$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: TtqUpRk6Xq/6Vrso1sPrC6BZj9MGXsomm/VW16TUCS8= Subject key identifier: 1B:B1:29:E3:54:93:94:40:BA:1C:75:07:12:7E:63:B2:01:B2:EE:1D Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 05D0 Signing time: Sun 02 Nov 2025 23:01:27 +0000 Manifest this update: Sun 02 Nov 2025 23:01:26 +0000 Manifest next update: Sun 09 Nov 2025 23:01:26 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: TP0+cXwYgwGf2/AsMxAyVYUHvqdrTq81oq+sCSzTKOc=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Nov 2 23:01:26 2025 GMT Not After : Nov 9 23:01:26 2025 GMT Subject: CN=6907e2c6-8285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:bf:e3:ee:70:d1:3c:a3:08:25:f2:40:92: 36:52:cf:3a:b2:53:8d:ad:7e:f9:da:b0:39:1b:b6: 48:14:d4:5f:0e:e6:23:a6:87:fa:23:b2:eb:fe:d4: 95:d1:f5:87:3a:e3:a4:fd:95:9c:ee:a5:34:80:5e: d0:8c:07:14:c5:76:ce:fc:b2:fb:1f:ed:26:cd:41: 59:c3:24:58:d4:76:bf:11:2f:ed:f3:e5:37:cf:02: 6c:8e:ba:5d:d9:c2:68:ea:e4:b0:30:01:58:e2:5b: d8:4f:da:1f:db:f0:b9:16:71:6b:11:c7:c0:4a:2b: a9:ef:61:91:1d:71:38:b8:3f:be:f2:d2:51:d8:c8: 70:c4:e1:0e:88:71:56:19:07:e8:1c:ec:07:14:12: 8b:f6:b0:97:0e:b1:b4:8b:01:a2:d3:b2:54:1b:c1: 69:f9:27:cc:0e:cc:dc:8b:68:76:b5:7b:54:9e:3c: 0c:bb:5b:d4:f6:79:73:2d:aa:07:ff:65:6f:6b:9f: c4:a5:e5:eb:05:59:e9:b4:f4:20:82:b9:c5:03:27: 52:59:46:62:a5:7f:4b:58:44:36:a3:98:db:11:f7: 06:24:1a:96:18:15:ab:d2:4c:24:6f:4b:58:20:a8: 9e:58:99:5c:b5:88:5f:8e:e2:30:4d:84:ba:2a:a4: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B1:29:E3:54:93:94:40:BA:1C:75:07:12:7E:63:B2:01:B2:EE:1D X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:31:74:17:32:b1:be:51:ad:4f:e9:ad:89:c5:e2:70:f9:83: a8:d4:f0:d5:45:ab:9c:e5:79:13:88:07:f5:a0:c1:a8:cd:42: 4a:13:58:d9:a0:b5:6b:40:ff:2f:91:c8:35:e7:fb:8c:49:63: 45:59:c4:e7:00:80:c3:8a:67:04:f6:a2:5a:08:47:cf:3e:80: 50:4f:52:8c:ff:e1:15:35:8d:14:9e:9f:c9:6e:b9:74:cc:1c: a7:8a:d1:11:58:a6:3c:fa:2c:94:78:f5:54:a6:8e:fc:a8:b3: 0a:91:b5:80:9a:c8:3a:1a:1e:f8:2c:5e:06:cb:be:d1:5b:43: 60:60:01:1e:9b:5c:bf:20:4b:65:56:dc:5f:7f:0a:cf:f1:51: ca:70:82:6c:62:be:b9:35:0b:ab:8c:96:61:74:c0:c8:b7:d0: ca:de:81:eb:ac:e3:32:51:a3:2e:cc:a0:9a:f9:1c:c4:b4:a9: 21:ae:5b:9a:02:ed:55:95:13:56:4c:17:28:73:23:c6:98:e1: 5e:cf:01:b0:14:c4:64:7d:c4:94:86:9a:e9:eb:88:8c:99:bb: 93:6b:13:86:6e:c3:e1:e5:7c:df:27:c1:27:80:51:0b:8f:53: c9:76:cd:bb:07:5a:a9:df:07:60:11:81:94:47:d5:e3:2f:43: 6f:1d:6d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUxMTAyMjMwMTI2WhcNMjUxMTA5MjMwMTI2WjAYMRYwFAYD VQQDEw02OTA3ZTJjNi04Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDu/4+5w0TyjCCXyQJI2Us86slONrX752rA5G7ZIFNRfDuYjpof6I7Lr/tSV 0fWHOuOk/ZWc7qU0gF7QjAcUxXbO/LL7H+0mzUFZwyRY1Ha/ES/t8+U3zwJsjrpd 2cJo6uSwMAFY4lvYT9of2/C5FnFrEcfASiup72GRHXE4uD++8tJR2MhwxOEOiHFW GQfoHOwHFBKL9rCXDrG0iwGi07JUG8Fp+SfMDszci2h2tXtUnjwMu1vU9nlzLaoH /2Vva5/EpeXrBVnptPQggrnFAydSWUZipX9LWEQ2o5jbEfcGJBqWGBWr0kwkb0tY IKieWJlctYhfjuIwTYS6KqStdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuxKeNU k5RAuhx1BxJ+Y7IBsu4dMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEMXQXMrG+Ua1P6a2JxeJw+YOo1PDVRauc5XkTiAf1oMGozUJKE1jZ oLVrQP8vkcg15/uMSWNFWcTnAIDDimcE9qJaCEfPPoBQT1KM/+EVNY0Unp/Jbrl0 zBynitERWKY8+iyUePVUpo78qLMKkbWAmsg6Gh74LF4Gy77RW0NgYAEem1y/IEtl VtxffwrP8VHKcIJsYr65NQurjJZhdMDIt9DK3oHrrOMyUaMuzKCa+RzEtKkhrlua Au1VlRNWTBcocyPGmOFezwGwFMRkfcSUhprp64iMmbuTaxOGbsPh5XzfJ8EngFEL j1PJds27B1qp3wdgEYGUR9XjL0NvHW3o -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:39 2025 by rpki-client