$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json) Hash identifier: QUKzfT5nDDrt/BRWRvUMoKD+NkPUvgwTGQmBBvbAdzk= Subject key identifier: E3:B1:9B:7A:E6:B7:44:F4:04:00:81:6E:18:6A:7E:45:3F:36:5A:D0 Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19 Certificate issuer: /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft Manifest number: 0C Signing time: Mon 03 Nov 2025 07:59:10 +0000 Manifest this update: Mon 03 Nov 2025 07:59:10 +0000 Manifest next update: Mon 10 Nov 2025 07:59:10 +0000 Files and hashes: 1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: HMoX7N4pcNP1aqfdNjY7p5dgR6SBpPjs1axkXEgzC0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119 Validity Not Before: Nov 3 07:59:10 2025 GMT Not After : Nov 10 07:59:10 2025 GMT Subject: CN=690860ce-7eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:50:4e:b2:53:f4:e7:33:e4:6b:a3:77:99: f5:ca:dc:51:1b:d5:83:e4:8a:6e:71:33:cb:63:91: 3b:47:19:1e:3e:2c:4b:2e:aa:8a:58:90:50:89:ff: 16:eb:1d:e7:0d:6a:0c:69:89:f8:33:bb:bf:39:7f: 3e:0e:7f:d4:84:bd:7e:04:ef:ff:b1:ce:b7:ed:9d: c7:1d:ae:a1:4b:1b:0f:52:7e:05:64:4f:27:97:87: cb:18:f9:3f:b2:2e:7f:83:f0:1d:98:65:e1:4f:1d: 3d:18:98:a9:ba:2c:db:36:66:2e:68:76:34:a7:15: fe:29:a8:19:4d:a4:e8:26:e0:02:83:b1:b1:60:4c: 3b:27:37:84:d9:7c:7a:dc:8c:6b:de:c3:a6:41:82: f7:c4:22:c2:42:39:cf:6d:50:2d:ab:02:7d:56:0d: 74:6f:3e:c8:d2:62:3e:3a:fc:8a:03:c8:5d:ec:a9: 29:31:cf:c2:43:00:dc:a6:cd:3f:87:f7:ea:cf:ea: 0c:71:a9:03:ca:76:12:81:1a:00:4b:1b:a8:41:15: 85:e3:8b:82:97:df:9f:35:00:b2:a5:91:90:53:97: c0:4e:10:7c:cf:34:2a:df:c2:8c:31:a6:06:02:c4: 94:7f:f6:51:bf:1e:e3:5d:02:e7:05:7b:d4:22:e1: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B1:9B:7A:E6:B7:44:F4:04:00:81:6E:18:6A:7E:45:3F:36:5A:D0 X509v3 Authority Key Identifier: keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:c8:96:5a:64:32:99:69:fe:30:34:1d:6f:d9:49:24:13: 81:a8:d1:c5:06:23:ad:ad:19:50:84:8d:31:de:4a:78:ff:82: 07:9f:60:9f:50:ac:aa:3e:f3:8b:1f:fc:31:f2:c0:88:77:bb: 31:b2:81:de:f3:d5:7e:9f:e1:5a:48:35:e1:cb:b2:0a:29:58: 2e:8f:50:fd:f5:d2:66:93:9c:f6:db:dd:6f:4f:2f:29:43:54: 77:1c:24:c2:2b:62:d0:90:3c:54:a5:16:fa:14:28:c0:49:e3: 74:19:2d:5b:cf:05:b3:7e:eb:a1:ed:44:ec:4d:91:e1:10:07: 4d:f9:dd:89:2d:16:da:42:aa:0d:06:65:c1:50:af:94:a1:32: 72:bb:45:7d:84:82:12:62:b3:b6:97:7f:7a:cc:69:b5:61:36: 1e:24:d3:ab:4f:54:35:80:77:77:92:8e:00:fe:8c:dc:cc:f1: 83:fc:8c:aa:21:26:35:72:4d:a5:40:22:d3:11:44:85:13:1f: 3b:1c:5f:d7:e1:0f:1c:4b:44:be:ba:5a:b0:74:19:26:01:a9: 0d:69:20:b5:2e:d8:c2:8e:b3:db:d1:7e:b1:75:a4:35:1b:86: c9:e9:a5:4b:29:20:66:44:4a:f5:7c:65:81:ec:90:be:38:73: 3f:2b:ed:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODAyQzExMC8GA1UEBRMoREEwQTUxQkEyNjMxNTc3OUJGNkY4M0VGRjAzNEYyNjAx MDVDNTExOTAeFw0yNTExMDMwNzU5MTBaFw0yNTExMTAwNzU5MTBaMBgxFjAUBgNV BAMTDTY5MDg2MGNlLTdlYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZxlBOslP05zPka6N3mfXK3FEb1YPkim5xM8tjkTtHGR4+LEsuqopYkFCJ/xbr HecNagxpifgzu785fz4Of9SEvX4E7/+xzrftnccdrqFLGw9SfgVkTyeXh8sY+T+y Ln+D8B2YZeFPHT0YmKm6LNs2Zi5odjSnFf4pqBlNpOgm4AKDsbFgTDsnN4TZfHrc jGvew6ZBgvfEIsJCOc9tUC2rAn1WDXRvPsjSYj46/IoDyF3sqSkxz8JDANymzT+H 9+rP6gxxqQPKdhKBGgBLG6hBFYXji4KX3581ALKlkZBTl8BOEHzPNCrfwowxpgYC xJR/9lG/HuNdAucFe9Qi4e6BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU47Gbeua3 RPQEAIFuGGp+RT82WtAwHwYDVR0jBBgwFoAU2gpRuiYxV3m/b4Pv8DTyYBBcURkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MDJDLzAyMzQ1Rjk0QTlC QzExRjA5NzU2NEQxQkM0RjlBRTAyLzJncFJ1aVl4VjNtX2I0UHY4RFR5WUJCY1VS ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmdwUnVpWXhWM21fYjRQdjhEVHlZQkJjVVJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MDJDLzAyMzQ1Rjk0QTlCQzExRjA5NzU2NEQxQkM0RjlBRTAyLzJncFJ1aVl4VjNt X2I0UHY4RFR5WUJCY1VSay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFGqyJZaZDKZaf4wNB1v2UkkE4Go0cUGI62tGVCEjTHeSnj/ggefYJ9Q rKo+84sf/DHywIh3uzGygd7z1X6f4VpINeHLsgopWC6PUP310maTnPbb3W9PLylD VHccJMIrYtCQPFSlFvoUKMBJ43QZLVvPBbN+66HtROxNkeEQB0353YktFtpCqg0G ZcFQr5ShMnK7RX2EghJis7aXf3rMabVhNh4k06tPVDWAd3eSjgD+jNzM8YP8jKoh JjVyTaVAItMRRIUTHzscX9fhDxxLRL66WrB0GSYBqQ1pILUu2MKOs9vRfrF1pDUb hsnppUspIGZESvV8ZYHskL44cz8r7YI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:55 2025 by rpki-client