$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json) Hash identifier: MzRxca8obrP85h31MukAVId7h+mIoswhtkS/cjSUylQ= Subject key identifier: 27:0A:11:34:93:47:DA:75:29:15:8E:5B:A6:B5:29:CC:04:94:B4:2A Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft Manifest number: 69 Signing time: Wed 05 Nov 2025 07:11:21 +0000 Manifest this update: Wed 05 Nov 2025 07:11:21 +0000 Manifest next update: Wed 12 Nov 2025 07:11:21 +0000 Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: rGGml6z69hUI8WUga4y1VmqoPSwHzsm3apQABhDsYm0=) 2: 13EB65D41AB511F0A1F0A34BC4F9AE02.roa (hash: gBn5RMkmkclmyZmL4wf1QAerjjB7P04/rGPHIIjACSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Validity Not Before: Nov 5 07:11:21 2025 GMT Not After : Nov 12 07:11:21 2025 GMT Subject: CN=690af899-43d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:10:fd:a8:28:73:0e:ac:ae:15:59:7d:c1: c3:c6:75:31:23:47:0a:fb:a6:de:35:48:f5:e3:20: 36:94:28:ba:27:e0:d3:11:a9:40:7a:5f:88:88:37: 1c:13:5b:b6:6e:6f:eb:e5:42:2b:cd:af:be:60:d3: 1e:5e:f4:86:18:61:72:85:f7:f6:06:8b:e0:f4:83: 63:22:fd:43:0e:2a:7c:c0:da:c7:a2:36:bd:70:4e: cf:83:55:36:80:13:20:4d:80:a1:66:3a:86:8e:6d: b2:75:9e:c2:ff:a5:17:b4:a0:cc:ea:8b:ee:b0:0f: 15:38:a3:b7:39:3b:55:7d:b0:e4:2f:2a:81:f9:94: 5f:38:ed:f0:a7:45:28:5b:cc:c5:d5:ee:d7:71:af: dd:f0:0b:95:cc:08:88:fd:da:9f:fa:33:d4:36:e0: d6:03:96:9a:69:3d:7c:78:93:8a:6a:f1:97:21:98: b5:ac:79:d6:87:80:ca:d6:ee:62:6b:51:7f:fc:6a: fd:71:ed:19:2e:e9:bd:9d:62:35:72:86:cb:15:d1: 20:5b:f9:db:2d:67:7e:b4:1e:e2:69:04:a0:45:c1: 66:b3:2c:ec:67:87:66:ad:b0:ca:80:4d:4f:c1:bf: 3a:e9:21:0d:3e:fc:f5:e8:7f:2b:6e:54:ec:51:19: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:11:34:93:47:DA:75:29:15:8E:5B:A6:B5:29:CC:04:94:B4:2A X509v3 Authority Key Identifier: keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7c:2f:62:f9:88:22:74:8a:cc:ff:fb:69:11:42:67:77:3a: 7c:8a:bf:4f:b1:e9:b6:c3:33:d7:bb:ce:c9:66:6d:69:5f:2d: 79:b9:e5:68:e1:7b:d4:9b:9b:4b:b8:3c:69:f2:ae:1e:fc:78: 25:96:d6:df:2a:09:0e:a5:6d:a5:c0:0b:06:5a:85:a9:0d:07: ef:f8:3c:4d:0a:40:9f:87:cc:f3:b1:c7:68:be:8c:8f:6e:75: 35:d5:04:1c:c9:9f:c6:c9:1b:44:ae:81:85:85:13:a8:5d:2b: 11:86:e5:73:09:05:d6:8b:d7:68:c3:45:45:93:ac:9e:5f:50: 4b:f3:16:8e:7b:df:e6:6b:df:2f:d7:2d:48:8b:7e:cc:a6:29: 30:41:e2:f7:63:df:a9:ab:da:c6:60:49:12:f1:fb:64:f0:87: 42:d9:bc:cc:a8:eb:11:db:d8:ac:2c:e2:d1:9a:18:b4:17:ab: 6f:5e:54:eb:bc:f4:0b:84:28:f4:4e:52:81:ef:91:1e:4b:42: 00:9b:a8:a9:b3:09:11:70:92:b8:6e:7a:ae:7e:41:fe:c5:8c: df:25:db:e3:d1:30:85:8c:63:7b:20:7c:b7:08:00:a6:ee:0f: e6:e9:9e:d4:cb:20:e7:96:43:ef:c7:76:09:ec:5f:54:76:81: 68:7e:e8:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkVERTExMC8GA1UEBRMoOURCMjU4QzE3MEIyMzIyOTREODYzRjYwRDJEQzAxMjND REFBRTc4OTAeFw0yNTExMDUwNzExMjFaFw0yNTExMTIwNzExMjFaMBgxFjAUBgNV BAMTDTY5MGFmODk5LTQzZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbchD9qChzDqyuFVl9wcPGdTEjRwr7pt41SPXjIDaUKLon4NMRqUB6X4iINxwT W7Zub+vlQivNr75g0x5e9IYYYXKF9/YGi+D0g2Mi/UMOKnzA2seiNr1wTs+DVTaA EyBNgKFmOoaObbJ1nsL/pRe0oMzqi+6wDxU4o7c5O1V9sOQvKoH5lF847fCnRShb zMXV7tdxr93wC5XMCIj92p/6M9Q24NYDlpppPXx4k4pq8ZchmLWsedaHgMrW7mJr UX/8av1x7Rku6b2dYjVyhssV0SBb+dstZ360HuJpBKBFwWazLOxnh2atsMqATU/B vzrpIQ0+/PXofytuVOxRGTTrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJwoRNJNH 2nUpFY5bprUpzASUtCowHwYDVR0jBBgwFoAUnbJYwXCyMilNhj9g0twBI82q54kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRURFLzU1Q0IyRTA0MUFC NDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmJKWXdYQ3lNaWxOaGo5ZzB0d0JJODJxNTRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RURFLzU1Q0IyRTA0MUFCNDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWls TmhqOWcwdHdCSTgycTU0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACh8L2L5iCJ0isz/+2kRQmd3OnyKv0+x6bbDM9e7zslmbWlfLXm55Wjh e9Sbm0u4PGnyrh78eCWW1t8qCQ6lbaXACwZahakNB+/4PE0KQJ+HzPOxx2i+jI9u dTXVBBzJn8bJG0SugYWFE6hdKxGG5XMJBdaL12jDRUWTrJ5fUEvzFo573+Zr3y/X LUiLfsymKTBB4vdj36mr2sZgSRLx+2Twh0LZvMyo6xHb2Kws4tGaGLQXq29eVOu8 9AuEKPROUoHvkR5LQgCbqKmzCRFwkrhueq5+Qf7FjN8l2+PRMIWMY3sgfLcIAKbu D+bpntTLIOeWQ+/HdgnsX1R2gWh+6PE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:39 2025 by rpki-client