$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: 865ahtIH70X/hzzEokwu3jOlkLB3DxMXupicTPKx9Vg= Subject key identifier: C8:4E:9C:66:7F:B2:5C:AA:4A:C0:69:D1:12:D8:F4:4B:89:E2:A9:88 Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 0248 Signing time: Fri 19 Sep 2025 02:16:06 +0000 Manifest this update: Fri 19 Sep 2025 02:16:06 +0000 Manifest next update: Fri 26 Sep 2025 02:16:06 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: JYagvgQtnEDjG/e+6N1MHJrv/tqRvrXCZ2YBbs8nQmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: Sep 19 02:16:06 2025 GMT Not After : Sep 26 02:16:06 2025 GMT Subject: CN=68ccbce6-4c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:97:fd:cf:2c:62:ec:4c:ff:d8:fb:58:bd: 28:9b:c8:80:e3:68:a7:ed:f7:54:c2:32:e4:64:42: 1b:8a:e8:fc:63:23:88:8a:48:08:b2:ee:40:20:d2: 07:c4:da:a3:39:67:09:45:2c:e1:5c:05:2d:61:e4: 92:93:6f:87:64:64:4b:e8:7c:ce:a4:db:55:10:e0: f2:00:57:1f:55:e5:e3:e4:0f:ed:e9:eb:d9:d0:e4: c1:76:ed:b4:15:77:8b:45:00:b0:bb:aa:a0:51:49: 4a:f5:a1:69:03:f2:a7:df:94:99:e4:d6:17:7d:de: d9:b4:23:b2:13:47:10:3b:d9:69:ef:fb:70:91:27: 66:2e:50:88:c7:17:39:02:8f:86:68:53:cc:63:78: ce:9b:5e:62:e6:78:65:98:db:db:33:71:01:c1:07: 14:bf:73:cc:7b:af:94:9a:2f:45:25:47:1b:3a:86: 70:88:b6:98:f0:64:26:62:b8:1f:29:55:6e:19:ec: ae:3b:ec:b0:e4:c2:97:90:ee:e7:e7:59:79:1c:b7: 83:c4:98:67:22:0c:7f:b5:5c:88:99:78:73:4a:54: 77:3a:f1:90:73:ee:c8:ca:1f:b3:70:7d:71:df:90: 9f:e4:fc:07:83:a9:e4:fc:cb:b1:94:22:0c:5d:a1: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4E:9C:66:7F:B2:5C:AA:4A:C0:69:D1:12:D8:F4:4B:89:E2:A9:88 X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9b:9d:09:e0:c0:99:1a:87:fa:b3:c7:60:f9:88:51:46:18: 2c:0b:93:bc:0d:4f:0e:72:20:5b:f3:1a:29:7e:75:2a:ea:08: 37:1d:6a:a8:0f:ce:9d:d2:58:49:2c:b0:1e:a6:8f:b5:98:a2: af:17:13:92:90:a6:67:36:40:c0:6a:03:2d:58:2d:8d:0a:f2: f1:02:98:9c:03:9b:5a:43:2e:02:e7:09:58:ab:70:43:86:9f: 6e:79:87:ac:5a:2a:6a:4c:14:46:49:ad:ff:4a:27:99:5f:86: 13:e5:34:be:74:3e:ab:51:fe:1c:57:e9:25:90:cd:fc:22:db: bf:05:6d:0c:14:66:8b:48:fb:e3:ee:4a:2f:27:c2:58:ba:f3: 16:34:3a:a3:19:d1:c8:f4:82:7e:a5:73:76:e3:21:e5:5f:00: 68:ee:d7:9e:05:45:a9:cf:3e:75:7e:0c:58:9f:2b:6d:ad:a0: 1c:6d:e4:23:e3:bb:12:1d:f0:5f:2b:36:6c:cb:66:e3:30:65: 9c:6a:1e:e3:46:c0:ed:dd:c0:3e:99:0a:0c:11:fe:62:e1:0c: cd:ef:bc:8b:c4:b0:19:c2:b3:8a:27:16:15:0f:51:3c:87:3f: dd:4b:24:ef:e9:1e:ac:5d:b0:e8:e2:10:84:20:58:0c:fa:23: ee:9a:0f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjUwOTE5MDIxNjA2WhcNMjUwOTI2MDIxNjA2WjAYMRYwFAYD VQQDEw02OGNjYmNlNi00YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspWX/c8sYuxM/9j7WL0om8iA42in7fdUwjLkZEIbiuj8YyOIikgIsu5AINIH xNqjOWcJRSzhXAUtYeSSk2+HZGRL6HzOpNtVEODyAFcfVeXj5A/t6evZ0OTBdu20 FXeLRQCwu6qgUUlK9aFpA/Kn35SZ5NYXfd7ZtCOyE0cQO9lp7/twkSdmLlCIxxc5 Ao+GaFPMY3jOm15i5nhlmNvbM3EBwQcUv3PMe6+Umi9FJUcbOoZwiLaY8GQmYrgf KVVuGeyuO+yw5MKXkO7n51l5HLeDxJhnIgx/tVyImXhzSlR3OvGQc+7Iyh+zcH1x 35Cf5PwHg6nk/MuxlCIMXaE2kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhOnGZ/ slyqSsBp0RLY9EuJ4qmIMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8m50J4MCZGof6s8dg+YhRRhgsC5O8DU8OciBb8xopfnUq6gg3HWqo D86d0lhJLLAepo+1mKKvFxOSkKZnNkDAagMtWC2NCvLxApicA5taQy4C5wlYq3BD hp9ueYesWipqTBRGSa3/SieZX4YT5TS+dD6rUf4cV+klkM38Itu/BW0MFGaLSPvj 7kovJ8JYuvMWNDqjGdHI9IJ+pXN24yHlXwBo7teeBUWpzz51fgxYnyttraAcbeQj 47sSHfBfKzZsy2bjMGWcah7jRsDt3cA+mQoMEf5i4QzN77yLxLAZwrOKJxYVD1E8 hz/dSyTv6R6sXbDo4hCEIFgM+iPumg+Y -----END CERTIFICATE-----Generated at Fri Sep 19 05:31:13 2025 by rpki-client