$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: BCJh/cuHTpwqepyMOFBPZ3ThuJ4M2ZcsLYwWEGL0wVw= Subject key identifier: B5:CE:0A:DF:E8:F9:E0:71:51:66:03:8B:B7:D9:8C:86:D6:21:7F:9C Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 517B Signing time: Tue 04 Nov 2025 15:18:12 +0000 Manifest this update: Tue 04 Nov 2025 15:18:12 +0000 Manifest next update: Tue 11 Nov 2025 15:18:12 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: VpEmHrp1TycDESJ3oye01xX+tLCt8PTet5TrlHMIIYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Nov 4 15:18:12 2025 GMT Not After : Nov 11 15:18:12 2025 GMT Subject: CN=690a1934-ceb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:7b:0a:c3:46:a6:4a:57:c8:a9:f3:68:2d: c6:a4:f4:1d:6c:cc:8a:3d:7f:a8:37:87:06:98:0e: f7:a6:0d:fe:43:fd:5c:83:6d:c8:db:36:55:1c:bb: 68:62:e1:30:6b:98:7e:7a:49:1f:1e:10:05:68:ed: 9b:38:96:e4:84:11:10:1e:db:63:09:c3:6e:1a:51: c7:7a:d7:22:18:0c:67:7b:da:97:38:bd:f4:07:90: 7c:03:87:c8:a8:56:c2:03:a3:7e:54:bf:15:77:80: 32:ef:d4:a0:c7:33:60:72:70:7a:98:25:1d:81:ca: 13:ec:9f:d6:30:b9:68:d7:a4:bd:d1:b6:ba:1a:3d: 18:f0:5b:77:7d:46:d1:3c:6a:51:53:11:0d:a4:aa: 4b:66:09:b8:88:3d:60:a9:bc:7c:74:b9:63:ea:04: 67:c6:0d:a6:36:3f:37:84:c0:23:72:53:b0:a9:d0: 13:29:4f:5c:69:81:31:e5:56:74:a2:10:2e:76:82: c8:e0:a2:e8:9c:d9:73:17:84:ab:8e:60:e7:02:51: 66:f6:b7:79:bf:4f:8e:e4:65:41:b7:f4:e1:1d:e7: 95:ff:12:7b:4a:95:49:b9:41:40:57:ad:51:aa:94: 95:66:5a:45:c6:88:4c:a5:c6:91:73:a9:8e:40:43: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CE:0A:DF:E8:F9:E0:71:51:66:03:8B:B7:D9:8C:86:D6:21:7F:9C X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d8:50:3d:be:6d:d9:5f:eb:28:95:4f:88:df:da:42:02:85: d6:f8:67:a5:0b:18:05:4b:b4:e6:f4:1a:fb:14:37:fd:3c:fd: 87:80:ec:65:f7:1b:1e:9a:ef:17:62:99:b2:16:ab:8c:89:0f: da:c1:fc:b7:58:93:6a:98:6c:24:87:51:f9:8b:c0:c8:b5:a7: 94:6f:ab:e6:f4:c5:35:60:d0:c2:27:89:9d:29:e6:a1:fa:b2: 04:e3:60:72:9a:f0:96:f7:c5:ed:b8:ed:a1:77:92:14:73:ff: ac:e1:4c:15:61:18:af:04:74:14:03:78:5d:f4:23:2a:d1:66: 06:23:ab:43:54:0e:1a:41:91:de:03:4f:5c:c4:2e:77:6a:fb: 01:12:05:d9:2c:b6:46:88:ad:a5:5a:7c:a9:d0:03:f5:cf:51: dc:db:99:1e:08:5e:e4:db:ee:f0:6d:83:20:ee:51:c5:c5:31: 90:4d:6d:06:9b:39:c6:1e:ef:c0:94:31:6b:d0:93:6b:eb:e3: c2:2d:68:0a:d5:72:09:ad:b4:d3:cf:b0:17:d8:ea:3d:26:4e: c5:a2:a5:82:66:be:c7:eb:03:21:4e:76:ba:07:fb:9a:1d:f6: 28:5b:7f:04:fb:10:86:ae:8a:07:df:d4:58:b0:47:83:b3:1e: 8a:b8:9d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUxMTA0MTUxODEyWhcNMjUxMTExMTUxODEyWjAYMRYwFAYD VQQDEw02OTBhMTkzNC1jZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6N7CsNGpkpXyKnzaC3GpPQdbMyKPX+oN4cGmA73pg3+Q/1cg23I2zZVHLto YuEwa5h+ekkfHhAFaO2bOJbkhBEQHttjCcNuGlHHetciGAxne9qXOL30B5B8A4fI qFbCA6N+VL8Vd4Ay79SgxzNgcnB6mCUdgcoT7J/WMLlo16S90ba6Gj0Y8Ft3fUbR PGpRUxENpKpLZgm4iD1gqbx8dLlj6gRnxg2mNj83hMAjclOwqdATKU9caYEx5VZ0 ohAudoLI4KLonNlzF4SrjmDnAlFm9rd5v0+O5GVBt/ThHeeV/xJ7SpVJuUFAV61R qpSVZlpFxohMpcaRc6mOQENHoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXOCt/o +eBxUWYDi7fZjIbWIX+cMB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN2FA9vm3ZX+solU+I39pCAoXW+GelCxgFS7Tm9Br7FDf9PP2HgOxl 9xsemu8XYpmyFquMiQ/awfy3WJNqmGwkh1H5i8DItaeUb6vm9MU1YNDCJ4mdKeah +rIE42BymvCW98XtuO2hd5IUc/+s4UwVYRivBHQUA3hd9CMq0WYGI6tDVA4aQZHe A09cxC53avsBEgXZLLZGiK2lWnyp0AP1z1Hc25keCF7k2+7wbYMg7lHFxTGQTW0G mznGHu/AlDFr0JNr6+PCLWgK1XIJrbTTz7AX2Oo9Jk7FoqWCZr7H6wMhTna6B/ua HfYoW38E+xCGrooH39RYsEeDsx6KuJ3G -----END CERTIFICATE-----Generated at Tue Nov 4 18:39:39 2025 by rpki-client