$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: rjc32IGRCpIzSJHchcbqAONADszUkZ0ZcCwVsZzXOHQ= Subject key identifier: 72:C6:09:CC:4F:91:F3:1D:47:6B:8A:17:85:B2:C1:81:C5:89:C7:3A Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 0741 Signing time: Tue 04 Nov 2025 21:55:37 +0000 Manifest this update: Tue 04 Nov 2025 21:55:36 +0000 Manifest next update: Tue 11 Nov 2025 21:55:36 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: ZdL/R5HM2/Ftr9UXSCJs6PywExCeyV2zRmF/X0iwXWw=) 2: 0A81888851C011F08C31DF3FC4F9AE02.roa (hash: 1yPuP1g8YZqvnHf524WkUbhoEmWrAxZBELmM8pADlg8=) 3: 7B3EE1DC524811F0B02FCD27C4F9AE02.roa (hash: NOszZQVplnPpRn57635/o7+RgEVvlc3t2csfhNsghIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Nov 4 21:55:36 2025 GMT Not After : Nov 11 21:55:36 2025 GMT Subject: CN=690a7658-fe9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:19:48:48:83:b5:43:34:a5:e4:ee:58:e1: ab:2f:73:76:90:0c:2f:b4:24:76:5b:9e:84:2c:43: 32:ec:9f:32:5d:fa:a1:09:14:61:06:b9:39:3a:83: 4c:55:93:a3:c3:93:c2:08:38:a3:38:cc:76:d6:b7: 40:e4:01:b4:28:be:71:86:7e:f0:28:63:44:04:8d: 4a:90:06:6d:ef:82:ef:dd:59:73:0e:4a:61:26:8e: 66:cc:4e:75:3a:48:15:b1:1d:7a:15:bb:ff:56:9d: 0e:bf:d1:a9:cb:15:9f:37:5c:27:1d:02:0d:9d:69: ab:10:26:08:57:8a:e7:41:24:66:8c:cb:8d:f4:ab: 6c:71:92:2d:ba:e4:52:00:17:37:31:68:a1:24:00: 76:2b:51:bd:99:c2:04:5b:d3:ac:24:c1:55:20:90: 59:4f:96:5e:24:0d:a8:04:4e:4a:ba:a1:fc:b3:1a: 46:a2:15:2e:01:55:6a:9d:91:54:ac:3d:e4:38:c6: 1f:78:cd:ba:88:0b:c7:fa:67:01:6a:da:11:10:4d: c1:e0:20:75:c1:ea:b2:19:b6:7a:2c:b6:fa:bf:0e: 6e:d3:32:16:32:c2:c2:bc:47:d6:78:de:cc:0f:e2: 56:7c:fc:69:1b:22:69:87:03:17:77:72:59:0f:1a: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:09:CC:4F:91:F3:1D:47:6B:8A:17:85:B2:C1:81:C5:89:C7:3A X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:85:02:a9:5c:64:8f:aa:55:9a:d3:b2:3f:91:cd:97:0c:0f: 8e:6a:de:8c:ad:6e:4e:eb:4d:2b:28:c0:d2:78:b7:4e:61:1a: e1:33:de:d9:53:74:88:72:8d:ea:c4:48:fb:16:22:88:2c:95: 73:a6:8e:62:5c:87:33:c9:f7:86:24:cb:74:7d:bc:fe:62:04: b4:c0:49:89:a2:dc:38:21:29:0b:96:0c:89:7c:10:83:a8:b4: 67:0f:01:36:97:5e:7a:f8:c7:8c:d3:d3:c6:1e:00:66:c4:10: f1:11:06:e6:8d:94:59:60:db:d1:31:d4:e5:34:9f:18:70:c5: 16:86:1b:ee:89:f1:bc:1c:21:04:5b:2f:20:d8:6c:42:38:c6: bf:0c:fc:cd:13:3f:ac:ca:37:9b:72:12:99:0a:1a:44:0d:20: a9:0d:ac:d7:70:a6:5e:e3:01:7a:c0:ed:db:93:73:06:96:ab: 6f:68:a8:c6:7d:08:2e:4e:02:db:4e:fb:0a:f4:87:84:a0:cc: 45:67:0e:53:2f:23:39:4c:b8:b4:4e:a8:c0:cf:65:72:6c:3c: be:4a:c7:9d:ea:e7:13:d3:9e:be:cc:bf:04:b5:3b:f4:16:63: af:63:71:c4:47:ec:fa:7d:bb:89:99:f1:91:d1:6f:cd:7a:c5: 62:6b:55:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjUxMTA0MjE1NTM2WhcNMjUxMTExMjE1NTM2WjAYMRYwFAYD VQQDEw02OTBhNzY1OC1mZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvoZSEiDtUM0peTuWOGrL3N2kAwvtCR2W56ELEMy7J8yXfqhCRRhBrk5OoNM VZOjw5PCCDijOMx21rdA5AG0KL5xhn7wKGNEBI1KkAZt74Lv3VlzDkphJo5mzE51 OkgVsR16Fbv/Vp0Ov9GpyxWfN1wnHQINnWmrECYIV4rnQSRmjMuN9KtscZItuuRS ABc3MWihJAB2K1G9mcIEW9OsJMFVIJBZT5ZeJA2oBE5KuqH8sxpGohUuAVVqnZFU rD3kOMYfeM26iAvH+mcBatoREE3B4CB1weqyGbZ6LLb6vw5u0zIWMsLCvEfWeN7M D+JWfPxpGyJphwMXd3JZDxpvSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLGCcxP kfMdR2uKF4WywYHFicc6MB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCthQKpXGSPqlWa07I/kc2XDA+Oat6MrW5O600rKMDSeLdOYRrhM97Z U3SIco3qxEj7FiKILJVzpo5iXIczyfeGJMt0fbz+YgS0wEmJotw4ISkLlgyJfBCD qLRnDwE2l156+MeM09PGHgBmxBDxEQbmjZRZYNvRMdTlNJ8YcMUWhhvuifG8HCEE Wy8g2GxCOMa/DPzNEz+syjebchKZChpEDSCpDazXcKZe4wF6wO3bk3MGlqtvaKjG fQguTgLbTvsK9IeEoMxFZw5TLyM5TLi0TqjAz2VybDy+Ssed6ucT056+zL8EtTv0 FmOvY3HER+z6fbuJmfGR0W/NesVia1WU -----END CERTIFICATE-----Generated at Wed Nov 5 19:24:05 2025 by rpki-client