$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft File: md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft (raw, json) Hash identifier: zTB347mbZ5pmRyZaYYGPiVcof7q33DvLL9FEXIsR39U= Subject key identifier: E1:0E:BC:60:9A:E5:1F:76:93:FE:8D:EB:BF:38:72:EB:25:A1:9E:CE Authority key identifier: 99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D Certificate issuer: /CN=A91B08F7/serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D Certificate serial: 17BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft Manifest number: 1C0F Signing time: Sun 02 Nov 2025 16:34:02 +0000 Manifest this update: Sun 02 Nov 2025 16:34:01 +0000 Manifest next update: Sun 09 Nov 2025 16:34:01 +0000 Files and hashes: 1: md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl (hash: kVW04Yk4SCmNpSFlTGHIvzagz87zf3JfbIcZIGygTpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6076 (0x17bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D Validity Not Before: Nov 2 16:34:01 2025 GMT Not After : Nov 9 16:34:01 2025 GMT Subject: CN=690787f9-4b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:4d:21:13:5b:e7:9f:1a:7d:d4:17:da:36: 91:2d:c6:b8:bd:13:c2:29:98:07:a5:bb:bc:cf:0d: b0:4f:f3:18:41:cf:90:6b:8b:c0:7c:a2:ce:df:94: af:bd:7e:a6:89:9e:ce:89:0a:f2:c6:eb:d4:60:5a: 17:39:b8:85:6d:fb:fb:bf:20:5c:68:c7:ae:bf:f9: ee:d4:1b:b9:db:c1:ca:d2:85:dc:fe:3d:f1:5d:88: 71:52:ba:05:a7:d7:ba:12:c5:32:31:ec:5d:05:2b: dc:e2:45:1d:f5:bc:fd:1d:65:d6:6e:74:8e:6f:9f: 53:27:6d:a4:ba:e9:6a:44:0a:b2:e2:38:55:55:ff: 0e:90:43:51:fc:f9:d7:50:5a:1e:f9:04:e3:95:9d: c7:fb:12:4a:c3:49:75:23:f6:07:e4:45:d1:79:f6: c1:06:7e:f0:d2:48:c4:0c:66:41:ce:f6:bd:d2:eb: 53:dd:26:84:11:0c:03:f3:19:8c:23:3d:f0:1c:1c: 59:4c:9a:69:3c:26:a1:7d:6d:6f:38:45:ad:b3:37: 63:8e:5b:57:83:07:b5:4e:43:9d:4a:95:95:3b:6e: 90:6a:75:ca:bb:9d:c5:ec:e4:a8:c6:9d:42:f1:ec: 26:f4:1b:a6:2d:bd:a7:ec:fa:80:4b:79:c0:52:80: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0E:BC:60:9A:E5:1F:76:93:FE:8D:EB:BF:38:72:EB:25:A1:9E:CE X509v3 Authority Key Identifier: keyid:99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:5c:20:44:de:9e:09:df:b0:2d:50:7a:19:42:5b:fd:ed:61: 4e:90:b5:fc:ab:6a:64:24:0a:67:ad:65:96:cc:f4:4e:d1:8c: ea:e5:e0:ee:4b:b1:f6:c8:f4:9e:a9:af:42:af:27:34:cc:08: 38:20:7a:19:7a:15:4d:06:74:6a:53:9e:69:20:48:57:1a:48: ef:12:f2:7f:3f:ac:97:ef:ad:33:f7:7a:2b:e0:80:3e:76:22: eb:0a:e9:aa:30:de:87:30:48:ab:e3:9e:02:38:64:4c:c9:a3: a1:6b:0e:78:e4:02:eb:e9:70:33:d5:e8:6e:3f:11:f7:13:9f: 5d:38:26:81:b9:59:b9:9d:3a:b4:91:d6:c7:0b:2f:e4:93:79: 5e:6f:d2:87:5f:7a:4a:69:40:86:d3:55:49:45:c6:45:f8:bb: d8:2e:b9:b6:21:82:10:42:23:cf:91:4c:4e:e9:bb:55:42:06: 63:8c:4f:41:c5:46:85:91:30:29:db:93:71:7e:e2:40:4c:0e: 4f:8e:54:41:b2:ce:ed:bb:4d:ab:94:4d:05:b4:f6:04:6d:a5: 16:c2:5b:f4:17:20:32:c0:08:3e:eb:16:40:d9:21:36:60:a0: 83:a9:5e:1d:f1:06:2d:b7:fd:ee:3d:2a:29:74:0b:7b:a2:f5: 71:cd:8c:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKDk5REUyQzM3RDFBNjJCQThCOTdCNUExQ0ZEMkNEMjk0 MEIwRDREMEQwHhcNMjUxMTAyMTYzNDAxWhcNMjUxMTA5MTYzNDAxWjAYMRYwFAYD VQQDEw02OTA3ODdmOS00YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TRNIRNb558afdQX2jaRLca4vRPCKZgHpbu8zw2wT/MYQc+Qa4vAfKLO35Sv vX6miZ7OiQryxuvUYFoXObiFbfv7vyBcaMeuv/nu1Bu528HK0oXc/j3xXYhxUroF p9e6EsUyMexdBSvc4kUd9bz9HWXWbnSOb59TJ22kuulqRAqy4jhVVf8OkENR/PnX UFoe+QTjlZ3H+xJKw0l1I/YH5EXRefbBBn7w0kjEDGZBzva90utT3SaEEQwD8xmM Iz3wHBxZTJppPCahfW1vOEWtszdjjltXgwe1TkOdSpWVO26QanXKu53F7OSoxp1C 8ewm9BumLb2n7PqAS3nAUoBk1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEOvGCa 5R92k/6N6784cusloZ7OMB8GA1UdIwQYMBaAFJneLDfRpiuouXtaHP0s0pQLDU0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2aTVlMW9jX1N6U2xBc05U UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kNHNOOUdtSzZpNWUxb2NfU3pTbEFzTlRRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2 aTVlMW9jX1N6U2xBc05UUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5XCBE3p4J37AtUHoZQlv97WFOkLX8q2pkJApnrWWWzPRO0Yzq5eDu S7H2yPSeqa9Cryc0zAg4IHoZehVNBnRqU55pIEhXGkjvEvJ/P6yX760z93or4IA+ diLrCumqMN6HMEir454COGRMyaOhaw545ALr6XAz1ehuPxH3E59dOCaBuVm5nTq0 kdbHCy/kk3leb9KHX3pKaUCG01VJRcZF+LvYLrm2IYIQQiPPkUxO6btVQgZjjE9B xUaFkTAp25NxfuJATA5PjlRBss7tu02rlE0FtPYEbaUWwlv0FyAywAg+6xZA2SE2 YKCDqV4d8QYtt/3uPSopdAt7ovVxzYzK -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:51 2025 by rpki-client