$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: kssSyR/2lfZBvz9fhzcui0g3G/BYwiQScX39ISA8fpM= Subject key identifier: DD:BC:21:C3:D1:DB:A2:E8:2F:6B:9A:81:72:50:5E:86:61:28:65:9D Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 0405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03FD Signing time: Wed 05 Nov 2025 00:34:21 +0000 Manifest this update: Wed 05 Nov 2025 00:34:20 +0000 Manifest next update: Wed 12 Nov 2025 00:34:20 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: S/P15Rmq6uRo9VI3+RelZ2F+hO0kKKohe4uoeKG+9fc=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Nov 5 00:34:20 2025 GMT Not After : Nov 12 00:34:20 2025 GMT Subject: CN=690a9b8d-699a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:83:ad:23:64:4d:f7:06:e6:da:58:40:87: 53:46:ef:2d:78:ee:90:c7:2e:7d:fd:c3:59:e6:6b: 3f:c1:92:e7:57:92:cd:1a:02:23:d0:9c:7c:0e:cb: e6:6a:d9:c8:c4:45:25:9d:4a:8a:40:70:d9:ab:a0: 85:24:ef:79:2d:3f:67:d2:f5:46:65:7a:4e:0a:11: 4d:1f:28:f4:95:d2:b3:d7:09:30:d6:45:f3:ac:36: 49:e8:17:88:13:7f:14:70:d6:39:d8:a6:ea:80:3d: c0:25:bf:65:54:51:99:b3:b2:41:8d:e6:8c:a7:6a: c1:1a:02:f6:ee:1d:3e:11:90:2f:f9:56:43:d3:7b: ca:f1:e0:cc:9d:6c:b2:26:f4:99:cd:5b:5d:2e:11: ce:eb:13:e8:a8:ee:75:91:ac:53:06:b7:75:43:7e: f2:ae:cc:79:ec:e8:3a:b9:78:4f:cb:4b:a5:6d:d1: 67:05:e8:4a:af:da:17:6b:e9:62:e7:c1:d7:06:9f: 33:32:b8:8d:c9:6e:a0:a4:1e:05:d1:0d:06:18:87: 88:49:7b:d5:93:7e:4b:ac:31:b0:6b:18:00:be:23: 4e:fa:70:3d:7f:8b:01:42:18:80:68:02:ad:94:78: 3f:d8:74:e1:72:e1:cf:3f:1d:51:0f:99:a1:ed:c3: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BC:21:C3:D1:DB:A2:E8:2F:6B:9A:81:72:50:5E:86:61:28:65:9D X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e1:3a:2a:cc:6a:63:8c:21:ae:aa:c6:e8:2c:58:f0:f5:19: ec:df:fe:08:4d:e3:e6:f0:37:d4:f6:56:ab:a4:71:59:82:0a: 05:55:2d:d4:7a:09:73:c9:64:94:98:c8:2f:d5:f6:b2:21:5c: 09:64:63:1d:a7:74:e3:5b:b7:42:94:a5:c3:c2:e7:4d:58:e9: 62:0e:53:36:56:c4:00:35:37:03:19:55:a1:f8:3a:c7:1e:2b: 8d:ed:6f:27:ad:11:d7:01:0e:27:98:36:00:f8:5d:07:ff:2a: d7:9a:7d:a4:67:62:53:30:84:d5:9c:10:e3:5b:45:1d:a6:b8: b3:3f:49:86:8b:08:79:13:fc:7d:d2:1e:34:f8:91:2c:8c:f7: 2e:94:51:00:0b:df:54:3e:53:37:bf:df:7f:5e:0c:d9:81:8c: 95:12:54:43:2c:5b:88:09:15:99:01:ed:9a:c0:25:aa:c9:be: 24:2b:ec:1a:8e:cd:6f:64:42:22:e3:e9:ed:96:94:7c:ab:af: d9:7b:d0:f6:a9:8f:7a:e7:ac:b6:c2:a7:77:68:bd:3f:a3:79: 2b:a5:69:bd:f4:d9:2b:8a:ec:2e:b5:5e:25:7f:fd:37:57:12: d7:b3:b0:c4:65:55:d8:27:4f:e5:70:54:ff:8f:d2:29:1f:d5: 8b:08:d4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUxMTA1MDAzNDIwWhcNMjUxMTEyMDAzNDIwWjAYMRYwFAYD VQQDEw02OTBhOWI4ZC02OTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyeDrSNkTfcG5tpYQIdTRu8teO6Qxy59/cNZ5ms/wZLnV5LNGgIj0Jx8Dsvm atnIxEUlnUqKQHDZq6CFJO95LT9n0vVGZXpOChFNHyj0ldKz1wkw1kXzrDZJ6BeI E38UcNY52KbqgD3AJb9lVFGZs7JBjeaMp2rBGgL27h0+EZAv+VZD03vK8eDMnWyy JvSZzVtdLhHO6xPoqO51kaxTBrd1Q37yrsx57Og6uXhPy0ulbdFnBehKr9oXa+li 58HXBp8zMriNyW6gpB4F0Q0GGIeISXvVk35LrDGwaxgAviNO+nA9f4sBQhiAaAKt lHg/2HThcuHPPx1RD5mh7cPOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN28IcPR 26LoL2uagXJQXoZhKGWdMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF4ToqzGpjjCGuqsboLFjw9Rns3/4ITePm8DfU9larpHFZggoFVS3U eglzyWSUmMgv1fayIVwJZGMdp3TjW7dClKXDwudNWOliDlM2VsQANTcDGVWh+DrH HiuN7W8nrRHXAQ4nmDYA+F0H/yrXmn2kZ2JTMITVnBDjW0UdprizP0mGiwh5E/x9 0h40+JEsjPculFEAC99UPlM3v99/XgzZgYyVElRDLFuICRWZAe2awCWqyb4kK+wa js1vZEIi4+ntlpR8q6/Ze9D2qY9656y2wqd3aL0/o3krpWm99NkriuwutV4lf/03 VxLXs7DEZVXYJ0/lcFT/j9IpH9WLCNS8 -----END CERTIFICATE-----Generated at Wed Nov 5 15:32:55 2025 by rpki-client