$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json) Hash identifier: sTmfYWPUcW1KE/GG2m5C3KjM/6MET/L+RYuMuJ5pVM4= Subject key identifier: E9:53:63:91:B2:48:D2:6B:DB:94:94:83:5C:6F:30:18:8C:02:3B:E5 Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 19C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft Manifest number: 19A4 Signing time: Mon 20 Oct 2025 16:42:08 +0000 Manifest this update: Mon 20 Oct 2025 16:42:08 +0000 Manifest next update: Mon 27 Oct 2025 16:42:08 +0000 Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: AA/O1HAC6iWlsycLpKEWA5NFulVMtZoD6Jp7u3FRsW8=) 2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: T2O0r+wuciWw//d0/KrKWMrTn116KGwZgOoRv2gqL2o=) 3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: 4lXZLQbvCWkzoUTRrsi9YqylEuiqjTlRtIjx8J3fHJA=) 4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: u6zpvxkYkfd9Sgr+7nOb3bbbb/5Wjva0COGy2cz/Rk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6593 (0x19c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: Oct 20 16:42:08 2025 GMT Not After : Oct 27 16:42:08 2025 GMT Subject: CN=68f66660-4c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:b1:dc:74:73:15:6a:55:30:66:ee:72:47: fe:d7:b3:95:c4:35:18:26:56:4b:44:69:d7:48:02: 9b:1f:a9:c6:34:fa:61:ff:ee:9e:d8:60:36:44:f7: 12:a8:a2:ab:cb:98:1b:e6:ab:7b:fd:63:99:68:88: 73:78:43:88:f2:28:3a:74:5b:1b:cb:22:d6:cd:66: c0:62:6b:0f:a2:e8:ff:dd:a3:08:16:68:e2:5d:85: c8:86:a6:48:47:4e:f8:73:84:0c:be:4f:8f:37:51: 0e:eb:b5:9b:66:0d:a2:b9:92:32:6b:be:7c:94:eb: eb:07:a2:db:1a:d0:24:d4:36:a4:3e:de:98:72:00: a8:a2:7b:fd:49:de:9c:3f:87:ab:e7:70:61:2b:d6: a2:25:9e:fc:d2:31:98:45:cc:85:bf:7e:2d:1a:09: 84:15:bf:65:40:38:ba:c5:ed:2d:85:c4:e3:41:a2: 3f:c8:20:fa:11:e3:0f:dc:20:7a:9e:e1:67:f5:ea: 29:80:76:3b:01:30:63:5d:14:7c:2a:0d:22:99:44: 9a:82:c4:38:cb:2a:aa:37:11:4c:ce:80:ff:9e:5a: a3:5d:07:88:d1:7c:63:f0:b7:17:94:a6:c4:eb:84: 4d:4e:8b:d6:da:72:dc:32:6c:51:67:65:e1:83:fd: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:53:63:91:B2:48:D2:6B:DB:94:94:83:5C:6F:30:18:8C:02:3B:E5 X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d7:fd:88:9c:6c:56:db:9e:fd:da:9b:2e:58:45:f2:50:da: 40:d6:20:fd:51:0b:03:aa:42:b1:91:5c:19:9c:bf:19:82:cd: c3:3f:4a:68:13:a4:d7:32:d1:dc:e3:0f:15:43:18:b0:e5:5c: f5:fa:e6:11:ee:16:89:ae:df:d2:cb:ba:7c:8b:50:21:09:10: 49:90:83:22:13:22:c9:b1:f5:af:63:79:0b:87:02:f6:c4:d8: 15:2d:84:05:15:00:dc:a4:cb:22:19:db:88:7c:fb:ca:5b:44: 0b:cc:5c:1b:0f:4b:5b:fb:8e:d0:f6:e6:02:f9:23:31:85:8d: 29:fd:03:0b:c2:d7:69:6f:ed:17:a5:cc:2b:72:ca:19:5b:3e: 7c:cb:bb:2a:6f:f4:82:d1:13:f8:7d:5e:0a:95:c2:1b:b5:ae: 94:6c:9b:d5:90:af:cd:e4:c2:0b:30:dd:95:f6:ed:7d:e8:ec: 5d:24:bc:06:26:a1:9d:50:94:8c:e5:38:44:c8:04:ed:00:58: bb:58:90:48:32:7b:0f:ae:43:b1:27:ed:9e:6f:e5:44:c0:df: 1e:ad:0d:84:bd:c3:44:44:20:00:46:54:2f:6a:2e:e7:8e:f3: 59:be:0a:84:fa:d3:8e:61:f0:d9:e6:01:ca:62:8d:82:77:3b: 86:d2:e6:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjUxMDIwMTY0MjA4WhcNMjUxMDI3MTY0MjA4WjAYMRYwFAYD VQQDEw02OGY2NjY2MC00YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bGx3HRzFWpVMGbuckf+17OVxDUYJlZLRGnXSAKbH6nGNPph/+6e2GA2RPcS qKKry5gb5qt7/WOZaIhzeEOI8ig6dFsbyyLWzWbAYmsPouj/3aMIFmjiXYXIhqZI R074c4QMvk+PN1EO67WbZg2iuZIya758lOvrB6LbGtAk1DakPt6YcgCoonv9Sd6c P4er53BhK9aiJZ780jGYRcyFv34tGgmEFb9lQDi6xe0thcTjQaI/yCD6EeMP3CB6 nuFn9eopgHY7ATBjXRR8Kg0imUSagsQ4yyqqNxFMzoD/nlqjXQeI0Xxj8LcXlKbE 64RNTovW2nLcMmxRZ2Xhg/1S/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlTY5Gy SNJr25SUg1xvMBiMAjvlMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx Z3RDLUJNYlllam9EWGlEZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC1/2InGxW25792psuWEXyUNpA1iD9UQsDqkKxkVwZnL8Zgs3DP0po E6TXMtHc4w8VQxiw5Vz1+uYR7haJrt/Sy7p8i1AhCRBJkIMiEyLJsfWvY3kLhwL2 xNgVLYQFFQDcpMsiGduIfPvKW0QLzFwbD0tb+47Q9uYC+SMxhY0p/QMLwtdpb+0X pcwrcsoZWz58y7sqb/SC0RP4fV4KlcIbta6UbJvVkK/N5MILMN2V9u196OxdJLwG JqGdUJSM5ThEyATtAFi7WJBIMnsPrkOxJ+2eb+VEwN8erQ2EvcNERCAARlQvai7n jvNZvgqE+tOOYfDZ5gHKYo2CdzuG0ub5 -----END CERTIFICATE-----Generated at Wed Oct 22 17:33:49 2025 by rpki-client