$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: tyyfvCNDKKmLVawqHAaA4lvau63wA5WewG+1D1/VeM8= Subject key identifier: 32:E9:20:4B:9C:1B:55:79:EE:BA:8C:C6:39:8F:D3:C2:8F:F1:12:46 Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0CE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0CCC Signing time: Sun 02 Nov 2025 18:09:53 +0000 Manifest this update: Sun 02 Nov 2025 18:09:53 +0000 Manifest next update: Sun 09 Nov 2025 18:09:53 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: 9NhVqfWK7zTEX/Ku0JzgMf65ELv4oiePQKn5gBfurxA=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Nov 2 18:09:53 2025 GMT Not After : Nov 9 18:09:53 2025 GMT Subject: CN=69079e71-9651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:2d:24:50:bd:dc:90:1f:00:ac:45:1c:0c: 54:9e:69:24:77:86:e0:8e:b0:50:e5:3a:3c:f0:a2: 4e:88:2b:39:8c:6e:0b:96:ff:1b:9a:c5:21:45:7b: 43:47:65:49:e2:e2:ed:17:55:75:68:53:a9:ca:f5: ca:4f:cb:52:4c:0b:7b:b8:61:2d:9e:e2:94:5f:b1: 40:50:50:75:9f:44:1d:f8:de:c1:fb:24:1a:89:f7: d9:f0:0c:82:82:70:b7:f3:cc:b9:58:9e:eb:98:fb: 4e:ba:1f:a6:3c:a4:83:13:51:8d:c7:03:d9:a2:1a: d1:5c:9d:72:f6:78:a9:76:3a:22:8f:f3:92:47:c0: 1a:ed:21:bb:b5:09:83:77:2a:bf:e2:4e:c6:47:b0: dd:ad:2c:82:49:d8:38:f3:a9:80:8d:6a:79:75:2a: 15:b2:37:22:9b:39:3e:e1:5b:04:83:a3:80:10:a6: e6:72:10:29:36:22:82:9c:95:2d:7c:79:37:bf:c3: 41:50:fc:b5:56:06:9b:6e:e4:06:7e:fb:f0:57:51: 82:2e:0b:14:eb:42:87:e9:9f:02:6e:55:67:c6:e1: 21:34:60:0a:5a:ea:15:89:12:20:1a:d9:b0:61:ae: 43:e6:71:88:45:45:fb:7b:80:19:15:43:05:83:a9: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E9:20:4B:9C:1B:55:79:EE:BA:8C:C6:39:8F:D3:C2:8F:F1:12:46 X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:cf:79:54:8c:15:66:11:fe:9d:f8:56:88:43:2e:32:0a:df: 43:11:d8:6a:d5:b9:3c:3a:f4:12:5c:56:5a:ef:9d:f6:19:eb: 6d:d9:1a:35:c3:b0:a8:b2:eb:71:e3:96:2a:b5:96:c8:c5:db: 43:cd:c6:65:7f:f4:c0:a3:9b:80:28:28:4c:79:c2:33:b9:18: 4d:53:17:eb:75:6c:cd:45:b4:ef:58:b3:15:ae:57:7f:e6:7d: 92:04:5d:1a:32:5b:be:1f:aa:70:de:7c:24:8b:31:46:39:09: 10:e2:88:74:cb:c1:0c:0a:a1:fc:d2:e3:df:4a:92:46:a9:69: 29:9e:88:91:dc:eb:f4:ad:1a:a6:05:3e:f8:7d:b9:a7:ac:dc: 8b:6b:74:98:3b:8b:ac:3e:79:12:07:73:15:6c:7d:ba:4a:1c: 9c:61:71:c2:59:fd:94:d1:fa:71:7b:bc:a9:89:dc:52:60:53: 40:8a:c4:f3:37:3c:86:d6:29:38:0b:9a:fa:28:10:cc:1a:91: f9:53:d9:e5:83:1c:a3:a9:78:c0:5a:74:b2:46:bc:0a:dd:a0: 78:d2:46:db:6f:18:46:b3:c2:d8:e5:fd:5b:63:04:1c:54:8e: a1:0f:3b:80:79:f1:65:75:de:41:4b:1a:2e:d6:68:e4:bc:b5: de:94:06:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUxMTAyMTgwOTUzWhcNMjUxMTA5MTgwOTUzWjAYMRYwFAYD VQQDEw02OTA3OWU3MS05NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wgtJFC93JAfAKxFHAxUnmkkd4bgjrBQ5To88KJOiCs5jG4Llv8bmsUhRXtD R2VJ4uLtF1V1aFOpyvXKT8tSTAt7uGEtnuKUX7FAUFB1n0Qd+N7B+yQaiffZ8AyC gnC388y5WJ7rmPtOuh+mPKSDE1GNxwPZohrRXJ1y9nipdjoij/OSR8Aa7SG7tQmD dyq/4k7GR7DdrSyCSdg486mAjWp5dSoVsjcimzk+4VsEg6OAEKbmchApNiKCnJUt fHk3v8NBUPy1VgabbuQGfvvwV1GCLgsU60KH6Z8CblVnxuEhNGAKWuoViRIgGtmw Ya5D5nGIRUX7e4AZFUMFg6mSxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLpIEuc G1V57rqMxjmP08KP8RJGMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoz3lUjBVmEf6d+FaIQy4yCt9DEdhq1bk8OvQSXFZa7532Gett2Ro1 w7Cosutx45YqtZbIxdtDzcZlf/TAo5uAKChMecIzuRhNUxfrdWzNRbTvWLMVrld/ 5n2SBF0aMlu+H6pw3nwkizFGOQkQ4oh0y8EMCqH80uPfSpJGqWkpnoiR3Ov0rRqm BT74fbmnrNyLa3SYO4usPnkSB3MVbH26ShycYXHCWf2U0fpxe7ypidxSYFNAisTz NzyG1ik4C5r6KBDMGpH5U9nlgxyjqXjAWnSyRrwK3aB40kbbbxhGs8LY5f1bYwQc VI6hDzuAefFldd5BSxou1mjkvLXelAZG -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:32 2025 by rpki-client