$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft File: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json) Hash identifier: GwTg5IqS1ZGH9kQAzlRaJdVtxtMHpeNWmtcGsvmZI+Y= Subject key identifier: 7B:B2:DC:FE:CB:7A:78:0C:E7:7D:4A:E6:11:AB:D1:17:73:1C:BD:B4 Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Certificate serial: 05C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft Manifest number: 05BA Signing time: Sun 02 Nov 2025 23:06:06 +0000 Manifest this update: Sun 02 Nov 2025 23:06:06 +0000 Manifest next update: Sun 09 Nov 2025 23:06:06 +0000 Files and hashes: 1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: nKdpkAY0E4sL2OMsRMyLczg5pD8X/HFmqsvqE5eK+oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Validity Not Before: Nov 2 23:06:06 2025 GMT Not After : Nov 9 23:06:06 2025 GMT Subject: CN=6907e3de-9be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:77:fb:03:20:df:e2:8d:dd:fc:8f:ca:c7: ef:16:33:fc:60:67:1f:cb:83:8d:2b:b9:5f:2d:be: 74:15:8e:84:c9:4e:57:4c:ed:b8:18:0d:0c:4f:fb: af:29:2d:69:20:33:60:f6:9a:8c:5b:4c:85:1a:db: d0:61:ec:f6:bc:3d:72:09:8f:63:8c:c8:d2:c4:19: 40:34:60:2e:43:85:e8:af:06:b5:00:4f:8d:5e:0c: a2:ee:05:90:4d:06:c6:36:db:ec:62:4f:3b:01:31: 26:9f:c1:6b:41:ec:cb:12:e4:c8:8a:7a:f3:a0:54: fa:b8:98:4b:e6:c3:d5:05:0e:9b:08:f1:f2:cb:77: 7e:da:4f:dd:63:43:78:82:69:43:61:f6:1a:71:c2: 65:bd:65:7e:dc:78:65:21:24:12:a9:31:cb:60:9b: c7:1c:07:5b:dc:c1:f8:a2:77:3f:a9:0f:63:bd:52: 57:31:92:16:01:79:8f:6c:16:60:16:fe:25:0c:fe: 2d:3a:6c:b4:be:3c:f7:eb:ce:73:02:76:ff:a2:84: 52:e5:f7:3f:3c:71:c7:3c:5c:eb:d8:80:0c:34:78: 56:d1:f9:b8:08:8a:94:61:1d:39:a3:7d:72:af:3c: 20:35:32:ca:9e:ac:fc:51:ab:1d:c5:ef:30:88:75: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B2:DC:FE:CB:7A:78:0C:E7:7D:4A:E6:11:AB:D1:17:73:1C:BD:B4 X509v3 Authority Key Identifier: keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a8:56:87:a6:6a:0b:5a:c1:6f:27:01:a2:41:fa:dd:36:3a: 68:37:18:40:19:47:26:83:cb:02:af:9c:d9:03:16:b9:4a:47: f5:e0:fa:45:50:d0:eb:6e:30:4b:ec:56:4f:ce:f1:63:48:2b: 69:da:ef:5c:6e:df:d9:60:f0:ec:0d:05:6a:1e:ab:67:b9:0f: f0:9b:11:c9:12:a0:e2:4d:8f:a3:30:87:45:eb:5d:ee:b0:4e: 1d:9c:fd:c7:ea:c0:74:06:42:11:6d:c8:d1:57:f6:11:08:61: 3b:ac:ad:61:73:a2:ef:de:33:4e:5b:c4:6a:64:b3:c0:9f:61: 69:f3:1a:57:df:84:dc:8b:17:4d:f3:d4:3c:20:c2:63:db:fa: 71:5f:1b:f3:56:92:0c:31:86:66:48:17:fd:63:dc:fd:ae:64: 1f:7e:fa:1b:28:96:78:1b:20:50:35:00:53:99:fe:54:8b:67: aa:85:14:c9:de:3e:de:8d:bd:3c:2e:5e:97:3f:a1:f8:5f:82: 8b:75:86:cb:c6:48:6e:7e:d3:c2:09:09:5f:c1:7a:ad:03:69: 53:1c:98:76:60:be:a8:8a:a9:4f:4c:f1:c7:7b:17:26:00:cf: bb:aa:1a:71:1f:eb:c1:f9:af:fa:ab:d7:b8:67:5e:b5:2c:5e: 02:95:34:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3QjAxMTAvBgNVBAUTKDM2QkZERjRDNjVDREVFNkJCNzZFOUYzRTYwODAzNDY2 MUE5RDdBMjYwHhcNMjUxMTAyMjMwNjA2WhcNMjUxMTA5MjMwNjA2WjAYMRYwFAYD VQQDEw02OTA3ZTNkZS05YmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAond3+wMg3+KN3fyPysfvFjP8YGcfy4ONK7lfLb50FY6EyU5XTO24GA0MT/uv KS1pIDNg9pqMW0yFGtvQYez2vD1yCY9jjMjSxBlANGAuQ4Xorwa1AE+NXgyi7gWQ TQbGNtvsYk87ATEmn8FrQezLEuTIinrzoFT6uJhL5sPVBQ6bCPHyy3d+2k/dY0N4 gmlDYfYaccJlvWV+3HhlISQSqTHLYJvHHAdb3MH4onc/qQ9jvVJXMZIWAXmPbBZg Fv4lDP4tOmy0vjz3685zAnb/ooRS5fc/PHHHPFzr2IAMNHhW0fm4CIqUYR05o31y rzwgNTLKnqz8Uasdxe8wiHVTGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuy3P7L engM531K5hGr0RdzHL20MB8GA1UdIwQYMBaAFDa/30xlze5rt26fPmCANGYanXom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdCMC8yMUMwMDgxOEU0 NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdtdTNicDgtWUlBMFpocWRl aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05yX2ZUR1hON211M2JwOC1ZSUEwWmhxZGVpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdCMC8yMUMwMDgxOEU0NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdt dTNicDgtWUlBMFpocWRlaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEqFaHpmoLWsFvJwGiQfrdNjpoNxhAGUcmg8sCr5zZAxa5Skf14PpF UNDrbjBL7FZPzvFjSCtp2u9cbt/ZYPDsDQVqHqtnuQ/wmxHJEqDiTY+jMIdF613u sE4dnP3H6sB0BkIRbcjRV/YRCGE7rK1hc6Lv3jNOW8RqZLPAn2Fp8xpX34TcixdN 89Q8IMJj2/pxXxvzVpIMMYZmSBf9Y9z9rmQffvobKJZ4GyBQNQBTmf5Ui2eqhRTJ 3j7ejb08Ll6XP6H4X4KLdYbLxkhuftPCCQlfwXqtA2lTHJh2YL6oiqlPTPHHexcm AM+7qhpxH+vB+a/6q9e4Z161LF4ClTQ2 -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:23 2025 by rpki-client