$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json) Hash identifier: bywIcasSfDoMKUo8Q9Tb8XXje/N8aWNxmprE/U+jyxQ= Subject key identifier: 4D:4A:5B:83:37:60:CD:95:7C:A3:48:07:B1:4D:99:54:CA:47:6D:78 Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft Manifest number: 1C9A Signing time: Tue 04 Nov 2025 16:16:30 +0000 Manifest this update: Tue 04 Nov 2025 16:16:30 +0000 Manifest next update: Tue 11 Nov 2025 16:16:30 +0000 Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: EN/5H4yY5jRKhKKUiuNJmnAVInyX03W178Ko5ARR6uU=) 2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: mbirPrlAXH5YzuouoktzvpQ1tw+oe1CclK8OL36QAb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7346 (0x1cb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC Validity Not Before: Nov 4 16:16:30 2025 GMT Not After : Nov 11 16:16:30 2025 GMT Subject: CN=690a26de-43df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:1f:65:42:4c:d5:35:6d:ea:08:7a:23:4e: 04:ae:96:ab:ae:40:4f:d3:f9:6e:c3:89:28:33:90: e7:f7:ff:af:a0:39:55:2f:a7:a1:a4:d8:cc:ee:f2: ad:d8:65:c4:8b:a7:86:8c:15:ee:43:de:1c:96:78: 59:5d:9b:1e:11:d1:a8:5d:f4:a7:bf:c4:3d:30:62: 97:fd:45:93:f5:c5:43:b7:7b:35:28:48:71:c0:47: 49:67:f9:59:d9:10:e7:a1:ad:8b:cf:cd:a0:40:b3: a6:82:f4:ba:f5:81:1f:cb:cd:c9:4f:ae:12:18:5c: 5a:0f:3f:14:ca:75:45:e1:0d:f1:61:b7:7f:51:a0: 4f:72:11:4c:58:1c:38:7e:ac:c3:d4:83:56:5a:51: 62:c6:8f:5d:87:80:91:3e:bd:23:be:c4:00:92:68: c3:8e:05:b0:53:fa:b3:ea:8a:23:03:9b:40:f9:77: d4:e3:0c:de:10:f9:b1:fe:f8:fd:d4:c9:6e:92:f8: 54:74:55:71:4c:60:4c:0f:c3:f8:89:fa:e4:29:11: 62:87:78:30:99:14:79:6d:1a:b6:78:f8:29:56:9c: bb:41:1e:ef:59:52:c4:6f:71:30:17:72:86:82:17: 89:3e:85:ed:7c:9b:3b:05:df:1e:a9:7a:37:c1:56: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4A:5B:83:37:60:CD:95:7C:A3:48:07:B1:4D:99:54:CA:47:6D:78 X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:68:19:78:e0:35:dc:e5:6a:22:99:ad:b7:5a:0e:5e:51:d6: 59:de:69:73:ec:38:fa:3f:20:01:06:a0:9f:68:9b:77:38:87: 14:a6:cf:58:fa:5c:fe:87:72:fd:e5:8d:b5:c4:8c:da:e8:68: 5b:0d:6a:65:59:ba:24:61:ab:c5:e7:74:49:bc:57:5d:4f:5b: a7:80:17:fd:ff:94:d7:2b:64:01:fb:a1:e3:bb:1d:81:b4:b5: b0:fc:29:03:45:bf:44:d4:b7:92:76:3f:e1:45:52:55:37:1b: ae:14:85:d6:ee:8f:19:40:47:22:ff:81:cb:65:10:a1:78:0d: 05:25:8a:47:4e:86:96:92:4c:fe:b4:32:d1:34:6f:cd:72:48: 78:e4:d7:81:36:2e:b0:96:9a:21:03:f5:aa:8f:7c:c3:9b:82: f8:04:de:51:67:7a:19:b9:4a:93:41:0b:6d:26:bf:c0:18:54: 7a:6d:ed:b9:63:d4:b3:d9:fc:48:99:14:06:4e:28:55:82:95: f9:e7:3e:b2:16:44:d7:19:22:8a:49:cb:b9:5a:55:e5:a2:cd: f9:f9:a7:fb:33:ee:2d:3f:5d:bc:05:78:c4:a8:68:ef:66:0d: 36:cd:12:8b:18:fd:22:e6:ea:15:be:0e:3c:77:d6:f2:fb:f0: 0d:59:0d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjUxMTA0MTYxNjMwWhcNMjUxMTExMTYxNjMwWjAYMRYwFAYD VQQDEw02OTBhMjZkZS00M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QgfZUJM1TVt6gh6I04ErparrkBP0/luw4koM5Dn9/+voDlVL6ehpNjM7vKt 2GXEi6eGjBXuQ94clnhZXZseEdGoXfSnv8Q9MGKX/UWT9cVDt3s1KEhxwEdJZ/lZ 2RDnoa2Lz82gQLOmgvS69YEfy83JT64SGFxaDz8UynVF4Q3xYbd/UaBPchFMWBw4 fqzD1INWWlFixo9dh4CRPr0jvsQAkmjDjgWwU/qz6oojA5tA+XfU4wzeEPmx/vj9 1MlukvhUdFVxTGBMD8P4ifrkKRFih3gwmRR5bRq2ePgpVpy7QR7vWVLEb3EwF3KG gheJPoXtfJs7Bd8eqXo3wVblnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1KW4M3 YM2VfKNIB7FNmVTKR214MB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzBGQS82NEZCN0UxQ0UzQTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdn WUpNQXJva1VnU0dFdVB3OXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzaBl44DXc5Woima23Wg5eUdZZ3mlz7Dj6PyABBqCfaJt3OIcUps9Y +lz+h3L95Y21xIza6GhbDWplWbokYavF53RJvFddT1ungBf9/5TXK2QB+6Hjux2B tLWw/CkDRb9E1LeSdj/hRVJVNxuuFIXW7o8ZQEci/4HLZRCheA0FJYpHToaWkkz+ tDLRNG/Nckh45NeBNi6wlpohA/Wqj3zDm4L4BN5RZ3oZuUqTQQttJr/AGFR6be25 Y9Sz2fxImRQGTihVgpX55z6yFkTXGSKKScu5WlXlos35+af7M+4tP128BXjEqGjv Zg02zRKLGP0i5uoVvg48d9by+/ANWQ3n -----END CERTIFICATE-----Generated at Wed Nov 5 16:48:31 2025 by rpki-client