$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: PQ7pcWmzrdr1bhjG/oFspXzKFB8a4Uc38HQC13O5daQ= Subject key identifier: 87:77:C4:DB:E6:CE:3E:14:29:A3:89:B2:43:DC:F0:30:F7:90:51:D4 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 018B Signing time: Wed 05 Nov 2025 03:40:45 +0000 Manifest this update: Wed 05 Nov 2025 03:40:45 +0000 Manifest next update: Wed 12 Nov 2025 03:40:45 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: eS1MkFzlAbRFPahcznt0HPoDCrL0na1xrUDcc1ijgpw=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Nov 5 03:40:45 2025 GMT Not After : Nov 12 03:40:45 2025 GMT Subject: CN=690ac73d-7255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:98:e8:07:5b:03:03:e0:42:47:91:c0:95: 5a:4e:ad:b2:8b:f9:b1:cc:42:19:6e:44:7c:1d:01: 4e:f7:c0:5d:1e:02:f3:74:b9:05:d4:66:02:73:ca: 5b:74:d6:10:d5:c6:ab:46:d4:dc:86:c8:fc:cd:62: de:2d:da:83:a2:6d:dc:a3:60:93:b6:66:c3:93:f5: a6:b0:ec:bf:b3:0a:0a:99:d9:a1:0c:13:e9:1b:05: 91:31:19:30:7f:af:31:c1:f3:f9:74:68:8c:02:3e: ff:28:70:f8:18:cb:24:c8:5f:8f:89:91:e4:d4:ed: d8:ae:7a:9b:e3:68:e7:61:20:c4:60:3c:a4:01:5b: cb:6b:69:6e:20:c2:f0:f4:a2:49:42:86:c1:f1:b7: 0b:50:80:15:ff:2f:ce:6c:4f:df:b3:20:e3:e3:7b: ca:3c:96:fe:d3:47:8c:1b:eb:95:1a:07:ce:06:3a: d6:db:7e:4f:d6:54:06:84:01:83:ed:34:2f:57:84: 4c:cf:40:f0:86:d9:d4:4a:46:00:b8:cf:15:dc:23: 89:09:eb:2d:68:9b:83:a1:66:50:e0:5b:8b:37:0a: 4e:f3:92:7c:f6:b5:58:7f:58:23:46:6f:5a:90:b7: 21:b1:7b:08:49:5e:4b:6d:ae:41:12:59:ab:98:96: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:77:C4:DB:E6:CE:3E:14:29:A3:89:B2:43:DC:F0:30:F7:90:51:D4 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2a:b5:6d:e0:14:3f:e2:a3:f0:70:d7:96:8b:39:0d:be:07: b4:f6:ff:79:ac:5f:95:b2:19:20:03:df:8e:e0:79:0d:1e:a7: 71:27:6e:67:4f:18:f4:ef:b6:37:1d:19:d8:4a:02:4d:51:6f: 64:d5:f1:40:2b:9d:35:49:36:e1:53:dd:44:15:f8:5f:eb:a2: 08:d0:e9:8f:2d:f6:fe:66:6a:bb:3d:94:62:20:b1:f1:d6:8e: 0f:0c:5e:8b:e6:f6:ea:7c:68:33:bd:8d:c4:a4:aa:57:23:57: 1b:cb:47:05:55:5e:01:13:7e:d4:20:e1:f5:85:ed:75:87:53: 0a:ac:7b:d5:6d:7d:c7:f0:8e:f2:78:01:07:0b:e7:76:ff:2a: 88:e5:93:0c:63:9b:ff:57:00:7f:7b:f9:6e:d4:e1:3d:26:d3: a8:c6:74:12:3b:78:64:28:18:a7:2b:92:c6:ec:b5:5c:51:9c: 4f:2b:88:8d:dc:b3:11:f3:8f:a8:9c:b4:7e:35:93:79:e3:ae: 29:25:b5:80:2c:1e:fe:8d:40:b6:b9:50:81:34:4f:3f:6c:67: 6e:dc:51:de:fe:2a:a6:aa:a1:3d:66:83:1e:02:df:f8:42:72: 6d:46:56:e5:c2:77:24:9e:ab:de:a9:7e:de:30:f9:d5:d0:c2: df:dd:4c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUxMTA1MDM0MDQ1WhcNMjUxMTEyMDM0MDQ1WjAYMRYwFAYD VQQDEw02OTBhYzczZC03MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp42Y6AdbAwPgQkeRwJVaTq2yi/mxzEIZbkR8HQFO98BdHgLzdLkF1GYCc8pb dNYQ1carRtTchsj8zWLeLdqDom3co2CTtmbDk/WmsOy/swoKmdmhDBPpGwWRMRkw f68xwfP5dGiMAj7/KHD4GMskyF+PiZHk1O3Yrnqb42jnYSDEYDykAVvLa2luIMLw 9KJJQobB8bcLUIAV/y/ObE/fsyDj43vKPJb+00eMG+uVGgfOBjrW235P1lQGhAGD 7TQvV4RMz0DwhtnUSkYAuM8V3COJCestaJuDoWZQ4FuLNwpO85J89rVYf1gjRm9a kLchsXsISV5Lba5BElmrmJZBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId3xNvm zj4UKaOJskPc8DD3kFHUMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBKrVt4BQ/4qPwcNeWizkNvge09v95rF+VshkgA9+O4HkNHqdxJ25n Txj077Y3HRnYSgJNUW9k1fFAK501STbhU91EFfhf66II0OmPLfb+Zmq7PZRiILHx 1o4PDF6L5vbqfGgzvY3EpKpXI1cby0cFVV4BE37UIOH1he11h1MKrHvVbX3H8I7y eAEHC+d2/yqI5ZMMY5v/VwB/e/lu1OE9JtOoxnQSO3hkKBinK5LG7LVcUZxPK4iN 3LMR84+onLR+NZN5464pJbWALB7+jUC2uVCBNE8/bGdu3FHe/iqmqqE9ZoMeAt/4 QnJtRlblwncknqveqX7eMPnV0MLf3UxO -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:32 2025 by rpki-client