$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: ChRzH9F8SUHkxNpwWGOsUaE1IQyXD1VTwSZJ09pcPWw= Subject key identifier: E2:0F:EF:9E:C5:6F:C4:5D:DF:0E:87:31:A4:07:83:A3:DE:E7:0F:E8 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 0132 Signing time: Sun 19 Oct 2025 07:44:33 +0000 Manifest this update: Sun 19 Oct 2025 07:44:32 +0000 Manifest next update: Sun 26 Oct 2025 07:44:32 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: UCUYfuPpUOsS6qj3uIYU7/VwrqlwSmeH2hKDDcfxjz8=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Oct 19 07:44:32 2025 GMT Not After : Oct 26 07:44:32 2025 GMT Subject: CN=68f496e1-4b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:39:82:e1:a3:bb:d9:5c:29:95:35:bb:5f: a0:64:6c:54:be:97:75:7e:16:c4:1c:ff:3d:58:a6: 2c:cc:e9:87:5e:43:8d:99:35:71:a0:c9:46:d0:d1: 0e:c3:ed:cf:9f:73:20:77:ab:be:0a:68:b9:3b:0b: 94:3e:1e:90:13:62:d6:8f:f1:56:ba:6d:87:31:19: 06:b8:f0:55:db:1a:ef:a3:b7:bf:ce:24:6b:36:04: 69:b2:3a:b7:5b:58:a4:a2:71:1e:ce:66:f8:a8:78: 59:5b:01:ca:e0:78:a0:2c:6c:37:e3:aa:31:4b:0f: 00:d1:d7:35:08:b5:b4:b1:b4:3a:ad:c9:b6:ab:5a: 84:32:5d:44:2d:6e:52:d4:e9:9d:aa:fd:94:9b:ff: f6:2e:95:71:bf:6b:8a:21:98:79:3a:c5:93:cc:53: 3a:97:fd:73:23:3e:66:40:eb:3c:ad:14:c4:ee:d5: 20:d8:10:fa:15:db:25:92:49:04:ad:f6:09:77:98: e6:17:77:a1:c7:49:15:de:c9:1b:e6:03:0a:74:33: 53:29:9f:a6:c6:71:bf:e3:c2:96:0e:02:15:24:50: f8:e5:c7:04:00:0d:bb:56:ad:f1:d4:1d:e3:77:19: af:3b:17:42:10:a3:a6:e1:84:22:04:34:52:2b:1d: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0F:EF:9E:C5:6F:C4:5D:DF:0E:87:31:A4:07:83:A3:DE:E7:0F:E8 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:da:32:d0:86:69:a9:96:f8:09:e4:1d:8c:82:3e:e4:2f:0c: 53:c8:51:54:be:c2:a3:11:18:30:f1:61:c7:02:d9:34:31:33: 3e:a7:52:f3:bb:14:ec:16:e2:48:8f:4d:ac:9f:14:be:14:62: ec:3f:2f:37:aa:ce:ea:c9:6f:5a:eb:df:ee:15:93:68:af:03: 6a:e5:e3:4c:de:59:5a:f8:6d:01:44:97:a1:42:e3:65:0c:65: 65:98:0b:45:cf:df:e0:5a:ef:cc:a6:2a:42:1a:8f:a3:6f:7f: 0e:ff:f4:e4:1d:9a:e9:5c:db:b7:f3:11:7c:98:a0:f6:4d:f7: 3b:4e:b2:c6:75:bc:28:2a:97:a1:1e:94:f5:bb:e0:fb:c5:d0: 32:8f:c1:ea:d3:c9:57:0c:2f:42:83:3c:62:7a:50:8a:7e:da: be:7d:3d:49:79:a2:e9:d2:34:5a:37:44:99:5f:78:b3:a0:60: 6c:ef:12:4d:5c:42:60:d5:7d:72:fc:8f:4f:ee:b5:e9:02:8e: 73:53:2e:30:ce:7f:6b:4f:dd:81:ad:7d:e7:77:47:04:be:ca: fa:05:bf:04:2c:ad:dd:53:0a:2c:d4:37:f4:11:7a:43:a2:c4: 02:e9:c0:b7:0e:b3:80:eb:d2:c6:4e:a8:6c:95:0f:76:8b:e8: b9:65:29:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUxMDE5MDc0NDMyWhcNMjUxMDI2MDc0NDMyWjAYMRYwFAYD VQQDEw02OGY0OTZlMS00Yjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFk5guGju9lcKZU1u1+gZGxUvpd1fhbEHP89WKYszOmHXkONmTVxoMlG0NEO w+3Pn3Mgd6u+Cmi5OwuUPh6QE2LWj/FWum2HMRkGuPBV2xrvo7e/ziRrNgRpsjq3 W1ikonEezmb4qHhZWwHK4HigLGw346oxSw8A0dc1CLW0sbQ6rcm2q1qEMl1ELW5S 1Omdqv2Um//2LpVxv2uKIZh5OsWTzFM6l/1zIz5mQOs8rRTE7tUg2BD6FdslkkkE rfYJd5jmF3ehx0kV3skb5gMKdDNTKZ+mxnG/48KWDgIVJFD45ccEAA27Vq3x1B3j dxmvOxdCEKOm4YQiBDRSKx0YewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIP757F b8Rd3w6HMaQHg6Pe5w/oMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu2jLQhmmplvgJ5B2Mgj7kLwxTyFFUvsKjERgw8WHHAtk0MTM+p1Lz uxTsFuJIj02snxS+FGLsPy83qs7qyW9a69/uFZNorwNq5eNM3lla+G0BRJehQuNl DGVlmAtFz9/gWu/MpipCGo+jb38O//TkHZrpXNu38xF8mKD2Tfc7TrLGdbwoKpeh HpT1u+D7xdAyj8Hq08lXDC9CgzxielCKftq+fT1JeaLp0jRaN0SZX3izoGBs7xJN XEJg1X1y/I9P7rXpAo5zUy4wzn9rT92BrX3nd0cEvsr6Bb8ELK3dUwos1Df0EXpD osQC6cC3DrOA69LGTqhslQ92i+i5ZSmt -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:10 2025 by rpki-client