$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: iZ6ZAiRma7zSVi3oOt0uiagrM1Z7IwO7xfvLq68UL90= Subject key identifier: 27:42:D0:81:B3:C0:09:AA:06:F7:E9:24:1E:27:45:7B:94:B1:B6:65 Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 01D5 Signing time: Sun 19 Oct 2025 05:15:17 +0000 Manifest this update: Sun 19 Oct 2025 05:15:17 +0000 Manifest next update: Sun 26 Oct 2025 05:15:17 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: cF6HebmFqMyjofhIi3cCRWt3hxL74imbe7agyyaHyE8=) 2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: z9aB/eMQsAs4dx5UPgq7iMP6FyNI1Namac/Cs27VAaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: Oct 19 05:15:17 2025 GMT Not After : Oct 26 05:15:17 2025 GMT Subject: CN=68f473e5-8a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:68:2e:d1:93:26:92:16:f7:ad:c6:90:17: 15:7e:9e:73:fb:2a:3e:3d:c8:b9:81:8b:4d:b4:e1: c2:ae:61:4d:ee:93:73:2c:34:60:7a:aa:f1:15:3f: d9:f9:a0:6a:f7:5f:e7:59:cd:d9:3c:c4:29:d8:4a: 3c:b7:61:7b:b0:5d:89:7e:77:ae:a3:57:8a:fa:08: 4f:7e:36:3b:a5:98:3a:ca:c0:b7:7e:8f:02:7e:58: 27:d5:96:a0:eb:79:a7:81:6c:51:b0:28:82:69:5c: 85:27:d5:0c:b0:de:49:80:92:f5:e8:49:e3:57:73: 3a:82:92:22:79:6a:12:ee:93:80:5b:4e:77:e4:f7: 00:bb:41:98:1c:9a:dd:90:30:9b:00:af:e9:e3:b3: 05:7f:b8:2d:bc:a0:f7:e8:b0:44:21:8e:3e:dd:54: 65:98:3f:f5:25:02:4d:88:cb:0c:b4:d9:e7:ec:f6: 70:77:2a:92:68:37:8b:8b:ef:4e:e9:e6:86:54:b7: 32:b9:74:94:0a:ac:06:45:7c:18:1e:b7:ba:a4:8f: 77:bf:c3:ed:43:99:f2:19:ac:da:c6:79:3a:f3:08: 8d:66:1b:18:74:e4:b2:7a:f3:b0:49:00:96:ce:51: ed:57:58:25:88:6f:76:c9:aa:df:8d:8e:10:e2:e4: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:42:D0:81:B3:C0:09:AA:06:F7:E9:24:1E:27:45:7B:94:B1:B6:65 X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4a:59:37:fc:38:60:5f:10:91:69:56:22:83:72:f2:44:9a: e1:1b:99:24:86:fb:12:e3:be:bb:fe:7e:8c:89:b2:6d:0b:4e: 1a:a4:7f:2f:56:c5:02:4f:00:2f:7e:fd:12:66:e0:fd:b6:69: 01:71:f4:eb:0f:a8:9d:69:13:3a:bf:13:c7:14:21:10:bd:fb: 45:a1:6f:b6:ed:c0:36:6c:cc:f7:eb:ad:87:0b:90:d3:7a:09: 8d:7e:76:a9:62:44:b6:83:4b:9c:97:6d:6c:3b:20:64:fa:e6: 41:a5:d1:52:8f:5c:5e:83:29:b0:72:73:f6:1a:3a:24:84:e7: 3d:04:76:9c:7f:06:4c:cb:04:b0:8a:a2:06:6b:26:82:45:13: 5b:e0:b3:06:59:72:18:78:de:10:28:af:3f:00:6a:36:97:56: 48:3b:50:2f:a6:4a:89:50:53:b9:22:0a:e1:c8:96:66:d1:b4: a9:17:66:33:53:1b:5e:ae:d4:c3:2a:4d:2f:c9:d4:84:26:82: ee:4f:be:19:60:08:ad:30:0a:f1:87:c5:db:e0:12:8c:78:d8: df:ed:98:e8:1a:4e:49:22:ea:7c:d3:6b:5b:8e:c6:b9:df:a6: 8e:28:53:c9:90:53:1b:db:cb:7c:99:3f:54:9b:b1:dc:6b:23: 44:af:f9:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjUxMDE5MDUxNTE3WhcNMjUxMDI2MDUxNTE3WjAYMRYwFAYD VQQDEw02OGY0NzNlNS04YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+VoLtGTJpIW963GkBcVfp5z+yo+Pci5gYtNtOHCrmFN7pNzLDRgeqrxFT/Z +aBq91/nWc3ZPMQp2Eo8t2F7sF2Jfneuo1eK+ghPfjY7pZg6ysC3fo8Cflgn1Zag 63mngWxRsCiCaVyFJ9UMsN5JgJL16EnjV3M6gpIieWoS7pOAW0535PcAu0GYHJrd kDCbAK/p47MFf7gtvKD36LBEIY4+3VRlmD/1JQJNiMsMtNnn7PZwdyqSaDeLi+9O 6eaGVLcyuXSUCqwGRXwYHre6pI93v8PtQ5nyGazaxnk68wiNZhsYdOSyevOwSQCW zlHtV1gliG92yarfjY4Q4uSPRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdC0IGz wAmqBvfpJB4nRXuUsbZlMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhSlk3/DhgXxCRaVYig3LyRJrhG5kkhvsS4767/n6MibJtC04apH8v VsUCTwAvfv0SZuD9tmkBcfTrD6idaRM6vxPHFCEQvftFoW+27cA2bMz3662HC5DT egmNfnapYkS2g0ucl21sOyBk+uZBpdFSj1xegymwcnP2GjokhOc9BHacfwZMywSw iqIGayaCRRNb4LMGWXIYeN4QKK8/AGo2l1ZIO1AvpkqJUFO5IgrhyJZm0bSpF2Yz UxtertTDKk0vydSEJoLuT74ZYAitMArxh8Xb4BKMeNjf7ZjoGk5JIup802tbjsa5 36aOKFPJkFMb28t8mT9Um7HcayNEr/kp -----END CERTIFICATE-----Generated at Sun Oct 19 23:24:05 2025 by rpki-client