$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: 9hhacdigjZoTIVw42X5jIN4EEsAScKTNVZypPfqEwjU= Subject key identifier: C0:7B:0D:68:04:9D:D2:40:4D:80:64:9F:C2:B1:DE:C8:A1:F2:96:94 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 0129 Signing time: Sun 19 Oct 2025 07:25:58 +0000 Manifest this update: Sun 19 Oct 2025 07:25:57 +0000 Manifest next update: Sun 26 Oct 2025 07:25:57 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: uW28fFZCr9a3wwMo5brQ7XdU5I1v9wuEAMdHlfRa0fY=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Oct 19 07:25:57 2025 GMT Not After : Oct 26 07:25:57 2025 GMT Subject: CN=68f49286-cdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:98:b0:f9:c0:7b:38:c5:af:61:af:44:9c:ce: d3:51:05:84:4f:98:df:e1:a2:cb:e4:97:33:78:2f: 51:6c:4c:80:b9:32:27:0c:1f:28:9c:e3:03:0b:03: e6:8f:e3:40:aa:c5:b4:84:ce:a0:e7:66:36:c1:ce: 40:18:58:4a:a5:27:d3:84:da:b0:0d:8b:fd:79:4f: bc:d6:57:f1:c6:52:72:65:0a:b7:30:64:db:cd:ce: cf:ee:09:87:90:d8:bf:22:cd:e6:62:68:d5:5a:0f: ec:a7:12:e5:3e:93:8f:fa:69:76:85:3a:21:e9:d2: 7a:01:36:29:15:eb:57:aa:6d:18:36:55:4a:d3:1e: a1:86:25:47:73:17:57:ff:8a:db:b8:47:4d:55:ab: 72:08:6f:0e:46:6d:2f:3d:5e:0f:1b:cd:4c:fc:97: 82:43:78:11:02:fe:39:a9:eb:fa:3d:31:5a:ec:d1: 06:0b:f8:1f:9e:65:bf:df:32:e9:36:fd:5a:20:8b: d7:4b:26:21:d2:21:19:17:76:45:15:17:d1:d4:b5: b3:59:0b:76:45:80:82:69:c8:d7:c8:b3:9a:7b:9b: f4:89:b6:3e:77:e4:7f:37:ee:7b:9d:63:2f:e4:a8: e1:50:19:c6:11:cc:18:b2:82:e7:fd:9b:f7:31:47: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7B:0D:68:04:9D:D2:40:4D:80:64:9F:C2:B1:DE:C8:A1:F2:96:94 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:73:86:e7:a2:d5:73:6f:73:d5:0a:db:f6:96:32:24:62:70: ad:ec:7d:0e:54:4d:78:08:12:84:fe:e4:63:70:4e:4c:21:f2: a6:03:eb:d6:74:35:85:52:d8:c5:c3:71:ff:91:13:ff:7b:79: b0:10:ee:53:73:d8:70:e6:06:e3:f1:c0:ee:53:9c:0b:26:cc: 4c:0b:de:8a:ea:6d:ca:4b:33:9d:8c:4e:48:d0:5d:e2:da:87: d0:ad:db:80:ea:14:08:30:cf:c0:e9:c1:80:82:35:f4:72:7c: 2d:d8:81:38:70:5d:3a:90:b7:a6:81:1e:9a:0e:8e:2c:45:a8: 1c:31:50:f4:87:db:c1:4c:b0:95:27:41:1d:91:77:40:26:a9: d0:68:e1:14:71:2b:c1:c6:43:c9:e0:0d:01:b5:e1:fc:c0:86: 26:4c:ff:ab:8e:71:7b:18:b2:4c:e7:0e:99:6e:96:69:8c:7e: 62:7d:7c:76:89:c9:71:cb:ac:42:c0:13:24:20:cf:b8:b0:41: 02:f5:1d:71:57:6e:b0:48:af:33:c6:04:62:28:57:df:5b:df: 69:d1:50:b2:cb:e0:fa:5e:fa:35:cf:74:a3:49:d0:58:04:83: 07:9b:33:d3:2c:49:b7:0b:09:a0:07:df:fe:f5:df:75:ef:db: bf:59:24:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUxMDE5MDcyNTU3WhcNMjUxMDI2MDcyNTU3WjAYMRYwFAYD VQQDEw02OGY0OTI4Ni1jZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Ziw+cB7OMWvYa9EnM7TUQWET5jf4aLL5JczeC9RbEyAuTInDB8onOMDCwPm j+NAqsW0hM6g52Y2wc5AGFhKpSfThNqwDYv9eU+81lfxxlJyZQq3MGTbzc7P7gmH kNi/Is3mYmjVWg/spxLlPpOP+ml2hToh6dJ6ATYpFetXqm0YNlVK0x6hhiVHcxdX /4rbuEdNVatyCG8ORm0vPV4PG81M/JeCQ3gRAv45qev6PTFa7NEGC/gfnmW/3zLp Nv1aIIvXSyYh0iEZF3ZFFRfR1LWzWQt2RYCCacjXyLOae5v0ibY+d+R/N+57nWMv 5KjhUBnGEcwYsoLn/Zv3MUd5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB7DWgE ndJATYBkn8Kx3sih8paUMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzc4bnotVzb3PVCtv2ljIkYnCt7H0OVE14CBKE/uRjcE5MIfKmA+vW dDWFUtjFw3H/kRP/e3mwEO5Tc9hw5gbj8cDuU5wLJsxMC96K6m3KSzOdjE5I0F3i 2ofQrduA6hQIMM/A6cGAgjX0cnwt2IE4cF06kLemgR6aDo4sRagcMVD0h9vBTLCV J0EdkXdAJqnQaOEUcSvBxkPJ4A0BteH8wIYmTP+rjnF7GLJM5w6ZbpZpjH5ifXx2 iclxy6xCwBMkIM+4sEEC9R1xV26wSK8zxgRiKFffW99p0VCyy+D6Xvo1z3SjSdBY BIMHmzPTLEm3CwmgB9/+9d9179u/WSTA -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:31 2025 by rpki-client