$ rpki-client -vvf rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft File: nqxU6fn1nmg49IRgQhBWMwZtII4.mft (raw, json) Hash identifier: cSCNXkI92naUQRbj5NpEGrWGz++wK1g0QzYiLy/RNCU= Subject key identifier: 55:A8:33:DD:AF:5E:E4:08:2F:CB:85:3F:86:14:F4:7F:A0:C0:DA:2A Authority key identifier: 9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E Certificate issuer: /CN=A91570D9/serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft Manifest number: 25 Signing time: Sun 19 Oct 2025 11:19:38 +0000 Manifest this update: Sun 19 Oct 2025 11:19:38 +0000 Manifest next update: Sun 26 Oct 2025 11:19:38 +0000 Files and hashes: 1: nqxU6fn1nmg49IRgQhBWMwZtII4.crl (hash: 5s7TeqTNuOUHUMiYIhtWU2SsiwefeUwUamWSMUqcQIM=) 2: AA3F24B67D8011F083953324C4F9AE02.roa (hash: oUOKfGpowL+63AVr56ivCHHAJRNhENKlNPtv0dg5ub8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570D9, serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Validity Not Before: Oct 19 11:19:38 2025 GMT Not After : Oct 26 11:19:38 2025 GMT Subject: CN=68f4c94a-e28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:20:65:9f:f6:5a:dd:ee:64:0f:82:ee:84: a9:d0:73:b7:3e:6a:67:0c:cc:9d:e8:42:9b:fe:84: e1:29:6c:6a:3a:45:95:df:1a:e5:f8:d5:37:ed:55: f5:9b:80:a3:b2:1c:bf:9e:6f:34:95:e6:f8:81:c5: 64:2a:2e:fa:a7:55:34:29:46:ff:0a:75:67:3f:c9: 8f:cb:59:d8:56:bd:01:4e:1f:62:9d:c4:1e:52:9f: ad:72:e8:fe:cd:38:97:a9:d6:68:11:79:d4:36:df: ed:8f:63:c1:74:5b:08:ab:31:87:93:ae:33:a5:0c: 6d:a2:65:16:d6:4b:51:b4:0d:80:2b:3e:d1:17:1e: 59:3f:21:75:d2:e6:45:93:cf:61:68:04:a9:5f:62: fb:b2:f4:96:6b:80:6f:1e:fc:bd:23:7b:3c:dc:97: 2b:c4:e2:6f:43:58:91:28:33:b7:2c:65:ce:bc:fe: 9d:55:6f:47:fa:2f:24:d0:c1:c3:6d:a0:35:79:93: 52:fc:47:ad:f8:88:0c:0b:1b:75:77:a6:5c:9c:d0: 47:70:c0:6c:5b:99:c1:4f:53:ac:fd:47:e2:b6:75: 25:ed:56:8a:c7:63:dd:00:89:77:7f:f4:eb:f2:ab: b2:a1:af:13:a1:f5:df:2a:9c:4e:0b:4f:3d:51:55: f5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A8:33:DD:AF:5E:E4:08:2F:CB:85:3F:86:14:F4:7F:A0:C0:DA:2A X509v3 Authority Key Identifier: keyid:9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0d:9f:f8:1f:91:1a:ad:05:9b:ba:1b:f1:c3:57:ac:cb:aa: 75:0e:a6:40:19:df:8a:cd:b3:8c:86:ed:6c:4d:56:03:d3:e4: 71:2d:2b:26:48:cc:24:d4:07:cb:9c:b3:65:26:c7:9e:15:5b: 18:c1:40:22:68:d0:1b:04:a6:78:2f:f7:69:87:5d:48:67:80: 66:5a:47:8e:23:7b:dc:f5:76:f6:88:6d:29:38:47:92:ae:59: 9e:29:0f:33:79:2d:81:21:d4:81:51:9e:8a:c5:a2:63:3e:3c: 5f:12:a6:d3:2f:ec:4b:73:7b:d6:04:4f:af:b6:88:48:cd:fe: 94:d7:7c:96:f2:72:fd:ec:b1:16:0c:60:50:a6:c8:66:8d:d8: b4:0d:ed:2c:56:a9:ec:77:11:08:1e:9a:20:9e:96:0a:98:67: b3:9b:04:38:c8:09:2c:e6:22:72:b2:95:cb:ed:bf:8d:fe:a1: f4:40:e8:a8:6e:79:d9:c9:17:07:f2:4e:55:5e:d2:42:0c:97: 85:ce:c5:4f:c7:55:94:4c:26:7d:7d:43:2c:be:7f:cf:10:d5: 81:13:49:f0:ba:70:b0:2e:02:49:08:c3:4a:c8:1b:05:c8:ca: 43:8f:f1:56:22:de:d2:a7:fd:b0:ec:b5:7b:32:02:a6:b7:c7: cf:36:64:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzBEOTExMC8GA1UEBRMoOUVBQzU0RTlGOUY1OUU2ODM4RjQ4NDYwNDIxMDU2MzMw NjZEMjA4RTAeFw0yNTEwMTkxMTE5MzhaFw0yNTEwMjYxMTE5MzhaMBgxFjAUBgNV BAMTDTY4ZjRjOTRhLWUyOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBoiBln/Za3e5kD4LuhKnQc7c+amcMzJ3oQpv+hOEpbGo6RZXfGuX41TftVfWb gKOyHL+ebzSV5viBxWQqLvqnVTQpRv8KdWc/yY/LWdhWvQFOH2KdxB5Sn61y6P7N OJep1mgRedQ23+2PY8F0WwirMYeTrjOlDG2iZRbWS1G0DYArPtEXHlk/IXXS5kWT z2FoBKlfYvuy9JZrgG8e/L0jezzclyvE4m9DWJEoM7csZc68/p1Vb0f6LyTQwcNt oDV5k1L8R634iAwLG3V3plyc0EdwwGxbmcFPU6z9R+K2dSXtVorHY90AiXd/9Ovy q7KhrxOh9d8qnE4LTz1RVfWRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVagz3a9e 5Agvy4U/hhT0f6DA2iowHwYDVR0jBBgwFoAUnqxU6fn1nmg49IRgQhBWMwZtII4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MEQ5LzJFQ0IyRkZBN0Q4 MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1nNDlJUmdRaEJXTXdadElJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnF4VTZmbjFubWc0OUlSZ1FoQldNd1p0SUk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MEQ5LzJFQ0IyRkZBN0Q4MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1n NDlJUmdRaEJXTXdadElJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACsNn/gfkRqtBZu6G/HDV6zLqnUOpkAZ34rNs4yG7WxNVgPT5HEtKyZI zCTUB8ucs2Umx54VWxjBQCJo0BsEpngv92mHXUhngGZaR44je9z1dvaIbSk4R5Ku WZ4pDzN5LYEh1IFRnorFomM+PF8SptMv7Etze9YET6+2iEjN/pTXfJbycv3ssRYM YFCmyGaN2LQN7SxWqex3EQgemiCelgqYZ7ObBDjICSzmInKylcvtv43+ofRA6Khu ednJFwfyTlVe0kIMl4XOxU/HVZRMJn19Qyy+f88Q1YETSfC6cLAuAkkIw0rIGwXI ykOP8VYi3tKn/bDstXsyAqa3x882ZO4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:09:44 2025 by rpki-client