$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: 0fGAC0xl+BwFaot/koq3qfyLWZJWyYhDRuYqtfTp0Ho= Subject key identifier: FF:A2:44:57:EB:F5:7F:A1:24:9D:E4:B0:BD:D2:EC:C7:FE:E5:FC:72 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:09:59 +0000 Manifest this update: Sun 19 Oct 2025 11:09:58 +0000 Manifest next update: Sun 26 Oct 2025 11:09:58 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: 8KWlwdpqBJIpHSKXfkYz44WkT9Dr9UPW3MrxjMz+Bak=) 2: CD603AAA6B2B11F0B21D7F0EC4F9AE02.roa (hash: I4V72owrg5qiCod5LgKXA3su1gxxiAdnYcB+BZWhJ8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Oct 19 11:09:58 2025 GMT Not After : Oct 26 11:09:58 2025 GMT Subject: CN=68f4c707-bab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:04:cc:6c:9e:e7:79:8e:4c:70:6d:12:20: 4e:af:37:60:b5:01:fc:62:ea:3a:f9:00:ff:8d:01: db:11:f2:2d:28:b6:8c:a8:df:9b:73:dd:b8:2b:75: 7f:ed:a8:3a:4f:20:56:43:93:b8:59:48:52:24:50: 60:b8:5e:47:7d:24:ee:3c:4a:ad:d6:59:3e:ca:e2: 28:a3:4b:ed:dd:8a:ad:3c:c3:fa:15:94:42:ec:13: 5d:01:d3:c7:59:7b:c7:e5:f7:55:05:b9:53:f1:ef: 31:7e:a3:96:bd:15:48:4a:4e:fc:f2:dd:21:6f:4e: 0c:10:a9:54:34:76:ba:2c:27:5a:5b:04:22:00:53: fd:d8:29:3b:d8:d5:5f:95:65:f6:be:22:7f:87:d6: 9d:1b:10:91:95:e4:b4:61:da:c4:c5:ae:f4:9d:a2: cc:ba:d3:57:21:b0:37:68:e3:b5:74:bb:21:97:82: de:e5:93:0c:09:a3:72:5e:c5:7f:44:a1:ce:de:57: 32:d9:70:b3:4f:b1:97:2e:c7:b6:95:66:f1:61:d6: 6a:22:7c:f1:fb:7f:e8:02:23:70:b8:1a:73:11:f4: 22:f1:91:4b:a0:14:e6:dc:0c:3c:70:ab:ed:2f:5b: be:3e:8c:b4:91:5b:2a:c7:c9:a9:ba:d6:69:22:b2: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:44:57:EB:F5:7F:A1:24:9D:E4:B0:BD:D2:EC:C7:FE:E5:FC:72 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:36:c7:b2:74:f7:78:e7:2a:75:4e:e9:e1:a0:eb:d9:79:73: c6:d0:f1:bc:c0:0b:f8:81:a9:94:15:8e:43:8c:4b:e8:4d:08: 0b:e6:ce:d7:ae:f4:38:b8:6f:d2:4b:62:5e:eb:ba:13:bf:9e: 20:f1:32:29:32:83:41:67:53:ce:e5:e9:06:0c:c7:97:bb:55: a2:96:24:82:48:c9:48:0f:2c:09:b9:23:62:13:70:f2:17:bb: c9:70:5d:0a:46:5d:33:63:03:20:d9:a3:72:31:32:50:f0:30: ae:34:0b:b4:88:38:5a:c6:e0:4e:18:00:a4:a4:25:49:4a:d8: ce:9c:ca:0d:0a:ae:df:7b:a7:0b:3c:ab:da:a9:76:53:23:91: 64:07:11:22:6a:2e:0b:7e:91:97:f9:c2:0a:4d:7f:d8:c4:0b: 66:9e:72:44:09:ab:27:25:08:9b:d7:a5:ec:cb:77:bc:3b:aa: 57:4c:b7:da:61:5b:fb:b7:a6:77:c0:41:d2:18:c4:00:a1:42: 55:46:cb:b8:03:e9:29:c3:bc:9c:f3:5a:d1:36:b2:69:4e:0c: b2:07:1a:80:bc:c4:a6:13:b0:de:b3:44:e0:aa:44:41:f0:37: 35:c0:ca:e4:c3:e0:50:96:ee:00:0b:6c:f1:2b:62:17:a8:ca: 50:b8:31:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoOUVCREExMjNEOUVFODMwOTQzMDVBMTE4MEMyQTA4MDU3 RkU1NDA2QTAeFw0yNTEwMTkxMTA5NThaFw0yNTEwMjYxMTA5NThaMBgxFjAUBgNV BAMTDTY4ZjRjNzA3LWJhYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIxATMbJ7neY5McG0SIE6vN2C1Afxi6jr5AP+NAdsR8i0otoyo35tz3bgrdX/t qDpPIFZDk7hZSFIkUGC4Xkd9JO48Sq3WWT7K4iijS+3diq08w/oVlELsE10B08dZ e8fl91UFuVPx7zF+o5a9FUhKTvzy3SFvTgwQqVQ0drosJ1pbBCIAU/3YKTvY1V+V Zfa+In+H1p0bEJGV5LRh2sTFrvSdosy601chsDdo47V0uyGXgt7lkwwJo3JexX9E oc7eVzLZcLNPsZcux7aVZvFh1moifPH7f+gCI3C4GnMR9CLxkUugFObcDDxwq+0v W74+jLSRWyrHyam61mkisng3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/6JEV+v1 f6EkneSwvdLsx/7l/HIwHwYDVR0jBBgwFoAUnr2hI9nugwlDBaEYDCoIBX/lQGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzIzMjZDNjNFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbnIyaEk5bnVnd2xEQmFFWURDb0lCWF9sUUdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NUMzLzIzMjZDNjNFNjYwNDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3ds REJhRVlEQ29JQlhfbFFHby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIc2x7J093jnKnVO6eGg69l5c8bQ8bzAC/iBqZQVjkOMS+hNCAvmzteu 9Di4b9JLYl7ruhO/niDxMikyg0FnU87l6QYMx5e7VaKWJIJIyUgPLAm5I2ITcPIX u8lwXQpGXTNjAyDZo3IxMlDwMK40C7SIOFrG4E4YAKSkJUlK2M6cyg0Krt97pws8 q9qpdlMjkWQHESJqLgt+kZf5wgpNf9jEC2aeckQJqyclCJvXpezLd7w7qldMt9ph W/u3pnfAQdIYxAChQlVGy7gD6SnDvJzzWtE2smlODLIHGoC8xKYTsN6zROCqREHw NzXAyuTD4FCW7gALbPErYheoylC4MQ8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:07 2025 by rpki-client