$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: zQVSDfTVrsGlZlHCcr4hgyLQRvQgbmOAGWcqh9jEyQM= Subject key identifier: 89:91:9B:78:4B:65:86:83:8B:E3:F7:B4:01:61:10:66:70:0B:A3:F7 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2B34 Signing time: Tue 04 Nov 2025 15:35:42 +0000 Manifest this update: Tue 04 Nov 2025 15:35:41 +0000 Manifest next update: Tue 11 Nov 2025 15:35:41 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: MunOa52m7XMsiFzLV3QrnUqjxs40ep+x+SvThVj+kRc=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: JLW0Prm9Fl8iTEviHWr3LwTg8esGoIHQVhl3vbDV8g4=) 3: BB799DA8844011F09054B049C4F9AE02.roa (hash: W+leA70SicgPxg1HjMlJr7Zrh6NlHpRsyqndp8PDjQA=) 4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: i7ok5KOsj6nhLRt3px2zv2fWTxSsfow5HHXSl/NaJkA=) 5: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: g7V5MfQocCOi5DNnPKV2LsDx3/nhzxmFo0S20ShJreI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11137 (0x2b81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Nov 4 15:35:41 2025 GMT Not After : Nov 11 15:35:41 2025 GMT Subject: CN=690a1d4d-d905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:9e:88:26:94:d1:17:1d:5f:38:12:7f:ba: b8:aa:7b:f3:9d:47:a6:9c:5a:d9:f1:61:13:ef:31: 91:fd:41:5b:3a:bf:b6:bb:1e:d2:6a:8a:e4:af:0e: 92:f5:6b:39:bb:d9:94:b2:18:69:81:51:64:b2:74: 3b:12:03:6f:c5:00:32:1e:88:eb:b7:6f:f9:a8:6f: 3d:56:b6:b8:33:39:0b:50:cf:3b:08:54:75:a8:4b: 41:16:cf:bc:0b:91:2e:2a:b2:de:b8:dc:ff:7c:9b: 2c:62:3a:6e:f7:6e:41:36:5f:18:30:58:d2:f9:c9: a5:72:3c:83:e4:f4:91:c9:e7:0e:b9:2a:ce:1c:72: f6:dd:68:41:1a:e6:90:30:12:cb:60:f2:d3:d0:67: dd:5a:98:db:a5:20:96:06:20:0b:f8:60:e7:6d:7b: 7d:3e:7b:38:07:e1:fd:41:2d:97:8c:07:bd:38:1b: b7:eb:96:e4:4c:d1:a8:ad:20:65:62:13:af:45:18: a3:ac:a7:d8:f7:90:55:2d:84:34:ca:2e:db:31:65: 37:95:0e:38:0b:09:2f:78:44:be:2f:82:43:f5:be: d1:08:f1:14:35:13:9d:45:47:61:21:7f:4a:2a:04: a1:4c:e6:b0:da:98:8a:c4:68:81:37:59:7d:b1:cc: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:91:9B:78:4B:65:86:83:8B:E3:F7:B4:01:61:10:66:70:0B:A3:F7 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:60:3c:99:fa:59:30:7a:0f:95:a7:b3:94:e6:9d:b0:d8:16: c0:33:77:0a:8c:10:7a:3e:98:11:b1:de:dd:b5:96:cd:2d:49: 08:0e:b8:0c:94:0c:6c:f2:49:00:e8:3d:4a:78:5a:f3:53:be: 23:dc:e9:0c:96:84:96:97:b9:b8:20:8c:e9:45:43:10:04:a1: fa:a0:dd:9c:6e:a4:7d:f1:25:6f:67:3b:86:9e:f5:6b:71:ac: c4:eb:1f:90:ca:0b:a6:25:75:71:b7:34:8a:bd:15:e2:96:4a: bb:1c:7f:0e:b5:88:6c:98:71:ba:04:96:7c:ea:24:7e:ed:4b: a2:e8:34:5a:3a:90:6c:a2:4a:a8:a1:22:b6:31:3c:d0:84:a1: 7d:bc:c9:84:a7:a1:78:e9:41:51:43:e1:c6:b1:fe:25:11:e0: b0:2b:fa:0f:06:ec:4a:bc:17:3b:7a:d6:d7:ac:a3:4b:d7:77: 3e:7a:fe:1b:42:d5:1d:94:8d:e1:e7:af:3f:80:19:e3:62:29: a4:0e:52:57:25:81:fa:3b:c1:d4:0e:1d:ca:18:50:59:c2:9d: 86:b2:af:19:8c:73:78:22:9a:0f:b8:83:81:bd:60:9a:90:55: 95:1d:95:f0:83:14:32:ad:e4:7c:2b:0b:3e:cb:54:96:30:8d: 17:2d:b1:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUxMTA0MTUzNTQxWhcNMjUxMTExMTUzNTQxWjAYMRYwFAYD VQQDEw02OTBhMWQ0ZC1kOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti+eiCaU0RcdXzgSf7q4qnvznUemnFrZ8WET7zGR/UFbOr+2ux7Saorkrw6S 9Ws5u9mUshhpgVFksnQ7EgNvxQAyHojrt2/5qG89Vra4MzkLUM87CFR1qEtBFs+8 C5EuKrLeuNz/fJssYjpu925BNl8YMFjS+cmlcjyD5PSRyecOuSrOHHL23WhBGuaQ MBLLYPLT0GfdWpjbpSCWBiAL+GDnbXt9Pns4B+H9QS2XjAe9OBu365bkTNGorSBl YhOvRRijrKfY95BVLYQ0yi7bMWU3lQ44CwkveES+L4JD9b7RCPEUNROdRUdhIX9K KgShTOaw2piKxGiBN1l9scyvNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImRm3hL ZYaDi+P3tAFhEGZwC6P3MB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6YDyZ+lkweg+Vp7OU5p2w2BbAM3cKjBB6PpgRsd7dtZbNLUkIDrgM lAxs8kkA6D1KeFrzU74j3OkMloSWl7m4IIzpRUMQBKH6oN2cbqR98SVvZzuGnvVr cazE6x+QygumJXVxtzSKvRXilkq7HH8OtYhsmHG6BJZ86iR+7Uui6DRaOpBsokqo oSK2MTzQhKF9vMmEp6F46UFRQ+HGsf4lEeCwK/oPBuxKvBc7etbXrKNL13c+ev4b QtUdlI3h568/gBnjYimkDlJXJYH6O8HUDh3KGFBZwp2Gsq8ZjHN4IpoPuIOBvWCa kFWVHZXwgxQyreR8Kws+y1SWMI0XLbHY -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:26 2025 by rpki-client