$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json) Hash identifier: llfSzU8Hhv5WKHFIFdcR70wrpOAkXZ6rMaOuZUOlF/s= Subject key identifier: 27:1E:BE:72:A8:5F:18:F4:BF:73:6E:6C:1A:26:9B:25:01:77:8C:47 Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft Manifest number: 2D Signing time: Fri 17 Oct 2025 11:29:14 +0000 Manifest this update: Fri 17 Oct 2025 11:29:14 +0000 Manifest next update: Fri 24 Oct 2025 11:29:14 +0000 Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: XFbrpGbODjHIHg+HLgicwL31XseaWZQNhRDYTXn8IAg=) 2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: ZwA3RLDFZuJuq+OnGHO5YHGm+YL4BWQ+qyec67LETqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Validity Not Before: Oct 17 11:29:14 2025 GMT Not After : Oct 24 11:29:14 2025 GMT Subject: CN=68f2288a-d16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:55:f3:69:97:67:97:16:2c:cf:9b:f5:57: 27:ef:f3:ca:87:81:65:2e:8a:94:fe:db:97:13:42: 3a:98:c3:62:0f:98:3b:b8:dd:c7:88:2f:f7:fd:c4: 1d:5d:06:56:eb:43:20:07:9d:a3:57:2b:4a:34:dd: bb:4c:ff:21:a9:92:8d:4b:9e:2c:05:c0:30:65:61: c6:c7:fe:7c:b7:e7:5b:72:b9:a7:eb:34:04:a6:c3: 5f:d6:2f:59:c7:bb:3b:49:6b:c2:ce:f5:4c:d6:87: 77:95:48:13:1d:8a:8f:23:74:c8:00:e0:4a:53:5e: 5b:5f:4d:68:76:9d:01:d9:9b:b5:af:24:a0:0a:27: 25:32:18:b4:3b:e9:29:55:0e:d7:54:a7:36:37:b0: 74:95:15:48:69:05:33:d9:75:b4:ea:89:ad:29:81: d5:cf:7a:6f:9c:a5:4f:7e:ac:d7:db:4b:cd:57:59: 89:b9:48:c4:11:97:0b:82:85:bb:11:41:7a:7b:39: 14:b1:c1:ab:ea:6d:2e:bf:72:ee:7f:84:ce:94:a4: c0:74:d0:9a:87:18:72:40:fc:a6:93:d6:3e:88:9a: 12:03:95:87:b2:a4:30:a9:ff:ce:fd:ae:d7:9f:2b: 25:30:1f:3e:0d:c4:17:34:d1:52:95:76:ff:13:30: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1E:BE:72:A8:5F:18:F4:BF:73:6E:6C:1A:26:9B:25:01:77:8C:47 X509v3 Authority Key Identifier: keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:4c:83:bf:e5:a0:1d:2d:b4:33:3c:a9:81:cd:71:91:c4:42: 8b:de:8f:f6:5b:8d:e3:45:b2:e3:ae:40:69:93:f4:47:35:80: 63:7e:63:ad:f6:0e:7a:20:71:b0:5d:5e:93:66:82:2b:5e:da: 90:65:bb:3b:e8:7a:cf:db:60:a3:ce:7f:44:cc:8a:78:93:45: 8b:24:dd:b8:20:25:43:25:6e:60:cf:9c:7b:4f:e5:ae:6c:4e: 0b:46:7b:f1:43:b3:61:38:b5:79:8f:37:fc:d1:ef:62:67:f9: f5:dc:1f:7b:c1:f2:dc:d1:85:72:af:ec:80:f3:4c:e1:3a:f3: 4e:45:79:2e:92:44:79:67:d3:fa:aa:c2:ea:dc:57:dc:9f:60: cb:69:7e:c0:d5:90:52:27:f6:90:05:3a:b5:6b:e2:a9:3c:ec: 0a:03:ad:73:9d:d1:d1:37:03:ab:36:27:b2:cb:0c:96:d1:ef: 8a:60:a0:fe:86:87:3c:94:29:16:a4:0d:a4:59:f2:96:78:10: 04:03:d5:ba:a5:e8:9f:0b:32:3b:48:fc:7e:8e:c9:ce:5b:68: d7:d3:20:34:31:e5:7e:f8:de:8a:98:c8:2c:e3:89:93:67:59: 0a:50:a4:46:98:3a:4f:f4:48:fa:58:83:37:12:7f:5a:cb:f6: 70:9c:2b:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoMzdBNjVGREI0MEU4QzY1OUIxN0U1MDAwRkE4OUE2NTY4 MDk3NkQ1QjAeFw0yNTEwMTcxMTI5MTRaFw0yNTEwMjQxMTI5MTRaMBgxFjAUBgNV BAMTDTY4ZjIyODhhLWQxNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXx1XzaZdnlxYsz5v1Vyfv88qHgWUuipT+25cTQjqYw2IPmDu43ceIL/f9xB1d BlbrQyAHnaNXK0o03btM/yGpko1LniwFwDBlYcbH/ny351tyuafrNASmw1/WL1nH uztJa8LO9UzWh3eVSBMdio8jdMgA4EpTXltfTWh2nQHZm7WvJKAKJyUyGLQ76SlV DtdUpzY3sHSVFUhpBTPZdbTqia0pgdXPem+cpU9+rNfbS81XWYm5SMQRlwuChbsR QXp7ORSxwavqbS6/cu5/hM6UpMB00JqHGHJA/KaT1j6ImhIDlYeypDCp/879rtef KyUwHz4NxBc00VKVdv8TME0lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJx6+cqhf GPS/c25sGiabJQF3jEcwHwYDVR0jBBgwFoAUN6Zf20DoxlmxflAA+ommVoCXbVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2Lzg4MTJGQkU0NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxteGZsQUEtb21tVm9DWGJW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjZaZjIwRG94bG14ZmxBQS1vbW1Wb0NYYlZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2Lzg4MTJGQkU0NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxt eGZsQUEtb21tVm9DWGJWcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKdMg7/loB0ttDM8qYHNcZHEQovej/ZbjeNFsuOuQGmT9Ec1gGN+Y632 DnogcbBdXpNmgite2pBluzvoes/bYKPOf0TMiniTRYsk3bggJUMlbmDPnHtP5a5s TgtGe/FDs2E4tXmPN/zR72Jn+fXcH3vB8tzRhXKv7IDzTOE6805FeS6SRHln0/qq wurcV9yfYMtpfsDVkFIn9pAFOrVr4qk87AoDrXOd0dE3A6s2J7LLDJbR74pgoP6G hzyUKRakDaRZ8pZ4EAQD1bql6J8LMjtI/H6Oyc5baNfTIDQx5X743oqYyCzjiZNn WQpQpEaYOk/0SPpYgzcSf1rL9nCcK6Q= -----END CERTIFICATE-----Generated at Sat Oct 18 23:32:50 2025 by rpki-client