$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json) Hash identifier: HiiOr+G7h3NEWX52doBlgT3++zMrMNhX65moUCnCmhU= Subject key identifier: 33:E7:D8:06:5B:29:D6:3A:95:80:BF:55:F0:C5:7E:9A:84:0C:40:4A Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft Manifest number: 0224 Signing time: Sun 19 Oct 2025 04:56:00 +0000 Manifest this update: Sun 19 Oct 2025 04:56:00 +0000 Manifest next update: Sun 26 Oct 2025 04:56:00 +0000 Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: hsl7NylPZv99DOak4fwfOd+75435uskt0Krn50wc9SM=) 2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: dWDbCVpbD2Fv8B28JP0RFzPPUhHwh3HRs+s/QVcOin8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Validity Not Before: Oct 19 04:56:00 2025 GMT Not After : Oct 26 04:56:00 2025 GMT Subject: CN=68f46f60-45be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:a6:d3:ea:e1:3b:f7:0f:57:f2:a5:41:5f: 8a:a9:7e:6c:62:b3:78:95:89:88:6c:a9:a2:c5:11: 7f:29:89:30:a2:d6:63:45:cd:bf:16:ce:1f:0a:9d: 80:c4:2f:02:48:04:4d:9c:58:a6:da:84:44:d8:03: 52:59:99:7e:c5:2a:96:34:b1:b2:5d:4a:b2:98:c5: ea:76:8d:f0:14:d7:c1:15:cc:96:c7:84:7f:ba:3c: 46:00:d9:b7:5d:84:3a:7d:8e:7a:01:06:d6:94:62: a6:12:c9:b5:40:bc:c6:18:c0:e0:6c:cf:20:a8:98: 6a:ae:50:c9:4f:e9:bb:e7:46:2c:c3:a2:cf:72:1a: 7d:0c:f9:fc:f1:bf:52:90:8d:7e:5d:2f:e0:3f:b2: c0:11:90:8a:2d:ba:c6:3e:a5:84:65:77:1e:c1:f4: d6:25:5e:86:58:66:3f:b9:07:ab:47:d7:4a:10:5a: 69:77:bf:78:3d:d0:e8:f1:5f:ad:2b:41:f4:36:09: 10:be:c9:58:25:49:11:96:b2:be:1f:72:71:a4:2a: dc:bd:df:74:e4:de:d1:1f:23:34:79:6b:13:23:12: c8:2d:d8:08:cd:10:f8:f7:31:d0:e1:11:66:f2:e4: ef:00:de:e5:29:81:f4:e8:df:98:ee:fa:e5:3e:52: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E7:D8:06:5B:29:D6:3A:95:80:BF:55:F0:C5:7E:9A:84:0C:40:4A X509v3 Authority Key Identifier: keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d2:c6:5c:1e:19:b9:af:8d:83:ef:5e:3c:76:f4:84:5b:f7: 02:9a:28:bb:77:67:be:fb:81:93:61:22:72:14:40:c3:80:a9: 10:a7:33:59:fc:bb:a2:29:db:47:c4:1d:66:a9:19:d2:04:3a: 96:c3:e5:86:40:9b:ae:86:8d:5c:14:2e:fa:34:6c:f5:18:87: d2:bd:d6:15:11:2d:17:ae:68:01:65:a3:66:28:96:28:fe:d7: 96:df:bc:45:2f:d3:0e:cb:87:c7:38:96:b0:c7:04:ff:08:4d: 4d:39:e8:ef:f4:a6:83:db:10:c9:2a:4d:91:de:e3:e4:28:be: 7c:2a:bf:a8:b8:99:10:35:fe:1d:4f:07:a0:10:11:b5:b9:80: 08:dc:0b:83:32:9c:fb:08:25:34:31:d0:4d:25:7f:83:86:87: ee:c5:08:5c:d1:ad:3c:c0:1a:3f:55:0e:ba:9f:e1:06:99:de: 7c:60:f0:c1:10:ec:ec:d0:aa:41:57:ac:7c:92:ed:0c:e0:e0: 4f:01:29:88:c0:31:d3:8d:5f:d3:8a:31:d5:9b:29:49:24:b5: ac:6e:1c:21:75:e6:3d:95:f7:c3:99:24:ad:a2:51:8f:2a:e2: d5:fc:13:f8:78:a9:c7:37:89:66:7c:54:43:03:c1:cc:ef:c2: dc:b1:3d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3RjgxMTAvBgNVBAUTKDlGNjRGRTUwOTkyNTM3RkIwQjQwRTUyRjlDRkFDMzEw Q0EyNzE5MTgwHhcNMjUxMDE5MDQ1NjAwWhcNMjUxMDI2MDQ1NjAwWjAYMRYwFAYD VQQDEw02OGY0NmY2MC00NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cmm0+rhO/cPV/KlQV+KqX5sYrN4lYmIbKmixRF/KYkwotZjRc2/Fs4fCp2A xC8CSARNnFim2oRE2ANSWZl+xSqWNLGyXUqymMXqdo3wFNfBFcyWx4R/ujxGANm3 XYQ6fY56AQbWlGKmEsm1QLzGGMDgbM8gqJhqrlDJT+m750Ysw6LPchp9DPn88b9S kI1+XS/gP7LAEZCKLbrGPqWEZXcewfTWJV6GWGY/uQerR9dKEFppd794PdDo8V+t K0H0NgkQvslYJUkRlrK+H3JxpCrcvd905N7RHyM0eWsTIxLILdgIzRD49zHQ4RFm 8uTvAN7lKYH06N+Y7vrlPlKhfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPn2AZb KdY6lYC/VfDFfpqEDEBKMB8GA1UdIwQYMBaAFJ9k/lCZJTf7C0DlL5z6wxDKJxkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdGOC8zNDUwOTQwMEI5 NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5fc0xRT1V2blByREVNb25H UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yVC1VSmtsTl9zTFFPVXZuUHJERU1vbkdSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTdGOC8zNDUwOTQwMEI5NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5f c0xRT1V2blByREVNb25HUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ0sZcHhm5r42D7148dvSEW/cCmii7d2e++4GTYSJyFEDDgKkQpzNZ /LuiKdtHxB1mqRnSBDqWw+WGQJuuho1cFC76NGz1GIfSvdYVES0XrmgBZaNmKJYo /teW37xFL9MOy4fHOJawxwT/CE1NOejv9KaD2xDJKk2R3uPkKL58Kr+ouJkQNf4d TwegEBG1uYAI3AuDMpz7CCU0MdBNJX+DhofuxQhc0a08wBo/VQ66n+EGmd58YPDB EOzs0KpBV6x8ku0M4OBPASmIwDHTjV/TijHVmylJJLWsbhwhdeY9lffDmSStolGP KuLV/BP4eKnHN4lmfFRDA8HM78LcsT23 -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:23 2025 by rpki-client