$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: N1n+D8Vq3+gJ2p95kQ6Iness0LjQpcUaltf0QatlZAA= Subject key identifier: 03:09:20:BE:7A:22:2A:9F:E4:7E:CC:D9:C4:22:15:C2:42:D2:17:6F Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 06B7 Signing time: Wed 22 Oct 2025 23:07:50 +0000 Manifest this update: Wed 22 Oct 2025 23:07:50 +0000 Manifest next update: Wed 29 Oct 2025 23:07:50 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: otDjLwQh/cmu3mJFLVqQU0X8W/H8DwK+rpOoC8/vURg=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: +ggMU5apLM7/E36BO1O5K0i1T6Q0H2I5abkvXaYTrxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Oct 22 23:07:50 2025 GMT Not After : Oct 29 23:07:50 2025 GMT Subject: CN=68f963c6-0308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:57:a8:c4:b5:db:f8:79:63:30:18:db:20: 3f:92:32:24:b6:89:ec:29:4a:67:1a:fe:21:50:59: 78:05:46:52:3e:a1:9b:52:e7:e6:97:49:5f:e7:de: 11:2f:96:d9:1b:99:fc:48:94:9c:2e:f6:ee:ac:81: 61:4c:20:88:80:0f:c9:01:de:03:f9:92:c6:7c:15: 5b:76:d8:c7:a4:28:0f:3f:5c:10:29:d9:89:f2:b4: ac:e4:e3:5a:45:83:e5:75:35:81:db:1c:b2:4a:ef: 3b:5f:c9:da:00:5c:64:86:22:a2:c4:63:62:87:a1: ff:ff:d1:c2:ea:d4:20:70:cf:84:cc:dd:a1:39:5d: ae:3e:49:f7:b0:b7:fe:e7:ae:ea:5d:af:42:66:65: 17:6d:4e:23:f7:83:d1:72:c5:d1:ad:4e:13:e4:0a: 35:46:30:01:dd:8a:84:7d:be:8c:ee:74:8a:52:8d: b7:02:44:f7:46:0e:27:e1:78:65:32:db:af:53:dd: 32:69:09:0a:8f:2c:b2:d6:f5:27:06:d2:7b:51:8d: b8:9a:71:bd:e7:9c:af:9f:57:80:8c:6b:e0:4c:e5: eb:11:0d:ea:00:4b:74:7a:22:ab:bc:3b:dd:49:5a: 09:9a:59:82:e7:09:64:26:f9:b3:b9:21:d3:a4:3b: 51:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:09:20:BE:7A:22:2A:9F:E4:7E:CC:D9:C4:22:15:C2:42:D2:17:6F X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:85:e9:ab:a1:b9:3f:76:22:ad:ec:f9:fa:6e:11:28:2c:0a: e9:31:f9:5f:63:58:c8:c5:7c:59:86:af:44:44:ff:0d:0f:d1: e9:21:e9:a1:87:97:84:50:fd:52:04:7f:0a:22:55:d7:a7:ea: 35:03:ec:06:f2:b7:36:c6:5d:43:0c:df:8f:2a:cb:a2:0f:c7: c2:9d:4b:6f:82:11:0f:b8:2d:90:14:be:b9:f2:df:b4:8d:6a: cc:74:20:93:6d:9f:01:51:8c:6c:fe:aa:aa:e4:57:9b:0a:44: 51:de:46:00:23:e5:45:cb:2f:69:0f:54:10:5a:18:5d:5e:84: 72:1c:ef:18:5d:76:83:29:c9:e0:55:15:f4:a6:d2:a6:3a:5e: 0c:b9:f5:a3:a9:38:df:03:da:13:29:b4:d4:2c:1a:dd:7d:d3: ae:d7:ca:bf:98:d4:0c:d1:59:9b:ff:85:5e:45:fb:12:e0:42: 31:2b:9d:90:01:0a:4d:5b:58:31:dc:e2:a9:b7:bd:41:c6:94: 3e:ae:41:da:8e:74:54:e1:f4:38:de:84:1a:cf:24:ce:d2:63: 08:8d:ea:ea:b8:68:c3:d9:2c:82:8f:d6:44:2d:97:02:51:cc: f1:39:a3:a6:43:98:56:bf:4b:4d:61:20:7b:0f:81:8a:5b:46: 93:1a:37:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUxMDIyMjMwNzUwWhcNMjUxMDI5MjMwNzUwWjAYMRYwFAYD VQQDEw02OGY5NjNjNi0wMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbdXqMS12/h5YzAY2yA/kjIktonsKUpnGv4hUFl4BUZSPqGbUufml0lf594R L5bZG5n8SJScLvburIFhTCCIgA/JAd4D+ZLGfBVbdtjHpCgPP1wQKdmJ8rSs5ONa RYPldTWB2xyySu87X8naAFxkhiKixGNih6H//9HC6tQgcM+EzN2hOV2uPkn3sLf+ 567qXa9CZmUXbU4j94PRcsXRrU4T5Ao1RjAB3YqEfb6M7nSKUo23AkT3Rg4n4Xhl MtuvU90yaQkKjyyy1vUnBtJ7UY24mnG955yvn1eAjGvgTOXrEQ3qAEt0eiKrvDvd SVoJmlmC5wlkJvmzuSHTpDtR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMJIL56 Iiqf5H7M2cQiFcJC0hdvMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIhemrobk/diKt7Pn6bhEoLArpMflfY1jIxXxZhq9ERP8ND9HpIemh h5eEUP1SBH8KIlXXp+o1A+wG8rc2xl1DDN+PKsuiD8fCnUtvghEPuC2QFL658t+0 jWrMdCCTbZ8BUYxs/qqq5FebCkRR3kYAI+VFyy9pD1QQWhhdXoRyHO8YXXaDKcng VRX0ptKmOl4MufWjqTjfA9oTKbTULBrdfdOu18q/mNQM0Vmb/4VeRfsS4EIxK52Q AQpNW1gx3OKpt71BxpQ+rkHajnRU4fQ43oQazyTO0mMIjerquGjD2SyCj9ZELZcC UczxOaOmQ5hWv0tNYSB7D4GKW0aTGjdt -----END CERTIFICATE-----Generated at Thu Oct 23 20:05:44 2025 by rpki-client