$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: HXt0ax939NQzjdMNoDt5l5I3u8A5zRLwiKlPdBoRPMA= Subject key identifier: 42:34:80:4C:60:7D:2E:86:54:19:7D:F9:6C:8D:61:02:DF:6D:68:58 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 052B Signing time: Tue 04 Nov 2025 23:43:34 +0000 Manifest this update: Tue 04 Nov 2025 23:43:33 +0000 Manifest next update: Tue 11 Nov 2025 23:43:33 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: 1UXBViMVHBTzC1DcTCB7FKjtYf1wxhqREBw9/aB6d5U=) 2: D2D714387F6A11F0932D5109C4F9AE02.roa (hash: Cng37RmGs09g9dbHO+ShWe6tnoOJsgQFmF1ZQB1DAkI=) 3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=) 4: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=) 5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Nov 4 23:43:33 2025 GMT Not After : Nov 11 23:43:33 2025 GMT Subject: CN=690a8fa5-1232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:e2:63:c1:2a:4f:82:b5:bb:51:99:5c:9f: f9:ba:dd:4f:46:8f:fb:0d:ec:67:2d:e1:f0:93:66: 8b:b7:a2:28:f6:60:76:c1:17:c6:48:66:49:39:40: fd:01:47:73:68:b8:6f:af:83:1d:8a:e1:ac:a1:85: 9d:8a:e0:ac:be:b1:eb:49:0b:24:7e:0c:53:75:26: 2f:8f:bb:ab:4d:10:9d:8f:d8:12:53:6c:7a:d8:e9: a3:ac:26:23:fa:79:3e:84:eb:10:e7:1b:14:79:0f: 6a:ff:20:95:24:32:48:b6:2a:e5:6d:90:3b:43:00: d9:8a:c6:55:8b:57:e6:08:28:45:0a:ff:98:fa:00: c4:90:8e:60:4a:62:b7:19:26:2b:0e:83:74:9d:62: 16:43:10:f8:71:b4:54:7e:ed:16:ad:7e:33:f9:88: 16:06:1d:1f:91:6c:82:d5:80:58:0a:b8:56:c3:df: a4:d4:bc:0d:3f:0a:f4:e0:e6:9c:2b:19:ed:df:92: 62:8c:0e:94:81:7d:fb:07:52:04:da:86:9f:b6:c4: 87:c8:86:4c:3f:4b:34:9e:6a:04:00:e4:5b:09:38: af:86:b5:40:65:1d:79:a2:71:e8:32:39:a9:a1:19: 2c:40:f1:39:d9:8f:54:5f:e7:bb:b6:51:64:25:8b: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:34:80:4C:60:7D:2E:86:54:19:7D:F9:6C:8D:61:02:DF:6D:68:58 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:64:76:0c:84:02:e2:ac:c1:23:1b:81:d0:b9:d4:ea:5e:aa: ec:15:27:a7:6a:fd:1f:10:12:4f:34:47:47:3b:9e:8d:7b:2b: 87:dd:f7:44:d9:2b:99:01:64:27:a4:0a:9a:d4:a3:9f:25:a2: d6:d5:59:b1:2e:00:a2:a2:c7:36:8f:b8:e5:c9:88:be:d6:00: 61:d8:31:fc:ba:fd:7e:7b:e7:df:70:fb:11:1d:ef:29:61:bb: f2:ba:e4:37:e0:52:b0:fa:b0:cc:f9:46:ad:61:31:1a:17:32: 89:05:22:0f:86:f5:12:14:18:21:e9:ff:13:3c:80:64:c7:5c: 6a:48:c1:ca:00:f4:bd:7a:7c:38:4d:9a:8e:5b:7a:24:34:a7: b0:25:42:06:a0:ff:87:b7:b7:75:d6:9d:79:30:1f:88:a4:14: b4:f0:34:c9:01:dc:d0:07:3a:37:88:8a:21:55:62:f0:e8:67: 81:6d:12:eb:e5:c4:9e:d0:c6:2c:3e:82:64:5e:e8:7d:a6:0d: 3f:02:d0:19:cd:de:8e:f8:d9:40:bc:e7:eb:81:4e:eb:26:58: 4e:e0:cb:33:fe:f7:20:a8:4b:e8:e3:c8:6c:94:7f:2a:5f:0d: 68:49:2b:b2:f4:6b:c9:77:2e:57:22:e8:08:51:d6:fb:1a:28: c8:2c:97:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUxMTA0MjM0MzMzWhcNMjUxMTExMjM0MzMzWjAYMRYwFAYD VQQDEw02OTBhOGZhNS0xMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl77iY8EqT4K1u1GZXJ/5ut1PRo/7DexnLeHwk2aLt6Io9mB2wRfGSGZJOUD9 AUdzaLhvr4MdiuGsoYWdiuCsvrHrSQskfgxTdSYvj7urTRCdj9gSU2x62OmjrCYj +nk+hOsQ5xsUeQ9q/yCVJDJItirlbZA7QwDZisZVi1fmCChFCv+Y+gDEkI5gSmK3 GSYrDoN0nWIWQxD4cbRUfu0WrX4z+YgWBh0fkWyC1YBYCrhWw9+k1LwNPwr04Oac Kxnt35JijA6UgX37B1IE2oaftsSHyIZMP0s0nmoEAORbCTivhrVAZR15onHoMjmp oRksQPE52Y9UX+e7tlFkJYueOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI0gExg fS6GVBl9+WyNYQLfbWhYMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRZHYMhALirMEjG4HQudTqXqrsFSenav0fEBJPNEdHO56NeyuH3fdE 2SuZAWQnpAqa1KOfJaLW1VmxLgCiosc2j7jlyYi+1gBh2DH8uv1+e+ffcPsRHe8p YbvyuuQ34FKw+rDM+UatYTEaFzKJBSIPhvUSFBgh6f8TPIBkx1xqSMHKAPS9enw4 TZqOW3okNKewJUIGoP+Ht7d11p15MB+IpBS08DTJAdzQBzo3iIohVWLw6GeBbRLr 5cSe0MYsPoJkXuh9pg0/AtAZzd6O+NlAvOfrgU7rJlhO4Msz/vcgqEvo48hslH8q Xw1oSSuy9GvJdy5XIugIUdb7GijILJeg -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:51 2025 by rpki-client