$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: zfPbbtuJLydY4PyAw+SMNheB47100u8EOehbQQIaZbI= Subject key identifier: BE:69:D3:F5:94:09:E8:8C:D9:18:6E:60:AD:EF:6C:8A:15:BD:55:84 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 01E3 Signing time: Sun 19 Oct 2025 05:04:29 +0000 Manifest this update: Sun 19 Oct 2025 05:04:29 +0000 Manifest next update: Sun 26 Oct 2025 05:04:29 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: weyKUAD8wr+CJ/zBejTB/xuzVETSwXiCSZJ5EwYqVYk=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Oct 19 05:04:29 2025 GMT Not After : Oct 26 05:04:29 2025 GMT Subject: CN=68f4715d-9a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:6a:e6:51:d5:6b:08:60:b5:ae:22:3e:d9: 9a:13:88:b8:b6:c6:2a:71:44:4d:b7:0f:04:ad:9f: 74:e6:29:d9:a7:4b:60:5f:2f:c8:2b:57:b6:9d:dc: 53:1b:5f:9b:d6:a7:a8:46:6e:f6:1d:a1:13:75:45: fe:d2:d7:25:a1:62:82:cd:90:ec:61:ea:ef:f4:e0: 1d:ea:71:a4:82:f9:eb:e8:48:e7:3d:e1:8c:1a:85: b4:bb:44:f9:a5:15:ce:cf:6d:02:9a:1e:f8:e8:bd: 6a:9a:90:2c:ab:2b:a6:3f:0d:81:13:f3:52:19:b3: fc:d8:b8:2c:6c:16:af:42:f3:23:a8:a0:1a:b0:80: ad:ab:3e:88:4d:7e:cd:58:29:3a:ff:b0:6d:aa:7d: 03:44:7c:48:ec:3b:9f:5a:f8:81:3e:9c:01:d2:f8: 6f:1a:a0:cb:f1:8b:a4:1f:03:2e:01:5d:f9:30:a2: 86:bf:20:79:a1:50:ee:c1:d3:15:01:56:cf:ed:82: 00:55:fd:27:50:b5:fc:90:73:0d:7f:c7:5e:36:04: ff:8b:31:d7:66:54:9d:95:e6:1b:0d:4e:92:8e:b9: 62:a4:a9:0d:b6:b9:fd:21:00:9e:b1:c3:be:e7:4e: 9c:c1:74:d2:74:15:00:e7:85:8f:db:02:e9:b1:86: 89:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:D3:F5:94:09:E8:8C:D9:18:6E:60:AD:EF:6C:8A:15:BD:55:84 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:15:6e:f1:4b:a4:9f:47:50:6b:67:07:af:4f:4b:f1:1d:24: 5a:14:29:aa:b1:a4:e0:4f:f9:0c:d2:c8:3d:e2:1e:f4:8c:e1: 56:54:96:2d:eb:a0:2c:35:da:ad:13:7d:0f:66:e1:d7:ca:96: 77:f1:bf:97:46:5e:1c:5f:9f:8a:e0:6b:da:70:67:b7:de:05: a6:cf:fc:d3:a3:19:2b:78:7d:8f:e9:e0:aa:bc:8a:54:3e:ee: e8:d3:bf:ef:55:3d:3e:72:65:61:4f:da:5f:62:6a:01:35:14: ec:1f:2a:f1:58:04:31:8e:67:b7:1a:35:7f:47:8e:be:fd:f2: 68:4c:1f:2e:0b:ce:da:3d:ea:bc:98:28:13:1d:9e:01:aa:8d: 5b:8f:00:2e:35:d9:2e:09:93:e8:50:e3:fb:e6:a1:ec:12:2a: 86:42:03:6e:19:81:9a:d6:10:57:f2:cc:03:30:e9:91:55:50: ef:5f:fb:ce:eb:97:36:3c:18:47:af:95:bb:5e:56:8a:c4:cd: b5:2d:0b:0f:ec:4d:8f:58:32:b0:f3:02:83:74:d9:c4:27:05: 2a:8a:d3:cd:6b:b4:93:d0:94:6f:4e:cf:91:f6:37:f5:14:60: e8:fc:5b:62:74:e4:64:2a:54:17:c5:5d:c0:48:c6:b0:df:07: 97:19:c3:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjUxMDE5MDUwNDI5WhcNMjUxMDI2MDUwNDI5WjAYMRYwFAYD VQQDEw02OGY0NzE1ZC05YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0Nq5lHVawhgta4iPtmaE4i4tsYqcURNtw8ErZ905inZp0tgXy/IK1e2ndxT G1+b1qeoRm72HaETdUX+0tcloWKCzZDsYerv9OAd6nGkgvnr6EjnPeGMGoW0u0T5 pRXOz20Cmh746L1qmpAsqyumPw2BE/NSGbP82LgsbBavQvMjqKAasICtqz6ITX7N WCk6/7Btqn0DRHxI7DufWviBPpwB0vhvGqDL8YukHwMuAV35MKKGvyB5oVDuwdMV AVbP7YIAVf0nULX8kHMNf8deNgT/izHXZlSdleYbDU6SjrlipKkNtrn9IQCescO+ 506cwXTSdBUA54WP2wLpsYaJVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5p0/WU CeiM2RhuYK3vbIoVvVWEMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTFW7xS6SfR1BrZwevT0vxHSRaFCmqsaTgT/kM0sg94h70jOFWVJYt 66AsNdqtE30PZuHXypZ38b+XRl4cX5+K4GvacGe33gWmz/zToxkreH2P6eCqvIpU Pu7o07/vVT0+cmVhT9pfYmoBNRTsHyrxWAQxjme3GjV/R46+/fJoTB8uC87aPeq8 mCgTHZ4Bqo1bjwAuNdkuCZPoUOP75qHsEiqGQgNuGYGa1hBX8swDMOmRVVDvX/vO 65c2PBhHr5W7XlaKxM21LQsP7E2PWDKw8wKDdNnEJwUqitPNa7ST0JRvTs+R9jf1 FGDo/FtidORkKlQXxV3ASMaw3weXGcPW -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:18 2025 by rpki-client