbmvE8Dn78vQ7AAEPgrcyij/O31bTEisJPYUWzWFXw 1+oKhNDFQJxrdq4XvnbeRvDIaxd1w0AlYjv/QtG7itBOuSik93yz6RuXfX72hsj8 NFXzzRdJGHp3eb6sgFWKheUYQiVZxe2+zOjPM/SqPXhfGz6yNkbyh41us1v5MEMD Uz9yXKj1zjuZ0joYH38Pizd/OjgDc/1b -----END CERTIFICATE-----Generated at Thu Oct 23 20:16:05 2025 by rpki-client