$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: gPyUpyTkTDhczA5kJMY87A/hd6vmWkQVK3nE9R3aPHE= Subject key identifier: E1:5D:76:5F:50:11:2C:E7:BD:56:24:97:B3:59:4B:D0:B2:0B:F2:94 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2B24 Signing time: Sat 18 Oct 2025 15:45:22 +0000 Manifest this update: Sat 18 Oct 2025 15:45:22 +0000 Manifest next update: Sat 25 Oct 2025 15:45:22 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: BpdcoE7P5cyw6uU/2gHxs5mrXVWAyDtg2ZXobBc/ww8=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: JLW0Prm9Fl8iTEviHWr3LwTg8esGoIHQVhl3vbDV8g4=) 3: BB799DA8844011F09054B049C4F9AE02.roa (hash: knzQsney10eBtrl4m4R3Fm4mD7iLUDfpGtAd26xAm0A=) 4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: i7ok5KOsj6nhLRt3px2zv2fWTxSsfow5HHXSl/NaJkA=) 5: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: g7V5MfQocCOi5DNnPKV2LsDx3/nhzxmFo0S20ShJreI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11117 (0x2b6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Oct 18 15:45:22 2025 GMT Not After : Oct 25 15:45:22 2025 GMT Subject: CN=68f3b612-f8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:94:8c:bd:ee:56:36:7e:19:b2:57:6e:08: 18:d9:e3:01:66:ac:9d:99:6d:fe:1d:2f:0e:37:3a: f3:5b:4a:62:13:b1:a9:4e:e4:f7:94:6a:9c:23:2f: 10:28:24:75:62:af:ee:b2:cf:74:7b:df:b3:c8:67: e8:d0:4e:f2:55:21:37:dc:d6:6a:7c:b2:44:33:14: 82:a7:77:e3:21:c8:3f:4d:bb:b7:2a:55:30:09:c0: 8f:f6:46:d0:e6:88:78:ec:71:5e:d5:eb:d6:6c:be: 70:eb:03:56:15:e7:ac:32:f1:98:14:10:1e:e4:d1: 69:a3:72:26:26:91:6e:7f:2e:56:66:22:34:69:a1: 07:46:04:bd:85:68:25:5a:37:3f:98:df:07:4e:e1: bd:54:55:44:5d:e2:a5:29:e3:5d:df:86:cf:a4:e3: a7:8a:f5:c0:8d:bb:83:b3:d4:b9:76:e7:93:28:d3: 08:53:8c:8f:ef:ec:cc:18:9e:3a:91:20:37:65:ae: dd:8b:58:70:12:3e:3f:b6:74:15:59:ee:31:71:cb: bf:89:02:ab:98:e9:37:82:44:ae:a9:55:a3:28:fa: f7:e0:d5:e5:d7:b3:37:1c:6d:0a:b3:c9:21:5d:8b: 57:77:db:35:c6:5b:34:38:90:70:30:15:04:d6:ed: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5D:76:5F:50:11:2C:E7:BD:56:24:97:B3:59:4B:D0:B2:0B:F2:94 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d6:f5:da:53:50:5c:d6:30:51:f3:62:4d:10:e3:8b:9f:81: ef:6f:5d:11:80:10:b7:c3:f7:2d:c1:f8:51:40:dc:ad:94:00: ce:fc:53:3a:bd:ff:d9:8d:fb:45:04:da:d1:9d:e3:b9:5d:86: f4:a8:68:06:43:92:c8:a3:46:5d:e1:15:d7:6e:85:ac:e3:c7: 14:b3:65:73:7c:e6:20:2f:4d:77:44:59:e2:40:87:c6:f8:08: 64:ed:9b:22:2e:c2:3f:1b:ef:8c:6f:69:ca:f6:1d:08:a8:e0: 13:6e:2b:60:e4:95:6e:bf:6f:bb:38:02:cc:41:78:bc:3b:40: d7:dc:02:b8:12:58:c1:d8:b4:06:b1:41:0e:32:25:48:7d:77: 71:b8:ef:c4:66:8b:bf:34:94:08:e1:cb:45:24:88:fd:c4:aa: 9e:d1:0c:68:b2:c1:50:e9:c2:b9:47:3b:ef:14:3e:c9:0d:9f: 56:c5:4a:17:84:88:48:fd:b9:14:2b:7f:fb:15:22:59:5d:e7: 5e:8e:7b:12:83:66:c8:99:78:9b:72:5d:af:da:f3:e7:39:b2: 41:34:64:0f:63:36:1b:77:c3:92:df:5a:af:6b:39:19:c9:a3: 5d:85:7a:e6:3c:cf:25:03:4e:7f:7d:ac:16:ad:59:c0:dd:72: 68:64:67:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUxMDE4MTU0NTIyWhcNMjUxMDI1MTU0NTIyWjAYMRYwFAYD VQQDEw02OGYzYjYxMi1mOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxiUjL3uVjZ+GbJXbggY2eMBZqydmW3+HS8ONzrzW0piE7GpTuT3lGqcIy8Q KCR1Yq/uss90e9+zyGfo0E7yVSE33NZqfLJEMxSCp3fjIcg/Tbu3KlUwCcCP9kbQ 5oh47HFe1evWbL5w6wNWFeesMvGYFBAe5NFpo3ImJpFufy5WZiI0aaEHRgS9hWgl Wjc/mN8HTuG9VFVEXeKlKeNd34bPpOOnivXAjbuDs9S5dueTKNMIU4yP7+zMGJ46 kSA3Za7di1hwEj4/tnQVWe4xccu/iQKrmOk3gkSuqVWjKPr34NXl17M3HG0Ks8kh XYtXd9s1xls0OJBwMBUE1u2zPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFddl9Q ESznvVYkl7NZS9CyC/KUMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd1vXaU1Bc1jBR82JNEOOLn4Hvb10RgBC3w/ctwfhRQNytlADO/FM6 vf/ZjftFBNrRneO5XYb0qGgGQ5LIo0Zd4RXXboWs48cUs2VzfOYgL013RFniQIfG +Ahk7ZsiLsI/G++Mb2nK9h0IqOATbitg5JVuv2+7OALMQXi8O0DX3AK4EljB2LQG sUEOMiVIfXdxuO/EZou/NJQI4ctFJIj9xKqe0QxossFQ6cK5RzvvFD7JDZ9WxUoX hIhI/bkUK3/7FSJZXedejnsSg2bImXibcl2v2vPnObJBNGQPYzYbd8OS31qvazkZ yaNdhXrmPM8lA05/fawWrVnA3XJoZGcC -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:14 2025 by rpki-client