$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft File: n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json) Hash identifier: 8hhGEXz3ag0jfHCvzH24NIZnw1s+QHwd3SEzKyowgpE= Subject key identifier: FA:9D:85:FB:36:B5:49:F8:EB:3E:AE:6E:8D:5B:B4:1D:CF:1B:A5:E5 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 35FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft Manifest number: 34FF Signing time: Mon 08 Sep 2025 14:21:49 +0000 Manifest this update: Mon 08 Sep 2025 14:21:48 +0000 Manifest next update: Mon 15 Sep 2025 14:21:48 +0000 Files and hashes: 1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: 9V1HkRHHjKXHmxg+OQNhfad/yCzXm20qiSrwRvapGSA=) 2: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: RlLRteQSfjgNjoDFYZ12j4xm4gJcxx7/ouGdnACi8jE=) 3: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: Jl/N0P/2cG5vuafM7WPanArTIdcgOJaMycU46eiVqR8=) 4: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: 0A0Nhnr13g/AyJ6eZl3uyvpwaA6ghz922H++qApXnN8=) 5: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: CEN7jfWU1vPpLzR5uzYZhWk4C138cZA3lkf/fBKS00g=) 6: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: t33tjefPncP8dR8GX15pU981pTfbTiVj5ryxyONgq7A=) 7: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: 9Ico4h3XlCaLtqQIGUKMAvjEzVqPREECMseESR6/+Rs=) 8: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: am25QW4MJ5THnozpBZGdhNNGRi5OPU/F57+oBhLG+ss=) 9: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: Hnemh9EwwTeduD1Zc7gVprQ1BQwQSdNFXtPrRgQGYJ0=) 10: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: x5gAALbDWXYABqxH0UVKGWQASAjVkWdpYaVlhYcPqAc=) 11: CEC68F44973211E9954F0565C4F9AE02.roa (hash: UYL3PlfPOBzM+4YTE4YVT/B9+S0RmwIC0/LTv+8zEeU=) 12: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: xHKRgZRt4qbSzDPZH6wkR/9CWnhDd6W1bLMRhJgSvfc=) 13: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: 1cfJQS5ACrYfLQAyh5Ja07hoswmqC8p/ibeUwb6rjOE=) 14: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Vvt8gIzT7X3zFgaHKZZTu/elNVhHdcP8J7ECpTHkuWo=) 15: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: Td1yZRJHEJdrXdDkVXf585lTVDZ/gAEOrflJZU/zpIE=) 16: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: Klr9GG7Ib/o4yZ1sx6KX+wz6djtwSpGfaSi2JHkkYP4=) 17: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: sX+id3lu89Hjy6wyXn7YJf1vycTYavS1aKnHsZ9N81M=) 18: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: Ou9GXrK/fzDAww5dRpeY0Rn8NUNZjPo4uNl9tQUkuio=) 19: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: P0DmiEGqN7lW5E2uoWn71/z/nYWW3JpwNu+rpvGmCIs=) 20: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: 0+kajyIDxu72hFKkbKyeIRpJ6iZ+zJJsd5Bir90Bjbs=) 21: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: 2vo94c8bhE/vlqMz+w1F2CTUOl+XnRdJZlNw0Ckqzz8=) 22: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: vcrOZBXHjq3K5b9IM2tb0fFhXmrTMImV0akcYw7Q7n0=) 23: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 07u1m9+WpmKzkUImJC5UFriIMTCX8GggMGZm/tBb4Wg=) 24: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: EcBR1Y+LSwE3SFyQmCPHJrgPGrIw6HZerXAZglO7fSw=) 25: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: +zMT8yB+e8TH1LiL/hekG194ZDTDk4B7qTjHy7txnvM=) 26: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: 1bdsgMBWNk0J8N0RhS3NVIo135QEMXhjy/l9087BnFU=) 27: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: yxUvZSwNOnvgFyxK+xyWLF/IFfuAV6JnnBBih/qkFIk=) 28: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: jWBtMJRBrQmahUt0pi2YibmAZBgFlEfn4PBIYmSkROs=) 29: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: 