$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: DBNCyWuyAIxZ6d4+YMrGwGaOEnGjz9ZgyLeW4pDVXpo= Subject key identifier: D3:EE:2F:8C:54:F6:2F:24:AF:24:4B:78:67:53:6D:5F:B3:71:C8:59 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 018A Signing time: Mon 03 Nov 2025 03:31:46 +0000 Manifest this update: Mon 03 Nov 2025 03:31:45 +0000 Manifest next update: Mon 10 Nov 2025 03:31:45 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: ClYKA3TstRyTf/otlOL2VgWjzS/BvyDSnl4zcGmsDZY=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Nov 3 03:31:45 2025 GMT Not After : Nov 10 03:31:45 2025 GMT Subject: CN=69082222-d392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:8a:3e:3f:1e:f0:61:af:2e:cc:d8:a0:e4: 86:3d:bc:0a:bd:58:61:42:f5:a6:22:d0:79:b5:1c: 73:00:60:fb:03:08:02:fd:54:45:5a:6a:cd:67:7e: 86:1b:03:59:b1:ed:1b:ea:f5:16:76:dd:68:90:d9: 6c:8b:43:a4:c8:40:42:a7:8b:6e:ef:66:00:3b:22: c1:59:6b:95:ca:87:9e:d8:fe:20:c0:60:7b:85:f7: f1:39:56:8b:79:18:8f:4a:a7:80:db:9d:73:43:be: fd:2f:9f:b9:ac:4a:56:90:35:07:f4:6c:19:75:c0: 74:2f:96:ae:b5:36:03:dc:e5:54:a5:ef:78:67:69: 69:a0:f3:a0:5b:af:5d:24:a6:42:30:0e:91:dd:5b: 65:ae:0a:78:8e:52:98:58:4e:a6:1f:a5:e8:77:8e: af:74:0a:a0:2d:f6:dd:19:01:a3:e7:3c:2a:e0:5c: 51:2d:94:47:76:4d:c2:9d:ee:87:f0:19:d8:e1:41: 94:fc:e9:f7:64:85:74:b8:c0:be:6a:ae:66:02:24: bd:11:93:c3:c0:28:be:3a:e7:e6:22:2e:d9:29:25: 82:52:b9:a3:90:61:64:e2:d9:b3:4f:61:c8:1e:11: b1:eb:97:89:2f:ed:23:42:bd:2c:24:db:94:96:b0: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EE:2F:8C:54:F6:2F:24:AF:24:4B:78:67:53:6D:5F:B3:71:C8:59 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:45:93:ed:c4:5a:59:72:8e:57:c6:08:55:83:b9:95:2d:da: dd:37:ab:4b:8e:42:50:df:27:86:ec:21:51:cc:c0:93:bf:b7: 62:8e:25:2c:40:60:b2:3c:a1:58:21:6d:15:cf:9a:ec:da:02: 6d:f3:e0:8d:69:1c:65:98:8b:e7:de:27:c4:1c:23:92:54:78: 18:ed:e1:a3:ba:20:39:d0:a0:77:c2:8c:b2:fc:e1:0a:a5:ba: 8a:03:84:0d:2d:5c:45:9b:e3:02:01:fa:cc:ad:38:c3:a4:7e: f7:37:34:71:f4:8c:8f:ef:f5:d7:23:54:90:14:31:9c:84:c4: 6a:3c:65:8a:50:ad:bb:47:b6:41:f2:0e:45:83:09:c7:86:19: 61:47:51:d5:74:b9:7c:9f:5f:50:eb:99:d4:7a:87:51:80:0a: 94:9e:3f:25:e5:9b:a2:0f:a4:4e:3b:c5:b3:e3:04:c6:7e:f4: 7a:1b:db:e1:c0:80:61:d2:a7:7b:d4:69:f0:09:3d:e6:87:64: df:48:cb:cc:14:b2:93:1a:8e:72:8e:64:8a:8d:21:ca:7e:20: 30:60:b9:25:b1:20:ca:7b:59:df:d9:22:f7:c7:73:d0:1a:88: 2c:bf:95:3e:57:08:53:34:e6:ab:2b:26:42:b7:ff:a7:f9:30: cd:4d:06:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUxMTAzMDMzMTQ1WhcNMjUxMTEwMDMzMTQ1WjAYMRYwFAYD VQQDEw02OTA4MjIyMi1kMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbOKPj8e8GGvLszYoOSGPbwKvVhhQvWmItB5tRxzAGD7AwgC/VRFWmrNZ36G GwNZse0b6vUWdt1okNlsi0OkyEBCp4tu72YAOyLBWWuVyoee2P4gwGB7hffxOVaL eRiPSqeA251zQ779L5+5rEpWkDUH9GwZdcB0L5autTYD3OVUpe94Z2lpoPOgW69d JKZCMA6R3Vtlrgp4jlKYWE6mH6Xod46vdAqgLfbdGQGj5zwq4FxRLZRHdk3Cne6H 8BnY4UGU/On3ZIV0uMC+aq5mAiS9EZPDwCi+OufmIi7ZKSWCUrmjkGFk4tmzT2HI HhGx65eJL+0jQr0sJNuUlrDuLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPuL4xU 9i8kryRLeGdTbV+zcchZMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDRZPtxFpZco5XxghVg7mVLdrdN6tLjkJQ3yeG7CFRzMCTv7dijiUs QGCyPKFYIW0Vz5rs2gJt8+CNaRxlmIvn3ifEHCOSVHgY7eGjuiA50KB3woyy/OEK pbqKA4QNLVxFm+MCAfrMrTjDpH73NzRx9IyP7/XXI1SQFDGchMRqPGWKUK27R7ZB 8g5FgwnHhhlhR1HVdLl8n19Q65nUeodRgAqUnj8l5ZuiD6ROO8Wz4wTGfvR6G9vh wIBh0qd71GnwCT3mh2TfSMvMFLKTGo5yjmSKjSHKfiAwYLklsSDKe1nf2SL3x3PQ Gogsv5U+VwhTNOarKyZCt/+n+TDNTQZ1 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:54 2025 by rpki-client