$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: 5C00gi5Xoa5+wjKkWJ4ZA1llal9gqV5sxdQU/iY/KaQ= Subject key identifier: 35:9A:F9:9A:D0:8E:47:60:FE:BC:6E:11:D0:18:5C:1C:F5:34:56:6F Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 01EB Signing time: Wed 05 Nov 2025 02:42:41 +0000 Manifest this update: Wed 05 Nov 2025 02:42:40 +0000 Manifest next update: Wed 12 Nov 2025 02:42:40 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: QWOaclZH8QeW2k5McyISwxLm3tr8cGw/NExXNaLHzNI=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Nov 5 02:42:40 2025 GMT Not After : Nov 12 02:42:40 2025 GMT Subject: CN=690ab9a0-3692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:15:ab:c2:96:aa:20:17:5d:e4:81:b9:17: 94:87:53:75:65:8c:ad:27:81:37:12:66:61:75:a2: b3:31:91:a9:c0:76:0b:06:f0:ca:fe:73:b0:2c:33: 60:3b:9a:30:63:73:8a:46:a5:9e:ec:d8:e0:15:58: df:64:33:95:d0:ae:33:56:1c:0c:14:de:66:7a:d2: 3c:7e:13:7f:0e:c9:d3:e2:52:6a:5e:ce:fd:e3:c6: f0:69:47:c7:22:df:d0:6f:fd:50:31:0c:f2:28:a9: aa:54:ec:ac:1e:32:2f:5a:e6:fc:aa:a6:cd:93:b7: 3c:0a:20:44:5c:f0:e2:eb:5c:c1:fd:3e:92:6a:fd: ea:04:03:87:0a:66:dd:ca:43:58:40:1f:cd:d2:20: 04:01:38:7b:53:d7:6a:20:e3:3a:43:8b:88:5b:32: 34:8e:ee:4d:a8:52:0c:7c:ad:ad:d4:99:5e:fa:58: 53:cf:0e:4d:a0:22:fb:ac:2a:c1:f2:d0:12:70:9d: b9:06:eb:32:36:51:04:82:68:33:1f:3a:aa:89:c9: 13:02:20:c0:eb:78:d1:c0:ce:2b:9a:aa:c7:20:5e: ce:17:e7:73:c8:f3:5b:99:c2:c3:2e:17:5e:77:ad: 05:d5:5f:e2:b9:2b:29:f5:86:76:cd:15:5e:24:85: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9A:F9:9A:D0:8E:47:60:FE:BC:6E:11:D0:18:5C:1C:F5:34:56:6F X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:37:12:a0:ea:51:e0:3a:31:6c:a8:a5:9f:2c:ab:22:de:f5: fe:18:3e:a8:12:61:81:83:af:87:fa:0e:8c:c8:09:b5:c4:d3: 19:b2:04:2b:bb:6d:9c:42:f0:f9:da:f1:58:40:2c:ef:53:c7: 38:cd:70:c3:31:bc:31:a5:83:0a:3e:69:0f:cf:74:4c:d8:4d: 89:b2:27:4d:d4:f0:9e:59:31:46:aa:96:24:0b:4a:92:c4:3b: 70:d4:8b:85:78:1e:6d:76:ab:56:8f:72:50:5d:70:bc:63:21: 83:fd:00:bd:a0:33:9c:28:86:38:99:04:03:ac:4d:56:9c:65: 5c:30:b4:81:85:af:69:0e:4a:fd:be:ff:ae:52:1a:52:7e:ef: 01:08:af:00:16:9b:dc:b8:ed:5e:70:08:34:2f:a7:8b:cb:6e: 9a:19:09:90:c8:76:65:41:e1:39:59:fc:f3:4a:1e:b3:54:4d: e3:3a:e7:db:78:ec:5e:b0:d1:02:a4:7a:e9:d4:54:da:b0:44: 03:a2:e2:00:a5:96:6d:82:b2:9e:9b:d4:6f:96:e0:3d:cd:28: 15:28:2f:67:c8:6e:af:d0:59:50:00:b7:9c:38:67:ad:d7:04: 50:2e:24:87:63:6b:ea:20:16:39:37:36:b8:88:0c:62:e8:7f: 96:80:26:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjUxMTA1MDI0MjQwWhcNMjUxMTEyMDI0MjQwWjAYMRYwFAYD VQQDEw02OTBhYjlhMC0zNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWEVq8KWqiAXXeSBuReUh1N1ZYytJ4E3EmZhdaKzMZGpwHYLBvDK/nOwLDNg O5owY3OKRqWe7NjgFVjfZDOV0K4zVhwMFN5metI8fhN/DsnT4lJqXs7948bwaUfH It/Qb/1QMQzyKKmqVOysHjIvWub8qqbNk7c8CiBEXPDi61zB/T6Sav3qBAOHCmbd ykNYQB/N0iAEATh7U9dqIOM6Q4uIWzI0ju5NqFIMfK2t1Jle+lhTzw5NoCL7rCrB 8tAScJ25BusyNlEEgmgzHzqqickTAiDA63jRwM4rmqrHIF7OF+dzyPNbmcLDLhde d60F1V/iuSsp9YZ2zRVeJIUeOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWa+ZrQ jkdg/rxuEdAYXBz1NFZvMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANNxKg6lHgOjFsqKWfLKsi3vX+GD6oEmGBg6+H+g6MyAm1xNMZsgQr u22cQvD52vFYQCzvU8c4zXDDMbwxpYMKPmkPz3RM2E2JsidN1PCeWTFGqpYkC0qS xDtw1IuFeB5tdqtWj3JQXXC8YyGD/QC9oDOcKIY4mQQDrE1WnGVcMLSBha9pDkr9 vv+uUhpSfu8BCK8AFpvcuO1ecAg0L6eLy26aGQmQyHZlQeE5WfzzSh6zVE3jOufb eOxesNECpHrp1FTasEQDouIApZZtgrKem9RvluA9zSgVKC9nyG6v0FlQALecOGet 1wRQLiSHY2vqIBY5Nza4iAxi6H+WgCav -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:52 2025 by rpki-client