$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: 2MIxqX4gtpj5onjTc4fZUr8yQBV/E493NH46qaDWa0w= Subject key identifier: 2B:A7:93:FE:6E:0A:C3:45:7F:85:C5:54:C9:E3:07:CC:70:1D:E3:8A Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 01E0 Signing time: Tue 04 Nov 2025 22:52:19 +0000 Manifest this update: Tue 04 Nov 2025 22:52:19 +0000 Manifest next update: Tue 11 Nov 2025 22:52:19 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: GfPNlQBOp8GDjIZcxrwKgkhlNLkz6jPy8aH6hPWs+d8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Nov 4 22:52:19 2025 GMT Not After : Nov 11 22:52:19 2025 GMT Subject: CN=690a83a3-d130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:33:84:84:32:02:45:07:40:5f:78:93:1d: 4b:40:23:e4:9c:83:c4:d7:69:ab:1d:af:f3:66:2a: ae:51:cc:db:c4:ea:b0:b2:1b:fc:22:ac:24:12:96: 15:05:9f:da:cf:36:b1:9e:02:8d:ef:ec:87:12:84: bd:fa:3c:a5:8b:5d:81:81:87:cb:e8:e9:a2:de:28: 2c:82:39:9e:39:5b:7a:f5:07:0b:91:37:ee:41:77: ad:7e:d6:62:41:44:92:25:4f:4d:b9:9f:f2:7c:65: 47:f9:fa:00:41:0f:c0:1a:7b:75:10:f1:31:60:14: fc:dc:9d:b5:be:31:48:47:ce:d9:e8:c5:dd:44:7e: 42:e8:eb:5e:c6:c4:6d:58:ec:77:f5:bc:6a:8a:94: ea:07:9a:09:f0:08:c2:39:60:c6:d1:49:ee:0f:1c: 17:15:f3:50:02:23:41:37:9e:82:b3:13:72:8d:6c: 8c:cc:b6:05:e1:c8:ab:ce:c7:fa:c4:99:2e:2a:b9: 08:f0:f3:eb:54:76:42:d5:f2:85:09:81:9d:fc:ff: ea:61:25:c6:cc:c5:16:aa:d3:45:88:ae:f1:72:f9: 64:55:97:c0:56:c2:79:23:49:ca:ab:52:6e:ab:fa: bb:02:66:2f:ba:95:c5:0f:79:8e:8f:7e:90:f5:1e: 9b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A7:93:FE:6E:0A:C3:45:7F:85:C5:54:C9:E3:07:CC:70:1D:E3:8A X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:90:0d:6c:83:2e:0b:db:0f:35:4a:c8:36:0c:3b:16:f9:fe: 97:5a:0a:5a:84:de:45:9f:21:d2:c4:fd:54:5f:4e:17:73:c6: 8e:c0:72:43:21:cc:ff:74:1e:5e:e6:e3:f7:85:6d:0a:41:0f: d2:59:81:53:a8:d6:d5:b5:ae:c3:2e:8d:dd:00:d6:83:9d:ba: 04:e3:20:e6:16:29:d2:ea:8f:58:d7:89:7b:6c:87:f2:88:0d: fb:75:d9:53:49:b3:8d:41:2f:09:d4:cc:a2:8e:c0:ae:10:1e: bf:e6:95:71:1a:a6:4b:a0:3d:cc:2a:6e:6e:52:e7:55:67:03: d1:d9:67:94:35:37:81:ec:f0:cc:de:29:bf:74:f0:31:96:84: 36:b6:c8:90:70:7c:1d:34:1b:b7:69:23:00:90:da:b3:b8:5f: ed:a9:1a:95:36:72:d2:5d:09:8f:65:f8:cf:7a:9b:b5:ba:69: 3f:19:e7:e3:23:83:0b:bf:e1:55:48:5e:7f:fd:6b:9e:5d:ad: 53:df:70:b6:1c:f6:34:a0:e4:e6:8f:ea:eb:ae:05:1d:f3:a8: e4:60:1e:39:15:74:2c:bb:d8:19:16:c4:1e:6b:ea:68:5a:82: a7:bb:55:25:69:c0:72:0b:69:d6:6a:85:05:b2:b4:c4:b8:fb: 7b:29:56:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjUxMTA0MjI1MjE5WhcNMjUxMTExMjI1MjE5WjAYMRYwFAYD VQQDEw02OTBhODNhMy1kMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ckzhIQyAkUHQF94kx1LQCPknIPE12mrHa/zZiquUczbxOqwshv8IqwkEpYV BZ/azzaxngKN7+yHEoS9+jyli12BgYfL6Omi3igsgjmeOVt69QcLkTfuQXetftZi QUSSJU9NuZ/yfGVH+foAQQ/AGnt1EPExYBT83J21vjFIR87Z6MXdRH5C6OtexsRt WOx39bxqipTqB5oJ8AjCOWDG0UnuDxwXFfNQAiNBN56CsxNyjWyMzLYF4cirzsf6 xJkuKrkI8PPrVHZC1fKFCYGd/P/qYSXGzMUWqtNFiK7xcvlkVZfAVsJ5I0nKq1Ju q/q7AmYvupXFD3mOj36Q9R6bhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCunk/5u CsNFf4XFVMnjB8xwHeOKMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCokA1sgy4L2w81Ssg2DDsW+f6XWgpahN5FnyHSxP1UX04Xc8aOwHJD Icz/dB5e5uP3hW0KQQ/SWYFTqNbVta7DLo3dANaDnboE4yDmFinS6o9Y14l7bIfy iA37ddlTSbONQS8J1MyijsCuEB6/5pVxGqZLoD3MKm5uUudVZwPR2WeUNTeB7PDM 3im/dPAxloQ2tsiQcHwdNBu3aSMAkNqzuF/tqRqVNnLSXQmPZfjPepu1umk/Gefj I4MLv+FVSF5//WueXa1T33C2HPY0oOTmj+rrrgUd86jkYB45FXQsu9gZFsQea+po WoKnu1UlacByC2nWaoUFsrTEuPt7KVa7 -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:02 2025 by rpki-client