$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: VXeo582ZuqsUp1vnuGxgQnsQ8Y0BKJV7P4/wL4DlfS8= Subject key identifier: 07:1D:E4:14:4B:7A:40:93:2B:0E:FF:DF:74:A4:F3:57:2B:B6:08:BA Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: C8 Signing time: Mon 03 Nov 2025 05:47:25 +0000 Manifest this update: Mon 03 Nov 2025 05:47:24 +0000 Manifest next update: Mon 10 Nov 2025 05:47:24 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: 3eBpLibMb7jSIx+9Qc3xLmTLIf8Qg0HGqd0z7OzBUg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Nov 3 05:47:24 2025 GMT Not After : Nov 10 05:47:24 2025 GMT Subject: CN=690841ed-e8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:0a:61:ab:76:9e:bf:ba:71:6b:6d:59:04:9d: a1:64:8d:f7:0a:8a:67:c4:da:e6:a7:fc:36:e6:70: 0d:c5:cb:09:a1:91:a3:67:20:43:21:7e:f1:18:c9: 58:db:7c:b2:3f:f3:45:92:c9:a4:9e:22:1d:ba:92: e9:79:89:46:13:67:6b:39:6c:d8:0c:0f:18:35:31: f1:ec:03:86:10:46:fb:24:31:24:8d:10:dd:b8:d2: 08:f3:bf:67:92:9c:cc:67:06:f0:e6:7a:d9:f2:14: b6:83:68:e4:1f:67:09:d7:2a:ad:95:fa:06:12:ca: f4:f1:66:a5:21:4d:f2:36:35:5d:11:54:61:2b:33: 53:99:af:b7:67:e0:95:a3:74:60:b1:9f:f1:84:e1: 8e:ee:98:03:d4:86:61:4e:12:8e:62:6f:d7:66:1a: 2a:a3:cf:14:e7:7b:d0:60:e8:a5:aa:4a:f2:36:dd: af:e8:e0:80:9f:ea:e4:39:68:06:2d:b4:19:0a:90: 45:fb:e2:fc:78:28:e3:19:f2:6c:71:36:50:07:00: 46:fd:3c:f8:2d:3e:8d:56:47:4e:f7:c9:c1:8c:fe: 45:0f:7b:ad:30:91:eb:2e:ae:ee:2d:17:6b:c9:1f: 2a:d4:a7:ac:7a:fe:47:7f:58:13:fc:f5:9e:5b:a3: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1D:E4:14:4B:7A:40:93:2B:0E:FF:DF:74:A4:F3:57:2B:B6:08:BA X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d3:3f:d0:1d:20:5d:48:9e:6f:e0:bc:fc:b9:24:df:41:87: 43:f8:6f:5e:40:72:16:a1:68:a9:3c:02:af:a5:95:d5:50:c7: cd:e1:08:e3:eb:f9:81:51:39:70:84:b6:e3:65:d5:a7:99:42: 5e:91:22:45:54:e6:16:57:07:43:bf:55:38:00:1e:43:ee:18: b7:fb:d6:c1:e7:ec:ba:43:ec:36:10:d0:a2:24:49:d9:7f:75: aa:4b:9f:e0:cd:24:2d:a7:32:45:67:60:11:62:1f:38:f8:9b: dc:0e:23:14:58:8a:10:23:79:4d:ba:10:06:4e:ef:02:3e:b6: 71:58:31:8b:3b:f2:7b:af:cc:1f:28:83:a9:db:6e:a3:e4:27: c1:6d:9c:6d:f6:c0:65:8c:fe:b3:7f:04:d8:20:db:b0:d2:df: cf:26:f4:33:58:c2:8a:3b:4f:0a:17:f5:97:27:0d:b4:88:55: df:42:7d:55:1b:a4:ff:e9:ef:64:08:88:f5:3c:68:d2:58:75: a9:13:95:05:0e:0a:17:d3:55:fd:05:9e:7e:7f:67:62:47:28: cb:76:8b:8b:3f:82:89:1e:15:22:4e:86:d4:89:46:99:69:10: 54:9d:08:f5:b8:77:9f:48:51:87:bd:07:53:6f:d4:6d:79:b2: 6b:d3:5b:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUxMTAzMDU0NzI0WhcNMjUxMTEwMDU0NzI0WjAYMRYwFAYD VQQDEw02OTA4NDFlZC1lOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Aphq3aev7pxa21ZBJ2hZI33CopnxNrmp/w25nANxcsJoZGjZyBDIX7xGMlY 23yyP/NFksmkniIdupLpeYlGE2drOWzYDA8YNTHx7AOGEEb7JDEkjRDduNII879n kpzMZwbw5nrZ8hS2g2jkH2cJ1yqtlfoGEsr08WalIU3yNjVdEVRhKzNTma+3Z+CV o3RgsZ/xhOGO7pgD1IZhThKOYm/XZhoqo88U53vQYOilqkryNt2v6OCAn+rkOWgG LbQZCpBF++L8eCjjGfJscTZQBwBG/Tz4LT6NVkdO98nBjP5FD3utMJHrLq7uLRdr yR8q1Kesev5Hf1gT/PWeW6N98QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcd5BRL ekCTKw7/33Sk81crtgi6MB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc0z/QHSBdSJ5v4Lz8uSTfQYdD+G9eQHIWoWipPAKvpZXVUMfN4Qjj 6/mBUTlwhLbjZdWnmUJekSJFVOYWVwdDv1U4AB5D7hi3+9bB5+y6Q+w2ENCiJEnZ f3WqS5/gzSQtpzJFZ2ARYh84+JvcDiMUWIoQI3lNuhAGTu8CPrZxWDGLO/J7r8wf KIOp226j5CfBbZxt9sBljP6zfwTYINuw0t/PJvQzWMKKO08KF/WXJw20iFXfQn1V G6T/6e9kCIj1PGjSWHWpE5UFDgoX01X9BZ5+f2diRyjLdouLP4KJHhUiTobUiUaZ aRBUnQj1uHefSFGHvQdTb9RtebJr01tz -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:25 2025 by rpki-client