$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: 7C/qAMfbT+2p1xIeruuBcb/qMKnj16CJ6nVaLXbl71M= Subject key identifier: 96:CD:EE:2A:41:C5:6D:63:79:8C:DC:97:68:B1:62:7B:E8:B5:40:D1 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 026D Signing time: Sun 19 Oct 2025 03:57:18 +0000 Manifest this update: Sun 19 Oct 2025 03:57:18 +0000 Manifest next update: Sun 26 Oct 2025 03:57:18 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: OzSFn1w+mcE9NnvEPUduoeKX3WLxiGrqgmZAX2enZ2g=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: ENwpRdEuucpLR199wMX1ovh0yufktlvsonosnrFa6n4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: hpkK6ksOTaD7mDbT56x2zJ1eza3vKxeFROPXP1u/0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Oct 19 03:57:18 2025 GMT Not After : Oct 26 03:57:18 2025 GMT Subject: CN=68f4619e-3eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:81:c0:c4:a6:a0:e2:c9:cd:15:39:b2:9a: 68:0c:e1:2f:66:65:64:c1:22:cf:35:d8:4d:39:d4: 3b:48:17:61:2b:49:5a:fc:5d:1b:e3:58:7d:04:8b: 23:65:49:62:44:d6:fb:0d:77:83:fb:51:d2:c7:12: 14:8a:3f:63:30:5b:27:3b:76:fb:19:bf:63:da:00: a1:cc:9c:5f:13:fc:26:45:8d:94:08:3f:e9:3e:82: de:27:f6:bd:e1:6f:59:ae:53:e4:55:a9:e2:b3:bf: 9d:fe:0e:08:34:49:c1:c1:9b:b9:58:b3:7d:b5:55: 19:f5:e9:e1:83:42:38:48:e5:35:d8:94:88:84:7b: 89:7e:c2:3a:28:4a:66:f5:a9:c8:ea:ce:74:2c:a8: fe:96:d4:f4:2c:96:c7:27:12:36:b3:01:7a:ac:a4: 97:20:63:4b:cd:c7:d2:2b:be:56:af:b5:6d:50:42: 9b:3b:42:2e:92:ab:e6:46:ac:71:2a:20:9b:26:6d: 01:2c:88:d7:27:ea:62:9e:53:e7:5d:26:9b:8d:ba: 3a:46:c8:64:53:23:9b:1e:bb:ea:3f:2a:fb:96:0a: 54:23:85:a9:16:e5:77:ea:07:18:2f:6b:24:81:93: c5:9c:5b:12:7e:fa:aa:51:88:bb:e2:7c:5e:0a:6d: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CD:EE:2A:41:C5:6D:63:79:8C:DC:97:68:B1:62:7B:E8:B5:40:D1 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:cf:e5:c7:49:9f:d7:32:5a:cb:de:56:e5:a7:6c:09:90:a7: c2:92:a1:23:8d:92:d4:51:53:74:95:7b:21:fe:ea:38:07:15: 5b:37:44:bd:83:d7:3a:86:93:9d:b0:51:67:f3:c8:89:e4:bf: b2:da:3d:8f:90:28:54:cc:e8:af:23:13:58:20:25:99:c0:64: ff:9b:30:28:0f:ed:c3:fd:b1:04:c0:7a:47:38:14:92:a1:1f: f1:b6:39:c6:10:b5:38:dc:2f:18:db:79:a4:8f:52:f6:df:b4: d1:8f:07:79:dc:18:85:15:ab:cc:97:f9:64:a1:1b:69:70:0a: 6e:2f:2d:f8:e3:ad:e5:3a:a6:06:df:15:71:59:b7:92:bd:d9: 04:b0:86:98:b8:e1:63:22:4e:9c:c8:a8:f3:ad:3f:19:f9:db: da:89:99:da:68:9f:73:0e:6f:70:10:93:0c:df:5f:78:e6:23: 6b:a7:53:3c:30:1c:b1:9f:7b:70:09:1c:70:7f:1c:b9:cc:30: 8c:be:16:b4:7d:f7:0a:37:9e:87:9c:1f:06:f7:13:62:0c:d0: bf:d3:7a:9c:d6:89:c0:4a:b4:40:f3:99:96:e7:3f:ec:d1:0e: 23:d6:7b:50:ad:80:12:25:ec:af:b7:cf:7a:b8:1c:ea:15:90: 67:e2:83:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUxMDE5MDM1NzE4WhcNMjUxMDI2MDM1NzE4WjAYMRYwFAYD VQQDEw02OGY0NjE5ZS0zZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqGBwMSmoOLJzRU5sppoDOEvZmVkwSLPNdhNOdQ7SBdhK0la/F0b41h9BIsj ZUliRNb7DXeD+1HSxxIUij9jMFsnO3b7Gb9j2gChzJxfE/wmRY2UCD/pPoLeJ/a9 4W9ZrlPkVanis7+d/g4INEnBwZu5WLN9tVUZ9enhg0I4SOU12JSIhHuJfsI6KEpm 9anI6s50LKj+ltT0LJbHJxI2swF6rKSXIGNLzcfSK75Wr7VtUEKbO0IukqvmRqxx KiCbJm0BLIjXJ+pinlPnXSabjbo6RshkUyObHrvqPyr7lgpUI4WpFuV36gcYL2sk gZPFnFsSfvqqUYi74nxeCm1ZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbN7ipB xW1jeYzcl2ixYnvotUDRMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwz+XHSZ/XMlrL3lblp2wJkKfCkqEjjZLUUVN0lXsh/uo4BxVbN0S9 g9c6hpOdsFFn88iJ5L+y2j2PkChUzOivIxNYICWZwGT/mzAoD+3D/bEEwHpHOBSS oR/xtjnGELU43C8Y23mkj1L237TRjwd53BiFFavMl/lkoRtpcApuLy34463lOqYG 3xVxWbeSvdkEsIaYuOFjIk6cyKjzrT8Z+dvaiZnaaJ9zDm9wEJMM31945iNrp1M8 MByxn3twCRxwfxy5zDCMvha0ffcKN56HnB8G9xNiDNC/03qc1onASrRA85mW5z/s 0Q4j1ntQrYASJeyvt896uBzqFZBn4oMa -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:23 2025 by rpki-client