$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: BsceUWwLSZ8Qg9ZPQMADsKzwDh/jUX02a1e2mR3UVKs= Subject key identifier: E3:8A:4F:F4:FA:81:B9:69:7D:66:BE:20:93:BD:1C:4A:D5:A8:B3:E4 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 03D5 Signing time: Sun 19 Oct 2025 02:35:37 +0000 Manifest this update: Sun 19 Oct 2025 02:35:37 +0000 Manifest next update: Sun 26 Oct 2025 02:35:37 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: pD83gs+Nw+YQrAI3zBZRfOhISPnkOIQscxceKJYcYsU=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Oct 19 02:35:37 2025 GMT Not After : Oct 26 02:35:37 2025 GMT Subject: CN=68f44e79-1783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:46:c9:85:79:3d:63:c1:8a:0e:53:63:83: d1:04:58:15:de:1a:76:ea:f1:9b:c5:3d:f1:e3:6d: 20:d5:ad:53:92:2a:28:db:e5:bd:9c:0f:d2:9e:b8: c6:b9:be:ba:d0:7b:a0:2f:2b:b2:f9:91:e7:77:cf: 32:2a:e5:e7:3a:ac:f6:15:fb:d7:9a:60:c9:4f:af: 9a:a5:76:cf:42:12:35:da:55:23:47:33:d6:7f:96: fa:84:4c:52:dd:9a:04:1a:04:28:68:05:a6:ed:72: 01:74:24:89:2a:42:17:47:7c:ae:fe:c3:64:ad:1b: 49:ff:2d:f4:c1:2a:f9:fc:b3:e3:e2:a8:77:50:58: 74:d5:6b:e8:e5:4c:97:4c:41:9e:40:b6:d4:3a:fa: 65:6a:0a:dd:6d:6d:de:6e:e7:ea:92:d1:db:c4:77: 55:1f:e6:40:79:af:2b:d9:fa:21:b2:63:84:35:db: ec:7c:f1:f1:d7:59:8d:a1:e6:b2:0e:5b:d7:20:44: 2f:22:4b:c8:de:26:e9:17:c3:c3:4e:a2:b2:a3:a4: f7:d1:94:05:da:68:47:58:81:fa:af:b8:5b:9b:f8: 1d:ae:1f:c2:c7:5a:3c:25:b9:90:80:9d:09:e2:df: d5:ec:61:ca:a8:f1:24:ca:0f:f7:fa:48:16:72:37: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8A:4F:F4:FA:81:B9:69:7D:66:BE:20:93:BD:1C:4A:D5:A8:B3:E4 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:63:ec:e1:a1:ad:a2:3d:0a:d8:a5:62:23:c8:92:32:24:94: 21:ae:3d:ba:0c:bb:da:1e:63:ea:20:a4:8e:f2:ce:73:ea:bd: 3e:39:87:59:06:74:8c:88:70:3f:59:6a:38:73:1f:26:20:76: e2:d4:30:c4:7f:eb:0a:39:1e:14:43:70:f0:1c:49:f9:94:fa: 05:8b:d2:aa:c0:d3:b8:cc:0a:f9:2b:ab:bd:40:b9:d3:b7:49: ee:73:16:97:f4:24:0d:e8:e2:91:75:41:e2:07:02:9c:a2:b5: fb:97:75:30:9e:aa:63:82:c2:ca:a1:89:40:c2:9e:f7:0b:0c: 25:94:99:6e:8f:aa:7d:82:37:5b:c4:db:3d:1a:28:47:72:69: 5c:5d:be:25:65:38:7e:78:f5:f0:e8:36:6e:a0:db:9a:8e:0b: 00:db:20:51:d4:f6:91:57:69:3f:aa:33:83:5c:45:93:46:36: cb:b1:49:40:ec:20:15:83:a7:08:60:e5:ec:41:07:7d:e8:0c: fe:3a:d6:b6:c9:87:9d:5a:5c:8e:c2:dc:8a:1c:0e:3d:11:8e: 93:7a:1c:4a:ff:b7:33:b6:15:f8:a8:e4:d6:4e:8f:4b:25:6a: 88:b0:24:d6:04:0a:da:32:8a:86:c9:49:b2:44:68:9f:8e:ef: d3:67:e5:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUxMDE5MDIzNTM3WhcNMjUxMDI2MDIzNTM3WjAYMRYwFAYD VQQDEw02OGY0NGU3OS0xNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL5GyYV5PWPBig5TY4PRBFgV3hp26vGbxT3x420g1a1Tkioo2+W9nA/SnrjG ub660HugLyuy+ZHnd88yKuXnOqz2FfvXmmDJT6+apXbPQhI12lUjRzPWf5b6hExS 3ZoEGgQoaAWm7XIBdCSJKkIXR3yu/sNkrRtJ/y30wSr5/LPj4qh3UFh01Wvo5UyX TEGeQLbUOvplagrdbW3ebufqktHbxHdVH+ZAea8r2fohsmOENdvsfPHx11mNoeay DlvXIEQvIkvI3ibpF8PDTqKyo6T30ZQF2mhHWIH6r7hbm/gdrh/Cx1o8JbmQgJ0J 4t/V7GHKqPEkyg/3+kgWcjcAVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOKT/T6 gblpfWa+IJO9HErVqLPkMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNY+zhoa2iPQrYpWIjyJIyJJQhrj26DLvaHmPqIKSO8s5z6r0+OYdZ BnSMiHA/WWo4cx8mIHbi1DDEf+sKOR4UQ3DwHEn5lPoFi9KqwNO4zAr5K6u9QLnT t0nucxaX9CQN6OKRdUHiBwKcorX7l3UwnqpjgsLKoYlAwp73CwwllJluj6p9gjdb xNs9GihHcmlcXb4lZTh+ePXw6DZuoNuajgsA2yBR1PaRV2k/qjODXEWTRjbLsUlA 7CAVg6cIYOXsQQd96Az+Ota2yYedWlyOwtyKHA49EY6TehxK/7czthX4qOTWTo9L JWqIsCTWBAraMoqGyUmyRGifju/TZ+We -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:42 2025 by rpki-client