$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: yXAQRi3zQIZ8VU2dxQp1ihUSDjAeODNJLBSHcTPMisk= Subject key identifier: 07:5C:7F:B2:ED:71:7D:65:3E:DD:C3:09:A5:93:FC:70:BA:57:62:5F Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 031E Signing time: Wed 05 Nov 2025 01:11:13 +0000 Manifest this update: Wed 05 Nov 2025 01:11:13 +0000 Manifest next update: Wed 12 Nov 2025 01:11:13 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: 3hRzJC/TViPbf88LGRc4bg+ioSf3S3Y2cx91etS8xrM=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Nov 5 01:11:13 2025 GMT Not After : Nov 12 01:11:13 2025 GMT Subject: CN=690aa431-bf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:ad:6b:2c:63:c5:17:91:94:e3:37:0f:62: 7e:eb:91:ab:9e:6d:b9:2b:6c:e7:bc:77:3d:6f:0c: 01:96:0b:84:3b:21:0f:4b:f5:f4:67:1b:1e:b3:89: e2:0a:ad:4a:ed:b0:ba:f3:fc:dc:5e:3a:df:22:99: c5:52:1d:35:74:f3:ad:99:2a:75:41:e9:69:de:b1: 1e:66:1c:6f:8f:a6:d5:3a:51:59:27:3b:5c:7d:f6: 6d:b1:39:97:f6:4b:3a:4a:f4:4b:23:b7:16:09:5f: 86:1b:a0:4a:8c:b4:70:89:11:30:4f:d6:23:e9:61: d5:0d:3d:78:df:d0:95:36:8a:1a:10:77:c4:03:15: a3:6d:e4:fb:b4:af:13:85:e8:e1:4d:76:4c:79:2e: a4:d2:5e:1d:af:03:58:56:5f:2c:82:e4:7d:c9:c9: bc:e2:20:40:bf:d0:bc:bc:45:13:fa:a4:cc:f9:86: a1:55:40:4f:09:36:77:8d:6d:06:c7:88:2f:42:9a: d9:ad:cf:bc:32:db:57:eb:48:4e:c8:c4:1d:99:ba: f5:fe:46:99:e9:95:e3:f3:d4:7d:aa:9e:04:08:20: ed:a5:f8:a1:8c:a5:f1:f3:84:ef:e4:c9:1f:09:2f: e7:b3:49:cb:8b:4d:13:3d:8c:33:54:ac:76:86:f8: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5C:7F:B2:ED:71:7D:65:3E:DD:C3:09:A5:93:FC:70:BA:57:62:5F X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:69:9a:b8:df:2e:b0:8b:35:a0:ac:7f:e0:10:78:c6:5a:b7: 79:54:0f:d7:bf:2f:ae:7c:53:b8:94:62:4b:9a:a7:e9:3b:41: f8:62:75:07:63:89:8b:82:38:b6:b6:dc:b5:c4:07:aa:30:13: 00:2d:5e:87:be:68:1f:97:77:00:49:7f:dd:54:f7:ec:97:f9: ec:b3:5d:fb:e8:b4:ab:dd:ed:d1:6f:96:47:80:d8:76:c9:b5: ee:fb:63:e3:57:db:55:8f:b2:c3:9c:24:93:3c:63:fe:fc:ca: 70:91:68:35:77:b9:b8:e2:d1:76:60:f7:4f:a5:15:69:05:30: f6:8b:dc:9b:d1:78:a2:6c:e5:5d:ad:ee:1c:de:78:73:7b:f5: 3e:cd:28:00:b5:ee:9f:58:a0:02:ab:41:3e:30:e0:b5:2c:75: 33:6d:4e:02:83:45:99:69:02:0b:18:46:34:36:07:48:6c:b1: 7f:3b:b5:51:77:6a:ca:01:33:3e:af:a0:c2:b7:09:77:12:d3: 72:c5:13:5b:1d:6c:39:12:61:83:54:60:f8:ff:f9:43:0f:a6: f5:de:2c:80:58:3e:bf:7f:8a:37:03:da:d1:33:72:e1:94:90: a0:3f:2f:ec:81:f7:08:80:e0:89:f8:64:7e:49:5f:a3:1a:d8: 16:df:fa:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUxMTA1MDExMTEzWhcNMjUxMTEyMDExMTEzWjAYMRYwFAYD VQQDEw02OTBhYTQzMS1iZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7mtayxjxReRlOM3D2J+65Grnm25K2znvHc9bwwBlguEOyEPS/X0Zxses4ni Cq1K7bC68/zcXjrfIpnFUh01dPOtmSp1Qelp3rEeZhxvj6bVOlFZJztcffZtsTmX 9ks6SvRLI7cWCV+GG6BKjLRwiREwT9Yj6WHVDT1439CVNooaEHfEAxWjbeT7tK8T hejhTXZMeS6k0l4drwNYVl8sguR9ycm84iBAv9C8vEUT+qTM+YahVUBPCTZ3jW0G x4gvQprZrc+8MttX60hOyMQdmbr1/kaZ6ZXj89R9qp4ECCDtpfihjKXx84Tv5Mkf CS/ns0nLi00TPYwzVKx2hvgs5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdcf7Lt cX1lPt3DCaWT/HC6V2JfMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANaZq43y6wizWgrH/gEHjGWrd5VA/Xvy+ufFO4lGJLmqfpO0H4YnUH Y4mLgji2tty1xAeqMBMALV6Hvmgfl3cASX/dVPfsl/nss1376LSr3e3Rb5ZHgNh2 ybXu+2PjV9tVj7LDnCSTPGP+/MpwkWg1d7m44tF2YPdPpRVpBTD2i9yb0XiibOVd re4c3nhze/U+zSgAte6fWKACq0E+MOC1LHUzbU4Cg0WZaQILGEY0NgdIbLF/O7VR d2rKATM+r6DCtwl3EtNyxRNbHWw5EmGDVGD4//lDD6b13iyAWD6/f4o3A9rRM3Lh lJCgPy/sgfcIgOCJ+GR+SV+jGtgW3/pN -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:44 2025 by rpki-client