$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: m4NCIkCQBQULs2xBMEG3Jfn+jH51b8v4fy+FmDeFMNg= Subject key identifier: B1:26:67:9C:04:DC:B1:80:31:3D:8C:93:66:29:5F:D8:FD:B5:1C:46 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: 8D Signing time: Mon 03 Nov 2025 06:33:41 +0000 Manifest this update: Mon 03 Nov 2025 06:33:41 +0000 Manifest next update: Mon 10 Nov 2025 06:33:41 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: BwxIUBPADZiWhLBQWF8pjqSDa1jV0FGTDOJ8AuNQrec=) 2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: wy+E0shlE0SgKblGT9mkubbsdEgdl8xDfG6j2pKg5CM=) 3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: rUHAonKHyKGTHsXqPvAHU77iis+UDkigScpxL6u+DWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Nov 3 06:33:41 2025 GMT Not After : Nov 10 06:33:41 2025 GMT Subject: CN=69084cc5-fa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:4f:34:8c:ae:5b:5b:83:06:a7:67:c6:32: 9e:6f:3f:55:9d:79:2f:bf:bc:cf:7b:5b:b1:e2:a8: 89:4c:da:48:44:cf:21:61:f2:51:eb:4d:bb:43:0f: 61:a9:e2:3c:57:21:f1:6c:ed:97:7b:62:b0:59:6a: cc:63:3f:10:7b:17:a6:dd:4a:e5:ba:c7:b8:fe:a3: 28:5b:96:5e:3d:c8:c2:47:bf:26:43:0a:cb:88:b8: ce:e0:27:26:90:a2:40:f5:fa:90:75:69:d0:e1:0f: 05:37:6c:d3:1f:15:91:a1:06:d0:1c:7c:74:e1:dd: 04:f9:0e:29:2e:fa:0d:01:6b:0d:1c:a7:9d:55:d5: 89:ac:45:5a:d0:4b:59:b9:e9:4b:b2:ea:c6:ed:a4: 3e:39:42:d7:0c:79:00:72:7c:cf:9e:13:ad:7a:7b: a1:16:65:03:70:7e:6e:49:e3:38:6b:69:eb:e4:47: 0b:a3:ba:e0:9e:d9:68:80:f0:cc:cf:26:33:de:d7: 2e:c0:9f:f5:ab:13:3c:17:50:b3:70:93:79:fa:ef: 2a:85:11:4a:0d:67:d1:f3:54:a8:6b:ed:0f:4d:be: c0:f9:08:ed:3e:f9:55:f2:1d:bb:aa:fb:8a:f7:7e: 57:f8:3e:27:2e:06:db:f3:d6:fe:fb:3b:c5:2b:48: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:26:67:9C:04:DC:B1:80:31:3D:8C:93:66:29:5F:D8:FD:B5:1C:46 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:1c:11:12:dc:8e:30:50:a1:9c:78:5a:6f:06:b1:8c:82:9a: 82:cf:b1:cd:0b:d0:78:de:57:7d:6d:bf:fc:17:30:5d:11:a9: 00:29:33:0b:71:3a:72:16:af:b3:ff:ce:c9:0a:19:70:b0:59: 22:53:83:43:30:43:0b:22:5c:2c:98:98:db:17:97:55:11:68: 63:46:99:37:1c:bc:a8:0e:a4:e6:6f:3b:12:da:de:bf:a7:b0: 28:30:17:d7:88:a4:a4:e9:80:25:67:56:c8:f8:83:fe:c0:a7: 67:c9:6e:ee:d8:b4:aa:6a:8f:24:32:55:63:39:0d:05:1a:02: d5:4b:02:21:c6:e3:e7:9f:66:b9:70:09:c5:16:48:42:28:b4: 96:a9:b6:58:2b:9c:ed:7b:41:03:62:d6:bd:d0:ea:52:f4:ea: e3:ba:bf:2a:1c:0f:df:b2:c2:ec:87:f5:3b:0b:92:9f:c1:5a: 1b:8f:1f:ae:49:17:3b:34:29:6e:9e:b9:7e:ef:68:30:c8:2a: 1e:67:fc:51:0d:6b:e7:02:a9:f5:d4:b8:38:d3:10:ac:77:09: 60:ba:eb:11:98:d1:70:c5:8e:7b:36:87:c3:fc:16:c5:86:15: 4d:71:74:90:9e:4a:9e:71:5c:20:22:da:0b:1d:7b:39:f8:64: 8f:08:9e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwMzcxMTAvBgNVBAUTKDM3NjEyMTJBMTY3MEE1NzE5QUI3MUZBMjAzQjkyRUM2 ODZGMjExNzcwHhcNMjUxMTAzMDYzMzQxWhcNMjUxMTEwMDYzMzQxWjAYMRYwFAYD VQQDEw02OTA4NGNjNS1mYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWBPNIyuW1uDBqdnxjKebz9VnXkvv7zPe1ux4qiJTNpIRM8hYfJR6027Qw9h qeI8VyHxbO2Xe2KwWWrMYz8Qexem3Urluse4/qMoW5ZePcjCR78mQwrLiLjO4Ccm kKJA9fqQdWnQ4Q8FN2zTHxWRoQbQHHx04d0E+Q4pLvoNAWsNHKedVdWJrEVa0EtZ uelLsurG7aQ+OULXDHkAcnzPnhOtenuhFmUDcH5uSeM4a2nr5EcLo7rgntlogPDM zyYz3tcuwJ/1qxM8F1CzcJN5+u8qhRFKDWfR81Soa+0PTb7A+QjtPvlV8h27qvuK 935X+D4nLgbb89b++zvFK0jebwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEmZ5wE 3LGAMT2Mk2YpX9j9tRxGMB8GA1UdIwQYMBaAFDdhISoWcKVxmrcfogO5LsaG8hF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjAzNy81QzA1QzBDOEU0 MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BYR2F0eC1pQTdrdXhvYnlF WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BY R2F0eC1pQTdrdXhvYnlFWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmHBES3I4wUKGceFpvBrGMgpqCz7HNC9B43ld9bb/8FzBdEakAKTML cTpyFq+z/87JChlwsFkiU4NDMEMLIlwsmJjbF5dVEWhjRpk3HLyoDqTmbzsS2t6/ p7AoMBfXiKSk6YAlZ1bI+IP+wKdnyW7u2LSqao8kMlVjOQ0FGgLVSwIhxuPnn2a5 cAnFFkhCKLSWqbZYK5zte0EDYta90OpS9Orjur8qHA/fssLsh/U7C5KfwVobjx+u SRc7NClunrl+72gwyCoeZ/xRDWvnAqn11Lg40xCsdwlguusRmNFwxY57NofD/BbF hhVNcXSQnkqecVwgItoLHXs5+GSPCJ54 -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:42 2025 by rpki-client