$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: 4rz3iL6GcXCKg8JxKiNg2xqAqm+10F6fVE5HMbOZrCE= Subject key identifier: 54:51:E9:FB:49:55:41:E8:AC:10:B2:CD:31:7F:91:D3:E3:6A:19:56 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C74 Signing time: Sun 02 Nov 2025 18:27:27 +0000 Manifest this update: Sun 02 Nov 2025 18:27:26 +0000 Manifest next update: Sun 09 Nov 2025 18:27:26 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: C1co9lLH8VU8m0lYr1OZKYPEgosg6OEUlQmvkxnbWbg=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Nov 2 18:27:26 2025 GMT Not After : Nov 9 18:27:26 2025 GMT Subject: CN=6907a28e-44f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:6a:f6:c5:8f:46:7c:98:68:e5:08:22:10: 7f:da:fe:08:0a:2b:13:e6:e5:26:05:3c:9e:af:bf: 4d:7a:3d:83:0b:21:60:25:9c:ae:9b:10:da:4e:0f: a9:0a:ee:f7:e4:33:cc:69:69:35:30:02:26:46:5d: 1d:a8:c5:2c:ae:4b:25:e2:df:3b:ac:f4:d1:de:b2: 96:50:12:d4:0d:63:a1:1e:3a:af:11:f9:b3:4b:75: a9:ca:8b:25:0d:4e:09:99:10:6c:58:30:a4:2d:f8: 16:63:43:b7:81:b7:4e:fc:fe:6b:a3:74:13:b7:fe: a0:8e:42:30:f2:b6:c7:08:e4:6a:c5:11:37:63:71: 77:0d:9e:73:c0:70:45:fa:6e:52:1a:66:9b:c0:ea: 50:2e:58:2d:96:41:b3:52:26:99:9e:50:31:47:ad: ff:85:a2:e8:a9:18:e4:5a:09:81:fd:da:fd:70:99: bf:1d:59:07:80:11:90:b8:ef:2c:29:ed:ff:24:86: e6:e6:0f:94:7e:fa:87:49:e3:f9:ec:7d:42:f8:dd: 95:c3:c5:69:23:a5:e8:48:59:ba:96:a8:49:f1:85: fe:ad:01:fb:e5:16:5f:5f:f9:7a:2e:dd:f8:c6:77: 69:5d:8e:21:82:af:70:6f:2c:df:33:00:f1:c8:79: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:E9:FB:49:55:41:E8:AC:10:B2:CD:31:7F:91:D3:E3:6A:19:56 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ce:27:55:f1:5d:0d:77:40:8b:b4:37:8c:b0:e8:a2:fd:fa: 23:d0:cd:f7:93:28:ee:7b:cb:49:4e:d0:bf:41:6e:50:fc:6c: 7b:6b:24:f5:71:95:96:e5:98:a9:53:17:2f:ce:2e:a4:9b:aa: 1f:fd:4c:6c:b1:bc:67:43:3b:64:8d:2c:78:f0:ad:8a:d7:15: dd:95:31:29:6c:0d:90:9e:7c:85:f2:63:7e:80:c6:87:5b:71: bf:50:14:a4:1e:9e:03:c3:44:d6:68:a4:a3:37:50:a7:7e:fa: 4a:91:7f:c3:19:8c:32:98:aa:f9:06:59:0c:94:44:87:25:a4: 7a:f2:51:17:30:83:2a:59:b8:fb:fc:d7:5a:ad:f1:81:5c:85: 46:67:c9:6a:1a:87:f7:12:f5:1b:8a:3d:a6:ce:59:7c:77:cd: 25:a9:d5:97:0f:b6:29:1a:60:e3:27:a5:24:b0:3b:40:c9:76: b4:f3:15:7a:1f:78:15:af:2b:9c:d3:14:0f:bb:62:83:26:a6: 47:84:ca:82:5c:e6:1e:1d:da:af:3d:42:7f:ed:04:73:96:a8: 5f:16:8f:57:15:e7:96:a7:a4:e3:62:e4:93:14:e3:b2:cb:2f: d9:58:e4:ed:11:2c:7b:f9:d2:87:3d:28:8c:63:80:3f:61:e3: 3e:0d:ca:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUxMTAyMTgyNzI2WhcNMjUxMTA5MTgyNzI2WjAYMRYwFAYD VQQDEw02OTA3YTI4ZS00NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsNq9sWPRnyYaOUIIhB/2v4ICisT5uUmBTyer79Nej2DCyFgJZyumxDaTg+p Cu735DPMaWk1MAImRl0dqMUsrksl4t87rPTR3rKWUBLUDWOhHjqvEfmzS3Wpyosl DU4JmRBsWDCkLfgWY0O3gbdO/P5ro3QTt/6gjkIw8rbHCORqxRE3Y3F3DZ5zwHBF +m5SGmabwOpQLlgtlkGzUiaZnlAxR63/haLoqRjkWgmB/dr9cJm/HVkHgBGQuO8s Ke3/JIbm5g+UfvqHSeP57H1C+N2Vw8VpI6XoSFm6lqhJ8YX+rQH75RZfX/l6Lt34 xndpXY4hgq9wbyzfMwDxyHn8NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRR6ftJ VUHorBCyzTF/kdPjahlWMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFzidV8V0Nd0CLtDeMsOii/foj0M33kyjue8tJTtC/QW5Q/Gx7ayT1 cZWW5ZipUxcvzi6km6of/UxssbxnQztkjSx48K2K1xXdlTEpbA2QnnyF8mN+gMaH W3G/UBSkHp4Dw0TWaKSjN1CnfvpKkX/DGYwymKr5BlkMlESHJaR68lEXMIMqWbj7 /NdarfGBXIVGZ8lqGof3EvUbij2mzll8d80lqdWXD7YpGmDjJ6UksDtAyXa08xV6 H3gVryuc0xQPu2KDJqZHhMqCXOYeHdqvPUJ/7QRzlqhfFo9XFeeWp6TjYuSTFOOy yy/ZWOTtESx7+dKHPSiMY4A/YeM+DcrI -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:00 2025 by rpki-client