$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: VrJR1LvVTClnGxmY+YPqZ/HiRPqcCWsTzytb1BO8+oA= Subject key identifier: EC:0E:68:01:C9:23:CB:69:E2:3E:91:90:87:DA:E0:A0:AB:F8:E9:8D Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0CC4 Signing time: Sat 18 Oct 2025 18:53:10 +0000 Manifest this update: Sat 18 Oct 2025 18:53:09 +0000 Manifest next update: Sat 25 Oct 2025 18:53:09 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: vdKZWD9SLqh+CXw4j4SEFGoTGcJPDitZapYhgXn+OLE=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Oct 18 18:53:09 2025 GMT Not After : Oct 25 18:53:09 2025 GMT Subject: CN=68f3e216-c12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:04:f6:5e:f6:eb:4c:3d:1f:93:f5:38:44: 55:5a:5b:e0:a9:87:af:e2:b4:68:d5:09:da:88:12: 9d:ce:68:bc:a7:73:9f:e9:60:5b:1a:26:cf:9c:f2: 79:09:ea:db:3a:df:4b:9f:aa:0b:6a:96:e3:c7:f7: 37:a3:ec:31:d7:75:13:da:76:c4:12:d5:ac:c8:d1: c9:f7:5e:85:75:78:a2:84:79:f7:2a:e2:b6:75:79: 66:88:56:7d:54:86:5b:2b:90:36:b2:b7:90:fa:37: ca:f9:26:25:24:f2:48:ca:27:8a:82:ca:cc:04:54: 22:19:9e:1d:bc:4b:71:d1:e8:d5:16:29:39:ea:28: 19:43:bc:38:a6:f1:4b:9e:76:64:61:b7:66:b5:ce: c8:a8:b7:89:5e:6e:7f:ad:a0:e3:9f:67:a9:00:02: 37:37:c0:45:ea:31:3b:48:0f:f3:f6:fa:6f:ca:3f: b0:d8:87:35:94:a6:27:03:f3:d5:db:7a:d5:a4:8a: b9:03:97:ef:82:c9:62:07:aa:45:f1:44:fa:ec:a6: b7:f8:4b:fc:6c:10:25:41:b3:c3:54:fd:33:20:ee: 72:a4:8a:98:ce:fd:8a:66:19:aa:ff:10:d1:ab:1f: bd:54:70:f6:70:a8:4b:2f:53:d0:6f:d8:44:a6:4d: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0E:68:01:C9:23:CB:69:E2:3E:91:90:87:DA:E0:A0:AB:F8:E9:8D X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0c:35:a8:fb:19:14:a8:1b:c5:62:81:fa:1c:56:28:b0:3f: 9b:cd:6f:e4:5f:3c:61:20:4e:8d:e4:20:70:94:46:33:14:b8: 44:7e:aa:d8:c1:01:e2:c0:03:82:ad:89:b0:c4:7d:63:90:e6: 71:c7:4d:41:d0:0d:01:18:d2:e3:32:cc:61:c8:da:b0:13:82: 51:1c:a4:51:2b:a8:af:7a:de:6a:2d:cf:2a:fd:dd:60:a7:7d: b4:be:4f:d5:2a:47:ad:46:d7:b3:59:8f:37:8a:8f:6e:39:79: 73:52:82:46:d5:4a:b8:5a:6e:67:e8:69:44:64:87:e4:dd:f1: 3a:9e:54:18:c2:7e:72:2d:30:1a:8a:d9:43:44:fa:17:11:d2: b6:82:d6:d1:2a:db:17:8d:7c:dc:f1:b3:ef:eb:d5:d5:fb:bb: 2e:dd:8a:65:4b:26:a0:8c:fc:58:dc:02:30:23:af:05:a9:53: ce:e0:04:f3:ff:e4:f0:43:64:8a:43:05:04:f8:95:9f:9b:e8: 7b:10:d2:6d:3b:c9:c6:f7:83:dc:c4:00:dd:bc:1c:1a:62:25: a3:61:95:39:1e:1e:91:9b:7a:76:25:cb:9f:f9:98:88:f0:1b: 44:dc:05:e6:55:17:19:24:80:ba:ec:8a:fd:23:98:b6:fd:cc: 6e:2f:c0:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUxMDE4MTg1MzA5WhcNMjUxMDI1MTg1MzA5WjAYMRYwFAYD VQQDEw02OGYzZTIxNi1jMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JgE9l7260w9H5P1OERVWlvgqYev4rRo1QnaiBKdzmi8p3Of6WBbGibPnPJ5 CerbOt9Ln6oLapbjx/c3o+wx13UT2nbEEtWsyNHJ916FdXiihHn3KuK2dXlmiFZ9 VIZbK5A2sreQ+jfK+SYlJPJIyieKgsrMBFQiGZ4dvEtx0ejVFik56igZQ7w4pvFL nnZkYbdmtc7IqLeJXm5/raDjn2epAAI3N8BF6jE7SA/z9vpvyj+w2Ic1lKYnA/PV 23rVpIq5A5fvgsliB6pF8UT67Ka3+Ev8bBAlQbPDVP0zIO5ypIqYzv2KZhmq/xDR qx+9VHD2cKhLL1PQb9hEpk0ECwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwOaAHJ I8tp4j6RkIfa4KCr+OmNMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4DDWo+xkUqBvFYoH6HFYosD+bzW/kXzxhIE6N5CBwlEYzFLhEfqrY wQHiwAOCrYmwxH1jkOZxx01B0A0BGNLjMsxhyNqwE4JRHKRRK6ivet5qLc8q/d1g p320vk/VKketRtezWY83io9uOXlzUoJG1Uq4Wm5n6GlEZIfk3fE6nlQYwn5yLTAa itlDRPoXEdK2gtbRKtsXjXzc8bPv69XV+7su3YplSyagjPxY3AIwI68FqVPO4ATz /+TwQ2SKQwUE+JWfm+h7ENJtO8nG94PcxADdvBwaYiWjYZU5Hh6Rm3p2Jcuf+ZiI 8BtE3AXmVRcZJIC67Ir9I5i2/cxuL8CD -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:16 2025 by rpki-client