$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: Ro8oa8BjqxN8K+MrUj6IM7aUEufwqPHUdT39VkeHm2I= Subject key identifier: 8B:81:35:B3:8E:AD:B9:54:C0:4D:69:33:F4:6F:8B:9B:D6:AC:D3:8F Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E6D Signing time: Sun 02 Nov 2025 17:45:17 +0000 Manifest this update: Sun 02 Nov 2025 17:45:17 +0000 Manifest next update: Sun 09 Nov 2025 17:45:17 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: U14lIOihwxG6Zbjka1+Nm+xxbqvajNPvRe+W8j+5m4Y=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3702 (0xe76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Nov 2 17:45:17 2025 GMT Not After : Nov 9 17:45:17 2025 GMT Subject: CN=690798ad-2840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:75:cc:e6:da:80:8d:e9:6c:bc:90:e4:4a: e1:ea:2b:9d:79:e0:27:fc:3a:a7:1d:30:50:0a:0e: 2b:87:6f:39:9e:94:85:22:06:7f:07:d0:7c:0e:b4: 61:3b:7f:e9:73:bf:82:26:b9:40:a0:72:d0:aa:f4: 93:01:4c:b8:d2:6b:7b:ee:3c:9a:0a:69:ca:26:df: a0:77:66:13:fa:2f:ff:95:69:95:81:47:cb:23:4d: 47:58:3d:e3:ad:e6:30:dc:b1:3e:c0:87:11:8f:cc: 49:d6:33:84:bc:e4:3b:52:ce:94:bf:3f:0c:c9:e9: 6f:c6:ac:45:e8:60:ad:ff:02:dc:d2:10:a2:d8:b0: d6:20:8f:4c:ea:98:9f:95:de:d1:a2:89:da:77:33: 42:23:4b:ec:50:b6:11:eb:38:20:15:fd:1f:32:89: bb:c1:91:5e:af:b0:69:36:f6:6f:31:1f:28:8b:2c: d7:6b:9d:3f:ce:eb:73:34:de:8f:4e:0f:dc:07:f5: 2c:80:47:48:71:e3:18:85:83:ff:13:0b:2c:f1:55: 66:5c:ac:66:1b:9c:4a:14:bd:e5:93:f1:23:f2:00: 39:14:57:6c:84:72:a5:1f:34:5c:4a:a4:37:10:fe: d2:78:26:40:d6:45:cf:ff:c5:8f:f9:8a:4b:4d:be: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:81:35:B3:8E:AD:B9:54:C0:4D:69:33:F4:6F:8B:9B:D6:AC:D3:8F X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1c:ce:f5:65:64:84:90:78:c4:b0:90:c1:7e:cd:72:3e:de: 5d:db:45:2f:f2:0b:3c:89:24:1c:1c:b9:6e:2a:a5:b4:25:41: 08:cb:2c:d5:b0:21:8f:60:41:9a:60:a0:b9:60:48:2c:8c:9f: 8f:5f:b5:f1:83:66:10:c5:08:aa:e9:db:b5:3e:82:de:7a:99: 38:bc:03:ad:ab:a9:56:a7:1d:87:31:d9:7a:70:69:ee:c0:8f: 29:de:56:eb:95:e1:d6:2a:e1:c0:fd:20:dd:99:be:52:64:bd: 70:d7:9c:c0:15:f5:95:24:96:62:2d:42:da:2a:74:0c:c0:0f: df:9b:d3:61:0b:6e:62:95:06:54:8c:df:4f:cb:a3:ea:fb:e4: 91:01:9d:74:27:0c:44:88:2a:be:c0:60:ba:69:10:24:76:48: 47:5c:ee:58:98:52:ae:bf:62:8d:b5:37:5a:33:fd:48:85:ae: 7d:c2:f7:38:a6:dd:db:7c:ea:f1:68:83:fa:7a:40:28:9e:25: b9:86:53:7b:50:cc:bb:6c:60:b6:18:2d:54:15:7c:92:8b:0d: b1:e6:99:55:0d:9a:78:af:fc:9b:a3:e2:b9:23:39:a2:69:e1: 62:55:65:f2:44:c8:3a:15:bd:fd:db:dd:9d:ca:97:d1:b0:63: 31:a6:f4:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUxMTAyMTc0NTE3WhcNMjUxMTA5MTc0NTE3WjAYMRYwFAYD VQQDEw02OTA3OThhZC0yODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLZ1zObagI3pbLyQ5Erh6iudeeAn/DqnHTBQCg4rh285npSFIgZ/B9B8DrRh O3/pc7+CJrlAoHLQqvSTAUy40mt77jyaCmnKJt+gd2YT+i//lWmVgUfLI01HWD3j reYw3LE+wIcRj8xJ1jOEvOQ7Us6Uvz8MyelvxqxF6GCt/wLc0hCi2LDWII9M6pif ld7RoonadzNCI0vsULYR6zggFf0fMom7wZFer7BpNvZvMR8oiyzXa50/zutzNN6P Tg/cB/UsgEdIceMYhYP/Ewss8VVmXKxmG5xKFL3lk/Ej8gA5FFdshHKlHzRcSqQ3 EP7SeCZA1kXP/8WP+YpLTb7vgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuBNbOO rblUwE1pM/Rvi5vWrNOPMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoHM71ZWSEkHjEsJDBfs1yPt5d20Uv8gs8iSQcHLluKqW0JUEIyyzV sCGPYEGaYKC5YEgsjJ+PX7Xxg2YQxQiq6du1PoLeepk4vAOtq6lWpx2HMdl6cGnu wI8p3lbrleHWKuHA/SDdmb5SZL1w15zAFfWVJJZiLULaKnQMwA/fm9NhC25ilQZU jN9Py6Pq++SRAZ10JwxEiCq+wGC6aRAkdkhHXO5YmFKuv2KNtTdaM/1Iha59wvc4 pt3bfOrxaIP6ekAoniW5hlN7UMy7bGC2GC1UFXySiw2x5plVDZp4r/ybo+K5Izmi aeFiVWXyRMg6Fb39292dypfRsGMxpvRL -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:32 2025 by rpki-client