$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft File: NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json) Hash identifier: LDoaJasDNefQltLiDaumfiXAZa/hwJ1a6RbvJW7UrlY= Subject key identifier: C9:4A:42:50:1E:7C:00:79:45:7B:58:23:2B:42:BC:03:A2:08:A7:FF Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft Manifest number: 51 Signing time: Mon 03 Nov 2025 07:19:14 +0000 Manifest this update: Mon 03 Nov 2025 07:19:14 +0000 Manifest next update: Mon 10 Nov 2025 07:19:14 +0000 Files and hashes: 1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: GI9TU7Q5txafPqBYnZGT54JsDGqn9l+vIUwjjDI5Kxw=) 2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: iZRDXQppbsQwPvsyTvXzZpqvjaraKsPpnctxXUoNoxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Validity Not Before: Nov 3 07:19:14 2025 GMT Not After : Nov 10 07:19:14 2025 GMT Subject: CN=69085772-cc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:32:f2:8a:65:b4:d3:e5:48:5c:b9:38:c5: 7a:5b:60:21:12:22:f0:77:f6:2c:68:01:61:5e:63: 2b:77:18:13:92:e6:c0:bd:51:84:60:1a:e6:c9:7f: 56:6f:fc:98:d0:ff:13:b5:32:97:fc:6b:c6:6a:6c: 2b:23:ed:90:7c:f8:31:12:84:6b:11:b6:8a:6b:08: 8c:de:b3:cf:bd:cc:00:66:48:92:6e:eb:61:87:7b: e4:53:bc:72:29:8c:ec:90:10:f6:35:4e:47:93:96: f3:42:56:1b:61:54:d1:16:bd:5f:8f:0a:f0:9f:df: 9c:91:7a:d1:e0:c5:11:87:45:24:e0:ad:e0:25:d1: 82:6a:c6:56:0e:ba:1c:6c:78:42:9d:4f:40:b2:48: dc:b3:6d:6b:4f:43:72:66:bc:ae:36:f5:cd:2d:db: ef:18:3a:33:f6:f1:d0:20:80:b2:c7:b9:90:8c:7e: b3:e2:98:39:aa:bc:8e:83:7f:cd:f8:07:73:06:b6: 12:d4:a0:71:a1:55:f8:01:a5:ae:17:71:3a:c3:4f: 0e:f9:b4:14:d7:f3:91:c4:a3:0a:d6:0b:34:33:54: 5a:23:7f:c7:b2:82:00:1b:29:10:2e:40:25:ee:74: 20:df:7d:82:c8:31:27:c2:37:d0:91:8d:f4:04:77: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4A:42:50:1E:7C:00:79:45:7B:58:23:2B:42:BC:03:A2:08:A7:FF X509v3 Authority Key Identifier: keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:87:a2:3d:12:70:c1:b4:a7:2d:10:3e:bb:ca:b6:61:79:d6: 19:56:11:1c:d1:54:62:f8:c9:b6:03:22:88:60:f5:29:8f:18: ba:17:25:4b:1a:23:ec:bf:37:e7:05:ed:d2:70:62:91:33:11: ee:8b:89:e8:21:7c:ac:79:73:b1:2f:e8:fd:c6:dd:6b:66:6c: 8c:f9:25:3f:09:55:89:5a:32:b2:7f:d1:2a:50:47:a6:ca:4c: d4:63:62:34:4d:ed:3a:a1:7c:a2:4a:61:4e:f6:a0:90:e2:24: 4b:4f:76:a2:fb:21:ff:19:f6:77:9d:b4:62:89:20:23:50:21: 4e:12:e8:ef:da:5e:cd:2e:86:c6:9d:fd:e8:3f:df:ee:35:0a: ca:a2:60:59:69:b3:25:58:d5:3f:72:56:f0:a5:8d:a7:9f:6b: 1b:82:85:43:66:ee:ac:cd:f9:1d:d6:10:d0:a8:5d:bc:f6:df: 3b:f1:0e:20:b1:27:3d:e6:49:c6:87:66:ff:45:8a:31:5c:12: 40:c2:20:3d:77:5f:94:95:5d:70:82:cc:d9:f0:73:a8:3a:cb: ae:1f:ad:45:fb:2d:ce:11:f6:e1:26:32:c8:2d:70:b9:a5:73: 93:6d:9f:ea:26:77:f9:68:22:80:be:5b:f6:b4:7a:d0:ec:68: 93:41:15:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0REQjExMC8GA1UEBRMoMzRDREE2NUIwMkYxNzZCRkMyNDg3ODREQUE5QUM4QTdC RTE2NTNEQjAeFw0yNTExMDMwNzE5MTRaFw0yNTExMTAwNzE5MTRaMBgxFjAUBgNV BAMTDTY5MDg1NzcyLWNjMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYnzLyimW00+VIXLk4xXpbYCESIvB39ixoAWFeYyt3GBOS5sC9UYRgGubJf1Zv /JjQ/xO1Mpf8a8ZqbCsj7ZB8+DEShGsRtoprCIzes8+9zABmSJJu62GHe+RTvHIp jOyQEPY1TkeTlvNCVhthVNEWvV+PCvCf35yRetHgxRGHRSTgreAl0YJqxlYOuhxs eEKdT0CySNyzbWtPQ3JmvK429c0t2+8YOjP28dAggLLHuZCMfrPimDmqvI6Df834 B3MGthLUoHGhVfgBpa4XcTrDTw75tBTX85HEowrWCzQzVFojf8eyggAbKRAuQCXu dCDffYLIMSfCN9CRjfQEd/6ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyUpCUB58 AHlFe1gjK0K8A6IIp/8wHwYDVR0jBBgwFoAUNM2mWwLxdr/CSHhNqprIp74WU9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRERCLzBFM0JEQUVDNDcy NDExRjA5NUY5MUIyM0M0RjlBRTAyL05NMm1Xd0x4ZHJfQ1NIaE5xcHJJcDc0V1U5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTk0ybVd3THhkcl9DU0hoTnFwcklwNzRXVTlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RERCLzBFM0JEQUVDNDcyNDExRjA5NUY5MUIyM0M0RjlBRTAyL05NMm1Xd0x4ZHJf Q1NIaE5xcHJJcDc0V1U5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACqHoj0ScMG0py0QPrvKtmF51hlWERzRVGL4ybYDIohg9SmPGLoXJUsa I+y/N+cF7dJwYpEzEe6LieghfKx5c7Ev6P3G3WtmbIz5JT8JVYlaMrJ/0SpQR6bK TNRjYjRN7TqhfKJKYU72oJDiJEtPdqL7If8Z9nedtGKJICNQIU4S6O/aXs0uhsad /eg/3+41CsqiYFlpsyVY1T9yVvCljaefaxuChUNm7qzN+R3WENCoXbz23zvxDiCx Jz3mScaHZv9FijFcEkDCID13X5SVXXCCzNnwc6g6y64frUX7Lc4R9uEmMsgtcLml c5Ntn+omd/loIoC+W/a0etDsaJNBFUI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:56 2025 by rpki-client