$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json) Hash identifier: oaMzymtZFSVXmA+susPDODw80+8z2v7BVsMrCLRFbRw= Subject key identifier: 7E:51:DB:1B:05:B7:D5:A0:B6:C4:F3:ED:90:DE:F3:1C:59:EF:48:22 Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft Manifest number: 2E Signing time: Sun 19 Oct 2025 11:14:03 +0000 Manifest this update: Sun 19 Oct 2025 11:14:03 +0000 Manifest next update: Sun 26 Oct 2025 11:14:03 +0000 Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: y2ZaC5WvTQ6PzpirA587fU4xgimSFSy8z/8BljgfLIQ=) 2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: ZwA3RLDFZuJuq+OnGHO5YHGm+YL4BWQ+qyec67LETqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Validity Not Before: Oct 19 11:14:03 2025 GMT Not After : Oct 26 11:14:03 2025 GMT Subject: CN=68f4c7fb-c393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:56:47:53:a9:97:0a:5e:c6:e8:c0:96:d4: 64:9a:a6:ff:1c:7b:8d:55:9a:f4:f6:84:29:cc:b0: 44:56:38:9d:9c:a2:c0:cd:67:0c:7b:4d:16:fa:92: 94:dc:19:0c:f5:67:94:6c:3b:38:f9:2f:e5:68:cb: 25:9b:88:11:59:0c:d4:1a:74:d6:1b:f6:81:6a:b9: f5:37:25:e3:34:f7:4c:93:ab:27:cb:58:af:ee:8d: 85:d5:ab:7a:94:c8:c6:79:a0:bb:22:8a:c8:3b:6e: 97:7b:5b:29:57:e5:4e:9d:7e:6f:bf:5d:f8:e9:62: 28:23:3e:1c:ab:21:d1:ee:83:21:3d:2d:51:9e:e1: 41:75:6d:a7:cf:eb:7d:0f:7f:2e:68:7d:f0:92:f8: a2:70:08:86:51:5c:d6:38:13:f8:48:e8:9d:3a:fc: e1:af:ad:25:8c:cb:76:87:07:3b:e5:25:ef:56:47: 4e:fd:fc:fb:9f:0c:6c:4b:c6:d2:09:cd:8a:83:56: 40:ec:21:b6:4b:3f:de:fa:59:b2:f7:f1:16:a5:0e: be:b8:84:9c:e3:f0:b1:73:d4:fb:20:cb:01:31:93: 82:ca:66:bb:2a:43:3c:04:bf:91:6d:01:39:82:4a: 03:60:83:87:5d:ca:b0:cb:fe:a2:ab:ae:a3:4e:b4: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:51:DB:1B:05:B7:D5:A0:B6:C4:F3:ED:90:DE:F3:1C:59:EF:48:22 X509v3 Authority Key Identifier: keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0d:4d:7a:7c:74:ba:9e:26:06:8e:22:59:d9:2c:a8:3e:4f: 5f:91:f0:a7:0c:3a:89:eb:8d:5a:97:c1:e4:77:93:04:0d:74: 59:5a:91:ec:36:29:04:3c:2f:09:79:d2:f0:1d:a9:96:64:46: d9:14:c9:88:a3:62:bd:5b:0d:bf:4d:5e:1a:10:72:0e:70:b3: e2:dd:d5:93:20:8a:87:43:ec:66:0c:60:1e:28:da:1f:e3:8d: 9c:8c:49:a7:b9:80:f4:ed:fb:26:fa:de:cd:98:7e:72:71:97: 65:ff:ea:00:5a:bb:4d:c5:6e:1d:8c:fa:fe:85:6f:02:e0:72: 83:fc:26:02:9b:d6:3e:0e:7a:23:ad:99:b5:3b:f0:ec:0a:2c: 21:ff:f8:43:f3:5a:59:92:a5:11:85:c8:b5:88:71:e0:b0:a0: 3e:dd:64:e3:ac:33:05:ab:82:12:67:c3:79:d2:26:c0:05:41: 89:91:84:0a:c2:37:11:89:64:85:22:d2:65:39:32:08:05:91: 54:81:ed:86:b9:b1:47:d5:33:b7:e5:59:d0:b4:d8:eb:78:c9: e6:d6:b3:ab:73:da:5a:c7:e5:bc:7b:6c:a9:6e:27:0c:81:a5: 97:39:c1:e0:34:61:2a:ae:49:22:c1:1d:80:4e:e2:e1:72:0f: 07:a1:80:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoMzdBNjVGREI0MEU4QzY1OUIxN0U1MDAwRkE4OUE2NTY4 MDk3NkQ1QjAeFw0yNTEwMTkxMTE0MDNaFw0yNTEwMjYxMTE0MDNaMBgxFjAUBgNV BAMTDTY4ZjRjN2ZiLWMzOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSLVZHU6mXCl7G6MCW1GSapv8ce41VmvT2hCnMsERWOJ2cosDNZwx7TRb6kpTc GQz1Z5RsOzj5L+VoyyWbiBFZDNQadNYb9oFqufU3JeM090yTqyfLWK/ujYXVq3qU yMZ5oLsiisg7bpd7WylX5U6dfm+/XfjpYigjPhyrIdHugyE9LVGe4UF1bafP630P fy5offCS+KJwCIZRXNY4E/hI6J06/OGvrSWMy3aHBzvlJe9WR079/PufDGxLxtIJ zYqDVkDsIbZLP976WbL38RalDr64hJzj8LFz1PsgywExk4LKZrsqQzwEv5FtATmC SgNgg4ddyrDL/qKrrqNOtAsNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUflHbGwW3 1aC2xPPtkN7zHFnvSCIwHwYDVR0jBBgwFoAUN6Zf20DoxlmxflAA+ommVoCXbVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2Lzg4MTJGQkU0NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxteGZsQUEtb21tVm9DWGJW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjZaZjIwRG94bG14ZmxBQS1vbW1Wb0NYYlZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2Lzg4MTJGQkU0NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxt eGZsQUEtb21tVm9DWGJWcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGoNTXp8dLqeJgaOIlnZLKg+T1+R8KcMOonrjVqXweR3kwQNdFlakew2 KQQ8Lwl50vAdqZZkRtkUyYijYr1bDb9NXhoQcg5ws+Ld1ZMgiodD7GYMYB4o2h/j jZyMSae5gPTt+yb63s2YfnJxl2X/6gBau03Fbh2M+v6FbwLgcoP8JgKb1j4OeiOt mbU78OwKLCH/+EPzWlmSpRGFyLWIceCwoD7dZOOsMwWrghJnw3nSJsAFQYmRhArC NxGJZIUi0mU5MggFkVSB7Ya5sUfVM7flWdC02Ot4yebWs6tz2lrH5bx7bKluJwyB pZc5weA0YSquSSLBHYBO4uFyDwehgKE= -----END CERTIFICATE-----Generated at Tue Oct 21 12:46:02 2025 by rpki-client