$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: 5PUVGfOkEoWxSfHERcVudOFSS27ReUN4EMNd8xOjS10= Subject key identifier: A9:F6:63:7D:A7:6D:93:F1:35:EF:94:A3:F8:14:E7:8D:3F:8B:BF:6A Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 34D2 Signing time: Tue 04 Nov 2025 15:03:49 +0000 Manifest this update: Tue 04 Nov 2025 15:03:48 +0000 Manifest next update: Tue 11 Nov 2025 15:03:48 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: gU+M1dJ+YbV0qPfu+Yn+4lUmk9Ec+a7ohdUboAlx9GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: Nov 4 15:03:48 2025 GMT Not After : Nov 11 15:03:48 2025 GMT Subject: CN=690a15d4-be0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:56:4d:9d:3f:c9:ce:78:85:c9:74:32:63: 6b:6f:26:9c:34:cf:9b:45:84:c9:58:91:b3:38:37: a7:be:5e:44:1d:22:37:ee:24:35:8c:22:78:49:0b: d9:b8:72:d0:31:1c:4f:26:6c:dc:10:ec:cf:f9:68: 1d:e7:90:6e:45:f4:b9:36:d1:d6:fc:c4:6b:84:94: 96:55:f3:bc:73:19:ff:6d:27:05:fa:29:29:47:b8: 27:55:05:e1:a9:25:bd:d4:3e:43:22:26:04:e1:69: bf:cb:b2:c7:53:24:69:7f:d0:db:f0:35:12:b2:6c: 2d:93:aa:4d:b4:2f:dc:35:a4:93:0a:ab:7a:70:f1: ab:d6:07:10:3e:98:2d:c0:fe:0c:5f:82:28:33:53: 2f:9e:d7:52:47:6d:88:bd:2f:0a:f8:71:82:fc:ae: df:bf:8e:b8:80:38:6e:b3:85:8f:a7:6f:cd:9f:b3: 1c:71:ff:88:fe:0f:70:7a:75:63:d6:b8:e7:eb:86: f2:d6:4c:68:4e:47:8f:98:93:75:ff:7b:cd:1a:0c: 59:76:d9:54:1f:6e:44:ca:c7:ff:3c:9d:f4:f9:33: f5:d0:51:95:db:19:a9:aa:b9:93:9d:e8:05:90:01: fc:14:4e:4c:b3:1e:09:00:8a:9d:e2:98:e0:e8:c2: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:63:7D:A7:6D:93:F1:35:EF:94:A3:F8:14:E7:8D:3F:8B:BF:6A X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d6:ea:10:6f:94:fa:dd:d9:8f:c2:ff:a6:05:3b:c4:4d:60: 02:39:9b:ac:68:18:95:b2:67:b0:c4:81:75:cc:20:97:3d:df: d1:8c:ca:31:c8:d1:0f:37:af:2c:bc:e4:0d:d1:ff:df:a5:df: de:78:c2:67:11:3d:8b:9b:e2:d7:a5:4d:b4:1c:a1:24:6a:27: 41:b1:7f:f7:57:d1:87:59:2f:e3:b0:5f:2f:86:98:84:0e:4c: 2e:27:6b:15:52:94:e0:10:fa:6d:f4:d8:a9:9f:15:27:c9:f8: 47:86:b0:f3:7e:85:fb:77:fa:2a:0d:83:76:1c:0a:34:d4:4a: b8:df:ae:64:16:54:d3:ea:a2:ac:0b:8e:df:ea:43:e7:34:12: fd:34:06:86:24:b2:51:5c:8a:27:92:1e:7c:87:1b:73:97:7b: ea:c0:99:f4:08:9b:51:49:67:da:a8:6e:49:d6:ec:7c:d8:41: 5f:34:0f:dc:40:d3:77:76:45:2c:24:92:a8:0a:b7:3c:f0:17: 9f:c2:a5:27:8c:ac:e5:69:86:f6:bb:ee:a9:6b:f0:5c:0e:32: c0:c5:3e:c6:44:7e:ec:e3:74:2c:cd:c9:a6:73:ac:df:08:e0: 17:50:5e:7e:7b:03:cb:5d:76:b3:34:48:70:81:ff:a3:9c:e2: 71:cc:1b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUxMTA0MTUwMzQ4WhcNMjUxMTExMTUwMzQ4WjAYMRYwFAYD VQQDEw02OTBhMTVkNC1iZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjRWTZ0/yc54hcl0MmNrbyacNM+bRYTJWJGzODenvl5EHSI37iQ1jCJ4SQvZ uHLQMRxPJmzcEOzP+Wgd55BuRfS5NtHW/MRrhJSWVfO8cxn/bScF+ikpR7gnVQXh qSW91D5DIiYE4Wm/y7LHUyRpf9Db8DUSsmwtk6pNtC/cNaSTCqt6cPGr1gcQPpgt wP4MX4IoM1MvntdSR22IvS8K+HGC/K7fv464gDhus4WPp2/Nn7Mccf+I/g9wenVj 1rjn64by1kxoTkePmJN1/3vNGgxZdtlUH25Eysf/PJ30+TP10FGV2xmpqrmTnegF kAH8FE5Msx4JAIqd4pjg6MKTZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn2Y32n bZPxNe+Uo/gU540/i79qMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1uoQb5T63dmPwv+mBTvETWACOZusaBiVsmewxIF1zCCXPd/RjMox yNEPN68svOQN0f/fpd/eeMJnET2Lm+LXpU20HKEkaidBsX/3V9GHWS/jsF8vhpiE DkwuJ2sVUpTgEPpt9NipnxUnyfhHhrDzfoX7d/oqDYN2HAo01Eq4365kFlTT6qKs C47f6kPnNBL9NAaGJLJRXIonkh58hxtzl3vqwJn0CJtRSWfaqG5J1ux82EFfNA/c QNN3dkUsJJKoCrc88BefwqUnjKzlaYb2u+6pa/BcDjLAxT7GRH7s43Qszcmmc6zf COAXUF5+ewPLXXazNEhwgf+jnOJxzBtV -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:09 2025 by rpki-client