5+MRoBA+rOp6HemFzB+KMhs/OCqWXA66uUpcbDP4GD0=) 30: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: ZQ/r1ORMQDfDWVK/TZq7hs+eIvBXZKfdyf99uBq0RP8=) 31: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: 8/pIg0nOoslqGVpUnPoQipLD1CjxnbDa2dRCnlmkpWQ=) 32: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: zLL9jkNh6O2K6tYXIsyvEGSPolQEwe8/GLuSvRNkabw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13820 (0x35fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Sep 8 14:21:48 2025 GMT Not After : Sep 15 14:21:48 2025 GMT Subject: CN=68bee67d-158a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:30:af:1e:f9:7c:0a:e7:25:79:18:d1:ac: 05:e4:ef:dd:26:7b:69:bc:52:0f:ef:03:fe:0e:17: d4:4d:b2:1d:97:e7:9a:06:7f:db:8d:9e:93:7f:02: f3:85:8c:34:df:6a:2e:37:3f:fb:41:ef:0f:8b:fc: f5:cb:c6:95:68:d8:9a:e4:37:31:c2:a5:40:d3:9a: 91:dd:81:de:06:f4:4a:c9:1b:71:1b:bc:29:be:44: 62:6b:d8:51:08:cf:16:5f:57:00:72:ca:6a:33:87: 7c:f2:47:92:a6:c1:d5:de:ea:89:d5:46:bf:33:a0: 9b:44:b8:f6:42:1d:d9:d7:db:41:06:f1:a7:1a:6f: b4:9d:09:21:7a:72:43:86:15:3e:81:d0:e2:ef:c4: 6a:c7:62:ed:b9:1d:22:10:a9:e5:0f:04:bb:0f:5d: 04:ff:b8:18:7f:da:a6:6f:37:48:bc:d4:b7:6a:dc: f2:d0:39:11:4a:a5:e7:21:f9:15:2f:a3:bc:dd:87: 37:bd:e1:5d:9b:a4:7f:bb:ec:2d:61:ef:92:aa:63: 71:6c:ad:64:61:16:ac:69:da:95:19:e7:69:60:23: 57:d6:72:76:a4:14:f4:70:d2:6b:3a:cc:97:f8:f5: fd:cf:d3:a3:cc:a7:f0:6b:e9:04:d6:2f:95:4a:5b: 78:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:85:FB:36:B5:49:F8:EB:3E:AE:6E:8D:5B:B4:1D:CF:1B:A5:E5 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ee:14:10:89:df:01:45:bf:42:20:f3:bc:4b:bf:81:31:4e: 5b:39:35:16:2c:b7:f7:11:a2:d3:67:69:f4:ac:70:88:50:30: 46:3e:8e:1e:a4:7d:02:fc:25:5c:f8:ec:8b:2e:51:99:df:fe: 44:39:29:c6:1e:c0:eb:81:37:47:f3:0f:00:4c:3e:f1:6b:71: 9a:b9:6d:ff:9a:d7:ab:10:a6:05:24:c9:4f:39:1b:a3:4b:90: e1:1f:9d:d1:80:9a:0f:f9:89:0a:9a:a1:d6:88:5f:f9:f1:00: 62:b0:67:2f:e8:33:e8:5a:4a:1e:31:d1:8c:10:b5:a6:c5:0a: a1:63:d0:ef:2f:d0:04:7b:47:51:13:d8:55:b0:76:79:90:53: 04:0c:e3:cd:46:4e:ef:95:81:c6:b5:ba:31:c1:59:e7:14:95: c3:b8:68:cc:d4:92:d5:5b:8d:2b:2f:d9:64:03:72:d3:70:f0: 5c:2e:19:91:56:fa:cb:bd:66:d0:e4:9d:cc:d4:ba:95:2f:e1: 58:50:81:df:86:8d:55:4b:63:81:0c:5c:f8:60:1e:ea:ce:d4: 39:ae:fe:04:9b:1c:75:da:38:0a:65:42:48:61:b9:07:cc:a5: 1d:ff:5e:8b:75:2e:ae:71:0f:c7:04:f1:e6:cf:1d:01:c5:16: 50:ae:82:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwOTA4MTQyMTQ4WhcNMjUwOTE1MTQyMTQ4WjAYMRYwFAYD VQQDEw02OGJlZTY3ZC0xNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1Qwrx75fArnJXkY0awF5O/dJntpvFIP7wP+DhfUTbIdl+eaBn/bjZ6TfwLz hYw032ouNz/7Qe8Pi/z1y8aVaNia5DcxwqVA05qR3YHeBvRKyRtxG7wpvkRia9hR CM8WX1cAcspqM4d88keSpsHV3uqJ1Ua/M6CbRLj2Qh3Z19tBBvGnGm+0nQkhenJD hhU+gdDi78Rqx2LtuR0iEKnlDwS7D10E/7gYf9qmbzdIvNS3atzy0DkRSqXnIfkV L6O83Yc3veFdm6R/u+wtYe+SqmNxbK1kYRasadqVGedpYCNX1nJ2pBT0cNJrOsyX +PX9z9OjzKfwa+kE1i+VSlt4dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqdhfs2 tUn46z6ubo1btB3PG6XlMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8yN0Y4M0I3MDFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVz VzZMcElTZVRBa0FKVnFtQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS7hQQid8BRb9CIPO8S7+BMU5bOTUWLLf3EaLTZ2n0rHCIUDBGPo4e pH0C/CVc+OyLLlGZ3/5EOSnGHsDrgTdH8w8ATD7xa3GauW3/mterEKYFJMlPORuj S5DhH53RgJoP+YkKmqHWiF/58QBisGcv6DPoWkoeMdGMELWmxQqhY9DvL9AEe0dR E9hVsHZ5kFMEDOPNRk7vlYHGtboxwVnnFJXDuGjM1JLVW40rL9lkA3LTcPBcLhmR VvrLvWbQ5J3M1LqVL+FYUIHfho1VS2OBDFz4YB7qztQ5rv4Emxx12jgKZUJIYbkH zKUd/16LdS6ucQ/HBPHmzx0BxRZQroKw -----END CERTIFICATE-----Generated at Tue Sep 9 04:07:40 2025 by rpki-client