$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft File: nxMMOdAwdvSok0-jNJXO2TfiMKs.mft (raw, json) Hash identifier: Z8Dj3kxAD7YNpxnadZdHLzLeSnDgsNaLaJfSWbgVqUQ= Subject key identifier: BD:74:8C:6D:97:05:E7:16:9C:E8:3B:A0:C8:1C:F0:F0:94:5D:8A:0B Authority key identifier: 9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB Certificate issuer: /CN=A91430D6/serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft Manifest number: 3B Signing time: Mon 03 Nov 2025 07:29:54 +0000 Manifest this update: Mon 03 Nov 2025 07:29:53 +0000 Manifest next update: Mon 10 Nov 2025 07:29:53 +0000 Files and hashes: 1: nxMMOdAwdvSok0-jNJXO2TfiMKs.crl (hash: VsqwlWCyI1mx0h3ODEm2b89IVzYprUSkkankEXulZ1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB Validity Not Before: Nov 3 07:29:53 2025 GMT Not After : Nov 10 07:29:53 2025 GMT Subject: CN=690859f1-e8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:fd:a1:f6:de:16:7d:fb:ac:34:f7:94:f3: 33:e3:56:5f:7a:5a:51:69:82:13:b3:a8:ae:64:af: f7:7e:55:81:fd:6d:a2:19:8c:8a:42:16:c7:90:d8: 14:3c:bb:ce:0a:f6:6a:79:4d:61:6e:fc:70:e8:89: 1b:de:97:a2:88:a1:84:f8:57:eb:dc:71:51:64:d0: c5:a6:dd:55:97:c5:d1:9e:5a:d0:7d:72:a8:af:c4: a9:69:c3:86:04:87:9d:50:56:69:a2:10:61:57:0f: 7e:f6:ef:33:d8:be:f9:b4:19:f9:86:d9:01:71:b0: e7:4a:5a:f8:3a:27:7d:7b:60:c6:df:17:d0:5e:56: ee:aa:a7:73:f5:37:1c:0a:86:f3:61:0b:c8:66:d2: b5:a6:de:44:91:c2:1a:a0:fd:d5:c6:5c:f3:72:56: 46:9e:bd:e2:48:1f:46:fc:c4:c4:bc:54:ad:1c:0b: 03:61:82:92:6a:87:88:cd:13:f4:21:d0:e6:37:df: bf:4a:1c:32:01:d9:3e:c3:45:70:0c:8c:27:e3:08: 7d:89:4a:20:75:07:f6:37:37:04:4e:a3:94:9d:b0: 48:aa:e1:e7:41:2b:7d:ad:02:04:e7:dc:e4:77:61: 47:1c:fa:1c:1e:78:c9:44:3c:ce:3c:93:6e:41:41: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:74:8C:6D:97:05:E7:16:9C:E8:3B:A0:C8:1C:F0:F0:94:5D:8A:0B X509v3 Authority Key Identifier: keyid:9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:59:b0:3b:f1:ad:19:7d:16:8f:6c:c8:b2:95:39:f2:83:e2: 66:3b:aa:85:2d:13:1a:71:77:90:70:e9:f1:9e:9e:d7:26:15: b3:40:a2:b0:c9:7e:91:ff:0e:f8:be:ae:f5:b9:32:b7:ba:67: 75:46:30:1e:17:66:6b:53:e1:d2:61:0d:6f:c3:f6:18:75:b9: 9a:69:cb:87:57:b3:4c:94:bf:7f:f9:b2:39:7a:67:19:f8:1f: c3:93:99:2d:e5:2a:1c:ed:ae:0d:3c:37:a0:10:3a:a0:b2:6f: 3d:1c:b2:e4:75:fd:1a:38:48:c7:b0:22:51:69:b6:68:bf:57: 28:b9:f7:4d:59:cc:0b:08:68:ca:de:c3:26:f1:ee:2e:1c:17: 9a:ed:12:8e:bc:b4:01:b7:d7:ad:7d:48:25:f8:cb:eb:1c:22: 6b:e1:2c:ca:5a:25:04:0b:25:35:4b:b8:96:60:41:af:97:dd: 3b:8c:d4:4c:6e:31:e8:79:de:90:7e:e7:4c:98:98:ae:31:9f: b6:6f:8e:3c:8a:6e:49:3c:ee:b6:75:b3:29:5e:06:a6:b8:2b: 3b:0a:af:89:68:20:d4:17:bc:f9:34:66:80:f5:06:89:08:07: 03:4e:ca:69:e6:ef:76:e3:df:7c:49:7c:91:3b:16:94:72:c9: cb:96:a8:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoOUYxMzBDMzlEMDMwNzZGNEE4OTM0RkEzMzQ5NUNFRDkz N0UyMzBBQjAeFw0yNTExMDMwNzI5NTNaFw0yNTExMTAwNzI5NTNaMBgxFjAUBgNV BAMTDTY5MDg1OWYxLWU4YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDolv2h9t4WffusNPeU8zPjVl96WlFpghOzqK5kr/d+VYH9baIZjIpCFseQ2BQ8 u84K9mp5TWFu/HDoiRvel6KIoYT4V+vccVFk0MWm3VWXxdGeWtB9cqivxKlpw4YE h51QVmmiEGFXD3727zPYvvm0GfmG2QFxsOdKWvg6J317YMbfF9BeVu6qp3P1NxwK hvNhC8hm0rWm3kSRwhqg/dXGXPNyVkaeveJIH0b8xMS8VK0cCwNhgpJqh4jNE/Qh 0OY3379KHDIB2T7DRXAMjCfjCH2JSiB1B/Y3NwROo5SdsEiq4edBK32tAgTn3OR3 YUcc+hweeMlEPM48k25BQYB1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvXSMbZcF 5xac6DugyBzw8JRdigswHwYDVR0jBBgwFoAUnxMMOdAwdvSok0+jNJXO2TfiMKsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzIwRjlGM0IwNUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL254TU1PZEF3ZHZTb2swLWpOSlhPMlRmaU1L cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnhNTU9kQXdkdlNvazAtak5KWE8yVGZpTUtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzIwRjlGM0IwNUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL254TU1PZEF3ZHZT b2swLWpOSlhPMlRmaU1Lcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJZZsDvxrRl9Fo9syLKVOfKD4mY7qoUtExpxd5Bw6fGentcmFbNAorDJ fpH/Dvi+rvW5Mre6Z3VGMB4XZmtT4dJhDW/D9hh1uZppy4dXs0yUv3/5sjl6Zxn4 H8OTmS3lKhztrg08N6AQOqCybz0csuR1/Ro4SMewIlFptmi/Vyi5901ZzAsIaMre wybx7i4cF5rtEo68tAG31619SCX4y+scImvhLMpaJQQLJTVLuJZgQa+X3TuM1Exu Meh53pB+50yYmK4xn7ZvjjyKbkk87rZ1syleBqa4KzsKr4loINQXvPk0ZoD1BokI BwNOymnm73bj33xJfJE7FpRyycuWqM8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:09 2025 by rpki-client