$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json) Hash identifier: 3DpkbGcMkMo09ScffADRb91Kz895LxVXJ4fGVF4KTx8= Subject key identifier: 6E:AC:66:16:7A:2C:62:4E:6C:AD:72:85:55:2C:F0:F4:5E:AB:11:58 Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft Manifest number: 9A Signing time: Mon 03 Nov 2025 06:22:01 +0000 Manifest this update: Mon 03 Nov 2025 06:22:00 +0000 Manifest next update: Mon 10 Nov 2025 06:22:00 +0000 Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: Rrl/mYUozQZSoB5sUaHZ7b5zwZzY/RlER5404ZhaCMM=) 2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Validity Not Before: Nov 3 06:22:00 2025 GMT Not After : Nov 10 06:22:00 2025 GMT Subject: CN=69084a08-5ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:55:66:1d:96:6e:4a:e7:df:8d:89:ac:f1: 23:c8:cb:aa:a6:06:83:b2:b1:ce:c6:09:39:ac:8e: 09:9e:d5:09:e7:e3:95:63:d8:ac:cf:d9:5e:08:d2: 6a:d1:84:3c:63:08:0e:42:ed:c6:ff:59:db:2d:55: b6:56:06:d8:2b:f8:2c:af:14:4d:c6:f7:ed:bf:6e: de:41:64:01:cb:43:7f:fb:86:4a:e6:29:ac:a5:ce: 4e:5e:42:e0:d8:4d:cc:4a:47:c6:10:37:01:77:16: 52:fd:03:02:6c:87:97:aa:01:6b:e1:50:d8:52:6c: 3f:33:54:64:67:be:e3:f9:59:02:3f:c0:a6:45:21: 9d:f1:79:72:f9:d9:a1:de:14:3b:3d:53:1a:df:d7: e8:f8:f6:73:61:ad:f8:fd:96:89:0c:0d:5c:0f:b5: 5f:aa:e6:3d:c2:3e:5d:33:a5:96:7d:4a:eb:53:4d: 8e:3b:8e:73:92:cf:7b:8a:7c:be:7b:91:43:a6:91: f8:97:35:73:db:8e:38:0c:8f:83:40:7b:7f:d5:f3: c3:71:73:2b:c6:22:2f:e9:83:2c:2d:0c:33:d4:25: fc:2f:14:63:1b:c6:c6:77:91:7c:c7:d6:be:89:2b: f9:15:e6:82:fd:0d:62:9e:28:5c:e8:ab:fb:b4:ee: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AC:66:16:7A:2C:62:4E:6C:AD:72:85:55:2C:F0:F4:5E:AB:11:58 X509v3 Authority Key Identifier: keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:2e:37:84:fb:2b:4e:44:12:b0:82:f2:50:ee:cb:32:9d: 03:5f:be:9e:22:5d:e4:02:a4:2a:e4:f1:4f:c5:7e:37:0a:85: d2:b9:4f:c7:3f:31:51:55:f7:7f:16:28:4d:9b:ff:cd:5e:14: 31:61:63:e4:5d:da:d4:14:e4:04:7d:88:c2:e7:7b:c4:ee:6b: 90:e9:b8:88:31:fb:d6:16:ff:bf:21:3d:0c:87:d2:86:b1:6d: f8:bb:c8:f1:2f:a5:3a:89:fe:c3:f4:1e:22:7c:5b:75:1b:be: 42:1a:28:7b:94:12:ab:51:e1:50:e2:f9:df:e3:a0:51:b7:8c: 7e:05:bc:71:1d:1f:91:b0:93:a4:71:c2:37:16:01:61:4a:26: 4e:6a:4e:16:90:e2:fa:14:12:06:ec:76:c3:3f:b3:ef:48:a1: 59:75:6e:1c:04:6a:51:13:68:65:2e:2a:28:e5:a0:63:af:b7: 09:4a:1a:7b:ad:1b:f1:cf:a0:db:b6:87:e9:34:cd:45:27:21: d9:42:ee:36:d6:1e:be:bc:7e:5c:73:bf:a3:a2:dc:b7:47:5f: ec:2d:34:6c:57:30:8f:f5:e4:a0:e8:6a:f0:78:70:d6:d4:ea: 46:0d:90:12:ea:54:e5:5e:67:c1:17:5d:0a:fb:5e:1b:dd:79: 2d:1d:b6:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwNEYxMTAvBgNVBAUTKEZFN0NDOEQxMkM4Q0I5NDBEMDZFQUVEQjVCMEFENDNE MDUwMzYyRjEwHhcNMjUxMTAzMDYyMjAwWhcNMjUxMTEwMDYyMjAwWjAYMRYwFAYD VQQDEw02OTA4NGEwOC01YWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG1VZh2Wbkrn342JrPEjyMuqpgaDsrHOxgk5rI4JntUJ5+OVY9isz9leCNJq 0YQ8YwgOQu3G/1nbLVW2VgbYK/gsrxRNxvftv27eQWQBy0N/+4ZK5imspc5OXkLg 2E3MSkfGEDcBdxZS/QMCbIeXqgFr4VDYUmw/M1RkZ77j+VkCP8CmRSGd8Xly+dmh 3hQ7PVMa39fo+PZzYa34/ZaJDA1cD7VfquY9wj5dM6WWfUrrU02OO45zks97iny+ e5FDppH4lzVz2444DI+DQHt/1fPDcXMrxiIv6YMsLQwz1CX8LxRjG8bGd5F8x9a+ iSv5FeaC/Q1inihc6Kv7tO5L0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6sZhZ6 LGJObK1yhVUs8PReqxFYMB8GA1UdIwQYMBaAFP58yNEsjLlA0G6u21sK1D0FA2Lx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDA0Ri9ENUQwRkVCNENC RjcxMUVGODY5QzkwNEZDNEY5QUUwMi9fbnpJMFN5TXVVRFFicTdiV3dyVVBRVURZ dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDA0Ri9ENUQwRkVCNENCRjcxMUVGODY5QzkwNEZDNEY5QUUwMi9fbnpJMFN5TXVV RFFicTdiV3dyVVBRVURZdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAezy43hPsrTkQSsILyUO7LMp0DX76eIl3kAqQq5PFPxX43CoXSuU/H PzFRVfd/FihNm//NXhQxYWPkXdrUFOQEfYjC53vE7muQ6biIMfvWFv+/IT0Mh9KG sW34u8jxL6U6if7D9B4ifFt1G75CGih7lBKrUeFQ4vnf46BRt4x+BbxxHR+RsJOk ccI3FgFhSiZOak4WkOL6FBIG7HbDP7PvSKFZdW4cBGpRE2hlLioo5aBjr7cJShp7 rRvxz6DbtofpNM1FJyHZQu421h6+vH5cc7+joty3R1/sLTRsVzCP9eSg6GrweHDW 1OpGDZAS6lTlXmfBF10K+14b3XktHba3 -----END CERTIFICATE-----Generated at Tue Nov 4 23:40:22 2025 by rpki-client