$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft File: N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json) Hash identifier: GX3JLEWyMsC1HY7/cKUouOg7AUb/LfV3fGDaLFLiuF8= Subject key identifier: DE:79:0D:E6:34:79:1A:F1:2E:A1:6A:FA:80:40:9E:FE:61:08:DD:19 Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 Certificate issuer: /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Certificate serial: 17BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft Manifest number: 537B Signing time: Tue 04 Nov 2025 15:07:29 +0000 Manifest this update: Tue 04 Nov 2025 15:07:29 +0000 Manifest next update: Tue 11 Nov 2025 15:07:29 +0000 Files and hashes: 1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: U0NmXPXrYL8D4pKAv/AjstygNVKIlnHJkbdkevgtSD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6079 (0x17bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Validity Not Before: Nov 4 15:07:29 2025 GMT Not After : Nov 11 15:07:29 2025 GMT Subject: CN=690a16b1-bfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:69:5a:9c:1b:b1:16:06:d4:a2:d7:7c:7a: 67:f9:a5:a9:ca:77:f7:fc:1d:0f:f7:0d:f3:17:8f: ee:8b:b9:71:4b:e0:be:2a:05:2e:75:5d:1b:25:5a: 9c:9b:ed:55:7d:46:1a:2b:b3:94:f4:60:5c:f2:55: 82:9c:72:c1:df:c4:bd:5a:8a:7e:96:a4:8e:85:2e: e1:3b:6e:87:1f:db:80:30:2a:66:07:ea:8c:7a:ee: 38:83:29:35:38:61:42:3b:d9:e6:f3:e6:76:41:cb: db:7c:7f:01:a4:68:72:c4:8c:de:ed:ae:dd:2d:0f: c7:46:ab:53:97:c6:21:36:4a:5a:cb:cd:5c:02:47: 55:dd:57:f2:f3:67:8e:68:59:28:0d:48:99:d8:2b: 9b:9b:78:f0:07:c7:5f:ff:d5:13:b5:07:7f:c8:b5: 9c:42:a0:de:e9:3c:f4:bd:6d:a3:19:9e:f9:79:34: aa:15:59:de:4d:91:be:a7:af:01:a9:b5:df:e8:88: d6:c1:6a:63:a9:cf:e7:5c:b7:ba:99:5c:d9:fb:80: 76:9f:07:d9:82:34:23:35:9d:69:dc:55:2d:53:10: bc:ed:ae:82:64:b3:70:dc:60:45:b0:73:9d:cc:16: 79:40:d1:6d:6b:ad:15:c5:43:9a:8a:d4:5c:3a:7b: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:0D:E6:34:79:1A:F1:2E:A1:6A:FA:80:40:9E:FE:61:08:DD:19 X509v3 Authority Key Identifier: keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e5:74:e6:0b:b9:8f:fc:56:ad:eb:e6:7d:91:ff:13:fb:90: 4f:3a:af:0b:e1:f7:e5:d5:1e:a3:9f:30:d1:d5:8a:4d:f6:bb: c4:33:2d:01:b9:79:48:f0:4d:fb:47:70:58:04:69:1c:89:88: 3e:cf:94:35:14:12:30:fc:9f:cf:3d:e0:50:48:28:97:f0:83: 09:b3:66:64:f0:db:3c:fe:6b:41:a7:3a:a6:03:5f:9a:04:e5: 47:ac:83:86:88:b3:11:89:44:99:88:cd:c9:88:fc:0b:e2:e8: 7a:32:48:e5:e2:8e:62:68:23:72:0e:3f:74:3b:b5:8b:9d:17: 57:b4:5e:14:66:50:30:3b:b0:e8:41:07:2f:ea:ec:c0:e7:71: 5d:a3:70:34:46:fe:73:9d:4b:79:ae:18:95:54:60:f7:3e:59: 59:e2:c8:40:60:67:3a:e9:99:39:e7:14:4e:82:56:19:77:15: 2b:eb:42:25:a4:ff:09:3b:c3:f1:93:b7:34:73:f1:20:38:a4: ed:ad:1f:19:83:11:de:c2:1f:04:0a:a9:06:93:09:ee:7c:cf: 54:fb:f4:46:bf:3d:c2:9f:6d:c0:f9:fd:ad:0e:8b:62:42:31: 7e:0b:0b:ff:c8:84:60:63:08:71:41:70:69:7e:d4:8f:2a:e0: f3:cd:d4:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDM3RjUwRDlERTU0RTZGRDZFRUI1MzJBNzYxNUNGMzBF RDI0MkVGNjEwHhcNMjUxMTA0MTUwNzI5WhcNMjUxMTExMTUwNzI5WjAYMRYwFAYD VQQDEw02OTBhMTZiMS1iZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX9pWpwbsRYG1KLXfHpn+aWpynf3/B0P9w3zF4/ui7lxS+C+KgUudV0bJVqc m+1VfUYaK7OU9GBc8lWCnHLB38S9Wop+lqSOhS7hO26HH9uAMCpmB+qMeu44gyk1 OGFCO9nm8+Z2QcvbfH8BpGhyxIze7a7dLQ/HRqtTl8YhNkpay81cAkdV3Vfy82eO aFkoDUiZ2Cubm3jwB8df/9UTtQd/yLWcQqDe6Tz0vW2jGZ75eTSqFVneTZG+p68B qbXf6IjWwWpjqc/nXLe6mVzZ+4B2nwfZgjQjNZ1p3FUtUxC87a6CZLNw3GBFsHOd zBZ5QNFta60VxUOaitRcOns5vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN55DeY0 eRrxLqFq+oBAnv5hCN0ZMB8GA1UdIwQYMBaAFDf1DZ3lTm/W7rUyp2Fc8w7SQu9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5YnV0VEtuWVZ6ekR0SkM3 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05fVU5uZVZPYjlidXRUS25ZVnp6RHRKQzcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5 YnV0VEtuWVZ6ekR0SkM3MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA55XTmC7mP/Fat6+Z9kf8T+5BPOq8L4ffl1R6jnzDR1YpN9rvEMy0B uXlI8E37R3BYBGkciYg+z5Q1FBIw/J/PPeBQSCiX8IMJs2Zk8Ns8/mtBpzqmA1+a BOVHrIOGiLMRiUSZiM3JiPwL4uh6Mkjl4o5iaCNyDj90O7WLnRdXtF4UZlAwO7Do QQcv6uzA53Fdo3A0Rv5znUt5rhiVVGD3PllZ4shAYGc66Zk55xROglYZdxUr60Il pP8JO8Pxk7c0c/EgOKTtrR8ZgxHewh8ECqkGkwnufM9U+/RGvz3Cn23A+f2tDoti QjF+Cwv/yIRgYwhxQXBpftSPKuDzzdSN -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:15 2025 by rpki-client