$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: MEbSLd3nlVeP8SIbnKsqlu7rnDDqMp5nxYkllUXgnb0= Subject key identifier: 94:4C:26:CC:22:BD:FE:69:3E:64:68:41:85:BE:36:04:9F:B8:DE:0B Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 0275 Signing time: Wed 05 Nov 2025 01:47:47 +0000 Manifest this update: Wed 05 Nov 2025 01:47:46 +0000 Manifest next update: Wed 12 Nov 2025 01:47:46 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: n7ieoWhFE7Aq3ng0dnwNCRNSy94pwIEpoMdczhWMHhw=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: ENwpRdEuucpLR199wMX1ovh0yufktlvsonosnrFa6n4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: hpkK6ksOTaD7mDbT56x2zJ1eza3vKxeFROPXP1u/0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Nov 5 01:47:46 2025 GMT Not After : Nov 12 01:47:46 2025 GMT Subject: CN=690aacc3-0ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:7a:ba:26:1f:7e:e1:7d:50:8b:89:2e:91: ee:c0:4b:bb:91:88:3f:aa:13:1a:10:7e:28:66:b9: 8f:93:ca:82:ab:02:60:7a:6d:a6:86:52:6c:af:2e: 03:27:82:ff:9a:fe:f3:0f:2a:40:c8:ba:69:ad:aa: 1e:05:cd:25:77:1f:c9:dc:99:15:4c:6c:d9:dc:82: 35:81:eb:c0:b8:59:ee:95:94:66:45:b3:a1:34:95: 5a:31:3a:b2:a0:27:89:98:fb:25:76:c9:b0:de:26: 7a:5c:5b:f3:87:44:ad:a6:1e:a1:c7:19:60:b9:36: 5f:00:6d:20:ce:73:80:9d:ad:6e:9b:10:2a:20:65: 2d:db:9f:ce:7f:21:ba:41:5f:6e:ce:fd:64:a1:61: 7e:98:24:85:0d:88:4d:88:d6:2b:4e:e7:5e:62:09: 1c:77:65:9c:ab:c3:b7:a7:52:84:e6:64:b7:cf:cb: ea:5a:7d:74:8b:0b:8f:a7:bd:dc:47:e7:c9:68:6d: 0e:3d:1a:b7:16:ae:f7:54:ff:d3:67:d1:3b:97:f3: b4:ff:2f:2c:b6:1f:ef:41:72:65:2b:63:6f:bb:80: e7:75:6d:13:00:a5:fa:7d:53:88:77:1a:62:80:89: bd:67:b6:aa:85:69:0a:f9:f3:e3:a7:b6:5e:ae:f2: 98:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4C:26:CC:22:BD:FE:69:3E:64:68:41:85:BE:36:04:9F:B8:DE:0B X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:22:db:c4:2f:85:8c:4a:f7:cc:87:60:52:83:7e:8b:30:ce: db:1c:80:1f:02:d8:42:c7:51:c3:7d:64:16:38:54:de:f7:48: 91:f2:74:13:73:db:0d:47:9c:b0:3d:cc:6b:19:99:ac:02:d7: 5e:ce:39:c2:a1:3f:25:49:d2:cb:b0:32:f2:fc:0a:e6:cc:dc: 3b:c7:35:b0:59:63:f5:a2:34:d3:ba:c9:eb:1e:99:5b:ef:60: 35:fb:f7:e4:09:10:0c:45:8f:8d:80:58:5a:8b:44:63:b4:67: 40:19:19:dd:f4:78:95:cb:3c:0d:63:a6:42:72:84:35:cb:40: ed:46:58:ad:e9:ce:0c:6f:ec:bb:7f:6b:b9:31:ba:f3:8f:d5: 8a:8a:d5:42:7b:1b:07:58:b5:1a:76:d7:90:61:e1:32:5f:ca: 3e:53:cd:ef:12:d7:1a:0e:90:51:06:97:9b:c3:7d:75:f8:4a: 83:57:c6:ca:01:53:38:92:59:79:25:59:58:4c:ef:7e:d0:43: 43:2e:af:4e:e6:0c:3d:ae:ea:27:2b:c2:20:b0:0f:5d:3b:78: 35:7b:a6:f0:b5:8a:8d:17:38:a3:07:b2:42:77:44:f8:8e:d0: 2d:7a:58:49:20:a9:dd:14:79:06:8c:10:bd:a9:94:23:08:af: e1:13:ed:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUxMTA1MDE0NzQ2WhcNMjUxMTEyMDE0NzQ2WjAYMRYwFAYD VQQDEw02OTBhYWNjMy0wYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCB6uiYffuF9UIuJLpHuwEu7kYg/qhMaEH4oZrmPk8qCqwJgem2mhlJsry4D J4L/mv7zDypAyLppraoeBc0ldx/J3JkVTGzZ3II1gevAuFnulZRmRbOhNJVaMTqy oCeJmPsldsmw3iZ6XFvzh0Stph6hxxlguTZfAG0gznOAna1umxAqIGUt25/OfyG6 QV9uzv1koWF+mCSFDYhNiNYrTudeYgkcd2Wcq8O3p1KE5mS3z8vqWn10iwuPp73c R+fJaG0OPRq3Fq73VP/TZ9E7l/O0/y8sth/vQXJlK2Nvu4DndW0TAKX6fVOIdxpi gIm9Z7aqhWkK+fPjp7ZervKY0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRMJswi vf5pPmRoQYW+NgSfuN4LMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfItvEL4WMSvfMh2BSg36LMM7bHIAfAthCx1HDfWQWOFTe90iR8nQT c9sNR5ywPcxrGZmsAtdezjnCoT8lSdLLsDLy/ArmzNw7xzWwWWP1ojTTusnrHplb 72A1+/fkCRAMRY+NgFhai0RjtGdAGRnd9HiVyzwNY6ZCcoQ1y0DtRlit6c4Mb+y7 f2u5Mbrzj9WKitVCexsHWLUadteQYeEyX8o+U83vEtcaDpBRBpebw311+EqDV8bK AVM4kll5JVlYTO9+0ENDLq9O5gw9ruonK8IgsA9dO3g1e6bwtYqNFzijB7JCd0T4 jtAtelhJIKndFHkGjBC9qZQjCK/hE+1e -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:52 2025 by rpki-client