$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft File: asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json) Hash identifier: sCUTPxgginzVCf8/0XaPUJ61SkBNIQSh2e4qbMOPPeY= Subject key identifier: 6F:EE:FC:E8:FD:53:99:83:1A:27:37:00:77:B8:30:68:1B:94:51:FE Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 Certificate issuer: /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft Manifest number: 2A Signing time: Sun 19 Oct 2025 11:14:09 +0000 Manifest this update: Sun 19 Oct 2025 11:14:08 +0000 Manifest next update: Sun 26 Oct 2025 11:14:08 +0000 Files and hashes: 1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: hlMSCo1DAmZ7aNoA0BCwZNrdEKOr3Rx6MfHAtx2VfQw=) 2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: rZBaMYyqsgdUbj2Kc1VUQWs/4+3J/zfoVLydL5l2mZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Validity Not Before: Oct 19 11:14:08 2025 GMT Not After : Oct 26 11:14:08 2025 GMT Subject: CN=68f4c800-8e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:c0:88:83:7b:72:8e:df:e2:09:7d:99:31: 82:e0:ef:d5:8b:11:23:27:7f:5f:af:36:14:37:65: d5:00:83:c3:d4:6f:86:97:bc:24:e4:1a:8e:50:64: 6c:d2:df:0d:a2:40:17:48:36:9d:76:15:f1:54:93: 7d:89:e7:63:35:9f:d0:7c:31:b4:34:a0:6e:4c:e7: ed:41:b7:7e:88:22:63:c2:a7:df:62:a7:e9:02:90: a9:72:93:f3:92:40:65:c3:eb:07:71:89:f2:b8:06: e5:2e:56:ed:19:02:22:f7:f9:d2:b0:56:9b:42:86: c1:20:4d:c5:b4:91:70:1e:fd:c7:b6:ba:96:af:28: 04:f8:49:37:0e:87:a1:31:4c:f6:12:4f:5d:9b:eb: 95:1d:88:65:8a:b1:8d:12:20:d8:db:89:e4:de:b9: 80:dc:d6:b4:16:d1:e2:c3:95:7f:af:2d:e0:5c:5d: fb:73:e3:e4:c6:e0:c0:47:c2:f4:db:a1:e8:cd:9e: 8a:b4:44:13:21:fe:44:ba:28:3d:ed:1c:de:e6:1d: 3d:6d:76:d3:a7:41:28:e3:a5:e7:bb:b6:fd:c4:1b: 01:13:a5:07:5b:6d:48:45:39:6d:34:60:41:0e:9b: e3:f9:d5:ed:56:cd:ea:45:a6:49:3c:d2:e3:31:45: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:FC:E8:FD:53:99:83:1A:27:37:00:77:B8:30:68:1B:94:51:FE X509v3 Authority Key Identifier: keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:19:f9:14:10:d1:dc:20:62:cb:cb:55:24:e0:d4:b0:70:8a: 62:d2:7b:b1:9c:4f:08:c4:c2:52:a4:76:27:b1:45:d6:34:7e: 05:c0:e9:e9:6c:fe:e8:34:28:be:03:b4:ca:6c:db:ea:9c:11: 9c:c2:d8:3f:1d:d9:80:29:11:0a:a2:ab:df:23:26:5e:b1:2c: a2:21:b6:90:2e:c6:2d:87:ae:d7:26:fa:76:f4:43:68:dc:4e: 12:fe:22:d7:55:f9:df:40:7a:89:ac:c0:b8:a0:9f:ca:db:c5: d3:77:c8:ca:d2:89:63:30:6f:fe:58:61:02:29:fc:24:11:6b: d1:82:1d:28:ed:48:fa:bd:48:ea:33:f9:7d:f4:1a:74:17:c5: 49:cc:f8:34:73:fb:08:cf:58:54:c8:fd:fe:e9:be:d1:40:26: 94:43:66:f8:8b:df:35:6c:f8:17:58:14:85:42:56:9e:34:e4: f1:77:03:c2:39:66:6a:2b:60:26:52:8f:bf:79:09:dd:ba:11: 4e:d3:1f:b4:b8:f6:00:8d:70:5c:74:fe:eb:28:5c:b1:c3:80: b6:d7:d2:87:de:e3:35:2d:e8:53:9a:04:fb:69:88:6b:42:b7: 4d:82:b5:37:68:4f:ed:e6:b2:9c:58:9b:2e:e0:fb:80:02:f3: 37:d0:eb:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoNkFDQTExMjlCMjM4QzdBMUYxNzkxQjc1Q0Q0OUFENkJE NkFERkE3NzAeFw0yNTEwMTkxMTE0MDhaFw0yNTEwMjYxMTE0MDhaMBgxFjAUBgNV BAMTDTY4ZjRjODAwLThlOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFE8CIg3tyjt/iCX2ZMYLg79WLESMnf1+vNhQ3ZdUAg8PUb4aXvCTkGo5QZGzS 3w2iQBdINp12FfFUk32J52M1n9B8MbQ0oG5M5+1Bt36IImPCp99ip+kCkKlyk/OS QGXD6wdxifK4BuUuVu0ZAiL3+dKwVptChsEgTcW0kXAe/ce2upavKAT4STcOh6Ex TPYST12b65UdiGWKsY0SINjbieTeuYDc1rQW0eLDlX+vLeBcXftz4+TG4MBHwvTb oejNnoq0RBMh/kS6KD3tHN7mHT1tdtOnQSjjpee7tv3EGwETpQdbbUhFOW00YEEO m+P51e1WzepFpkk80uMxRbK5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb+786P1T mYMaJzcAd7gwaBuUUf4wHwYDVR0jBBgwFoAUasoRKbI4x6HxeRt1zUmta9at+ncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2LzkxM0NBNkU4NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZIeGVSdDF6VW10YTlhdC1u Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXNvUktiSTR4Nkh4ZVJ0MXpVbXRhOWF0LW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2LzkxM0NBNkU4NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZI eGVSdDF6VW10YTlhdC1uYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEZ+RQQ0dwgYsvLVSTg1LBwimLSe7GcTwjEwlKkdiexRdY0fgXA6els /ug0KL4DtMps2+qcEZzC2D8d2YApEQqiq98jJl6xLKIhtpAuxi2Hrtcm+nb0Q2jc ThL+ItdV+d9AeomswLign8rbxdN3yMrSiWMwb/5YYQIp/CQRa9GCHSjtSPq9SOoz +X30GnQXxUnM+DRz+wjPWFTI/f7pvtFAJpRDZviL3zVs+BdYFIVCVp405PF3A8I5 ZmorYCZSj795Cd26EU7TH7S49gCNcFx0/usoXLHDgLbX0ofe4zUt6FOaBPtpiGtC t02CtTdoT+3mspxYmy7g+4AC8zfQ60o= -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:45 2025 by rpki-client