$ rpki-client -vvf rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft File: n5SsB4YdiAvjQDGyhnkD51wyPEg.mft (raw, json) Hash identifier: RRnVjBzS3MR37XFJ4XYdFWLggOE2n8fNaxH+oZEIGew= Subject key identifier: 41:4D:12:41:FA:C6:B8:4B:16:E6:D7:46:13:BC:B8:27:E3:EF:15:40 Authority key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48 Certificate issuer: /CN=A9193A9E/serialNumber=9F94AC07861D880BE34031B2867903E75C323C48 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft Manifest number: 21 Signing time: Sun 19 Oct 2025 11:22:38 +0000 Manifest this update: Sun 19 Oct 2025 11:22:37 +0000 Manifest next update: Sun 26 Oct 2025 11:22:37 +0000 Files and hashes: 1: n5SsB4YdiAvjQDGyhnkD51wyPEg.crl (hash: 4gQlYzNBixdWDmFjpBPyKn2DjRetyPqB81XrqgormoU=) 2: F5E70A7083CD11F09D837187C4F9AE02.roa (hash: W7JUxDMH42jtJaJ07/erekB5mTVAnJ/Qka1pQNTUmm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48 Validity Not Before: Oct 19 11:22:37 2025 GMT Not After : Oct 26 11:22:37 2025 GMT Subject: CN=68f4c9fd-5fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:57:4b:49:1d:86:69:f1:99:53:be:57:86: 97:c5:2d:9e:d0:52:af:1f:d7:4b:98:27:d8:ad:2a: 64:39:8a:b1:05:b6:1a:b3:6e:14:e4:6b:a7:c4:f5: e7:03:ed:36:75:cb:a8:7d:eb:f3:ce:d0:c1:ee:dc: f0:bf:72:10:d7:a2:85:65:dd:8d:74:6b:a6:b5:cc: fa:3f:29:d5:9b:bd:9c:a7:ae:0c:d4:e3:da:03:50: fa:69:88:b8:2a:5f:e6:fb:33:11:2e:85:16:ae:74: eb:24:65:a6:17:0b:90:4e:a1:ae:86:55:dc:5f:7c: a3:21:63:51:26:db:21:a7:46:5e:61:54:87:9c:1f: ea:68:3e:c3:62:cf:32:af:f0:c3:50:03:11:31:bc: 35:d5:bd:70:79:4f:ae:f8:f7:b1:15:e9:d8:80:d0: 38:40:20:fa:6a:19:9c:24:9d:01:7b:a1:89:e8:73: 04:d5:26:9b:db:a4:6d:ca:9b:ac:30:92:69:db:66: c4:ce:e3:2e:f6:76:ec:70:b5:5f:83:32:08:56:29: 04:79:9d:2e:fe:80:88:ce:23:b3:36:88:23:af:60: fc:91:15:bb:14:7e:15:0b:0b:a6:9c:ce:37:67:7f: d4:d3:11:51:7d:74:92:bc:3d:df:c2:78:f7:34:bb: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4D:12:41:FA:C6:B8:4B:16:E6:D7:46:13:BC:B8:27:E3:EF:15:40 X509v3 Authority Key Identifier: keyid:9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e6:30:78:b7:e1:a5:b4:33:a3:82:ac:5f:c7:b9:4f:8e:23: 22:4f:e7:08:d6:0c:97:9d:e3:a6:9f:de:b2:90:8b:aa:0c:97: 54:f2:66:2d:eb:8b:86:c8:db:3e:56:07:dd:ce:15:bd:0e:18: 11:04:11:1a:a4:7b:7c:15:5f:b1:65:ab:b6:6a:8f:e2:87:3d: 0f:9e:7a:22:c0:ac:5a:38:3b:86:d3:71:71:28:29:5b:f6:48: 65:e6:8a:4d:02:32:bf:f4:6a:ea:a8:b3:d7:b3:c4:fe:80:61: be:3a:de:2a:17:23:85:35:b3:6b:23:40:7b:61:42:f8:3d:46: 82:49:94:23:1a:77:68:bd:0a:91:67:79:80:d8:a9:39:ca:ae: ba:8a:0d:9c:04:39:6b:22:6e:4a:1a:39:e1:9c:ff:3d:58:79: 16:5c:68:bd:e3:0c:65:20:05:78:00:75:b8:dc:b7:60:3e:e8: 42:a9:d4:94:c7:d2:01:af:f4:f6:98:97:ec:0f:8c:3f:04:8b: 55:1e:0e:d6:81:23:04:6d:f1:a3:27:fe:3e:0a:6a:e9:06:84: ef:b3:16:94:67:49:94:91:06:bd:b4:38:2d:73:2d:02:78:51: e4:8c:e2:c8:2e:6f:3e:6c:76:b6:b1:91:86:03:6a:f0:d1:c5: f1:29:24:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0E5RTExMC8GA1UEBRMoOUY5NEFDMDc4NjFEODgwQkUzNDAzMUIyODY3OTAzRTc1 QzMyM0M0ODAeFw0yNTEwMTkxMTIyMzdaFw0yNTEwMjYxMTIyMzdaMBgxFjAUBgNV BAMTDTY4ZjRjOWZkLTVmZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5EFdLSR2GafGZU75XhpfFLZ7QUq8f10uYJ9itKmQ5irEFthqzbhTka6fE9ecD 7TZ1y6h96/PO0MHu3PC/chDXooVl3Y10a6a1zPo/KdWbvZynrgzU49oDUPppiLgq X+b7MxEuhRaudOskZaYXC5BOoa6GVdxffKMhY1Em2yGnRl5hVIecH+poPsNizzKv 8MNQAxExvDXVvXB5T67497EV6diA0DhAIPpqGZwknQF7oYnocwTVJpvbpG3Km6ww kmnbZsTO4y72duxwtV+DMghWKQR5nS7+gIjOI7M2iCOvYPyRFbsUfhULC6aczjdn f9TTEVF9dJK8Pd/CePc0u3gPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQU0SQfrG uEsW5tdGE7y4J+PvFUAwHwYDVR0jBBgwFoAUn5SsB4YdiAvjQDGyhnkD51wyPEgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQTlFLzdCNkZGM0U0ODNC NzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2alFER3lobmtENTF3eVBF Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjVTc0I0WWRpQXZqUURHeWhua0Q1MXd5UEVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QTlFLzdCNkZGM0U0ODNCNzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2 alFER3lobmtENTF3eVBFZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPmMHi34aW0M6OCrF/HuU+OIyJP5wjWDJed46af3rKQi6oMl1TyZi3r i4bI2z5WB93OFb0OGBEEERqke3wVX7Flq7Zqj+KHPQ+eeiLArFo4O4bTcXEoKVv2 SGXmik0CMr/0auqos9ezxP6AYb463ioXI4U1s2sjQHthQvg9RoJJlCMad2i9CpFn eYDYqTnKrrqKDZwEOWsibkoaOeGc/z1YeRZcaL3jDGUgBXgAdbjct2A+6EKp1JTH 0gGv9PaYl+wPjD8Ei1UeDtaBIwRt8aMn/j4KaukGhO+zFpRnSZSRBr20OC1zLQJ4 UeSM4sgubz5sdraxkYYDavDRxfEpJHA= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:06 2025 by rpki-client