$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json) Hash identifier: F34yZOvdjlgAm6TjbjaG0yJhYpP4JDq7c26BUO7CpKk= Subject key identifier: 61:21:26:87:B8:87:E0:F0:A4:C3:7D:C2:3F:39:8B:63:74:02:A1:BA Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft Manifest number: 0A Signing time: Wed 05 Nov 2025 08:13:15 +0000 Manifest this update: Wed 05 Nov 2025 08:13:14 +0000 Manifest next update: Wed 12 Nov 2025 08:13:14 +0000 Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: a5sP49x+coYkWp0ZzmPzcx5snyzZDIWHEYSYK8IMfuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Validity Not Before: Nov 5 08:13:14 2025 GMT Not After : Nov 12 08:13:14 2025 GMT Subject: CN=690b071a-ff93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:5b:09:c8:75:79:21:da:24:3a:35:f6:4a: 9f:bf:a4:87:c0:d0:1b:c4:db:c0:ac:6a:1b:1f:80: 22:15:97:eb:02:d2:ac:1c:f5:bf:04:61:04:8b:13: c3:73:af:dc:8e:ec:4b:09:67:b7:4c:76:c6:6d:42: 05:c4:a8:65:33:02:48:4c:e3:1c:ce:d9:c4:f6:81: 42:6f:f0:03:24:60:ae:97:86:44:28:f3:65:b7:cf: 93:4d:1d:72:29:11:90:5a:95:b1:6d:d9:ff:8e:88: f3:5e:ce:de:6e:84:38:9a:1b:b5:ca:42:d3:7b:bc: 95:42:7b:74:3d:af:99:71:3f:7a:94:e6:17:03:2f: fb:61:8c:7f:68:bd:c0:4c:1f:01:6d:2d:67:4f:d1: 3e:9f:01:aa:98:74:86:3b:6e:60:5e:c3:f7:37:55: e3:a1:a8:1d:3e:99:2f:21:6a:d6:91:25:fc:32:6d: ef:01:5e:cc:f5:16:8a:26:4d:2c:19:fc:8e:c6:29: bc:90:f7:aa:9b:4c:2d:a5:0b:9d:ad:2b:37:30:96: 5f:fd:ec:c2:a4:8e:2d:27:02:94:bd:0f:34:72:57: 60:db:27:0a:7d:5d:d4:cb:2f:5a:9e:5d:c1:8f:c5: 5c:0f:f3:15:1c:10:37:e3:7f:dd:ef:da:ba:6d:08: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:21:26:87:B8:87:E0:F0:A4:C3:7D:C2:3F:39:8B:63:74:02:A1:BA X509v3 Authority Key Identifier: keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e5:95:e6:6f:99:aa:62:cb:c5:37:9f:e1:33:30:6a:30:53: 28:b8:15:8c:9a:d4:59:71:6e:90:80:51:c3:8e:86:32:c7:68: 8c:a0:2f:3e:2b:d5:fe:7e:c3:22:c2:48:87:07:56:5c:b4:09: 78:31:98:05:87:f5:ef:43:1b:c0:d0:85:a5:3c:cf:d4:2a:15: d7:89:f2:47:b1:4d:e5:27:05:56:a8:fa:cd:44:4b:6a:ed:d9: a4:0e:d3:80:22:74:16:96:5f:57:de:94:2a:03:d6:7b:22:1c: b4:55:37:b1:7a:43:64:16:78:e2:9c:e0:c5:c1:0b:c1:b9:e6: dc:7f:d0:2f:23:45:bb:d1:c2:76:cb:9e:af:36:16:88:0b:a9: 74:52:c3:b7:bd:7e:f5:84:61:69:04:a3:d5:fe:27:72:e1:e7: a2:51:8a:ef:cc:5d:a0:0c:f6:c7:40:c0:92:48:73:07:bb:f9: c7:19:5d:32:a8:af:3b:37:42:65:1f:e9:94:4c:4f:64:e0:b0: 22:9a:11:8e:5c:4d:98:34:c1:74:d1:5b:2b:8c:55:f2:ab:89: 49:f8:76:51:0b:af:34:19:c1:78:82:98:bd:54:33:5d:4a:e8: bf:8c:dc:ef:4b:b8:36:79:f4:01:e9:0d:8c:bf:d1:dd:16:f7: f8:16:ea:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDRFMjExMC8GA1UEBRMoMzZENUFENkUxMjZDRDVCMThFQzE0NUJDNzcyRjQ5MDBG OTRDQTZCQzAeFw0yNTExMDUwODEzMTRaFw0yNTExMTIwODEzMTRaMBgxFjAUBgNV BAMTDTY5MGIwNzFhLWZmOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqZlsJyHV5IdokOjX2Sp+/pIfA0BvE28CsahsfgCIVl+sC0qwc9b8EYQSLE8Nz r9yO7EsJZ7dMdsZtQgXEqGUzAkhM4xzO2cT2gUJv8AMkYK6XhkQo82W3z5NNHXIp EZBalbFt2f+OiPNezt5uhDiaG7XKQtN7vJVCe3Q9r5lxP3qU5hcDL/thjH9ovcBM HwFtLWdP0T6fAaqYdIY7bmBew/c3VeOhqB0+mS8hataRJfwybe8BXsz1FoomTSwZ /I7GKbyQ96qbTC2lC52tKzcwll/97MKkji0nApS9DzRyV2DbJwp9XdTLL1qeXcGP xVwP8xUcEDfjf93v2rptCIH7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYSEmh7iH 4PCkw33CPzmLY3QCobowHwYDVR0jBBgwFoAUNtWtbhJs1bGOwUW8dy9JAPlMprww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENEUyLzFGREIwRjNFQUVE QTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJHT3dVVzhkeTlKQVBsTXBy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnRXdGJoSnMxYkdPd1VXOGR5OUpBUGxNcHJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NEUyLzFGREIwRjNFQUVEQTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJH T3dVVzhkeTlKQVBsTXBydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGrlleZvmapiy8U3n+EzMGowUyi4FYya1FlxbpCAUcOOhjLHaIygLz4r 1f5+wyLCSIcHVly0CXgxmAWH9e9DG8DQhaU8z9QqFdeJ8kexTeUnBVao+s1ES2rt 2aQO04AidBaWX1felCoD1nsiHLRVN7F6Q2QWeOKc4MXBC8G55tx/0C8jRbvRwnbL nq82FogLqXRSw7e9fvWEYWkEo9X+J3Lh56JRiu/MXaAM9sdAwJJIcwe7+ccZXTKo rzs3QmUf6ZRMT2TgsCKaEY5cTZg0wXTRWyuMVfKriUn4dlELrzQZwXiCmL1UM11K 6L+M3O9LuDZ59AHpDYy/0d0W9/gW6gc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:56:34 2025 by rpki-client