$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: ATFFR7JW83qfNKrkoLpMm8MZlcMLTvGRdKfel/WTHsg= Subject key identifier: E7:75:AC:72:4F:10:28:D6:D3:4B:29:D4:05:DA:A4:97:3E:EB:88:1A Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 1FEC Signing time: Tue 04 Nov 2025 16:33:55 +0000 Manifest this update: Tue 04 Nov 2025 16:33:54 +0000 Manifest next update: Tue 11 Nov 2025 16:33:54 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: HUVhtb2ImnvDs+wrMgqxWxxyHT+kztSGjjxut5M78uM=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: aFxmstcvEMQ/qqQO/m7uR2Alk5KmIeuyGi0FUw+S+g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Nov 4 16:33:54 2025 GMT Not After : Nov 11 16:33:54 2025 GMT Subject: CN=690a2af3-cfb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:3f:e5:67:29:c7:e9:49:4e:04:9f:c5:be: fa:49:4a:07:e4:fe:59:68:5c:6a:fc:df:91:5a:ef: d2:52:c9:1e:10:92:3d:a0:53:25:1d:17:b5:06:49: d8:17:3e:50:7c:96:8b:8d:76:8d:7b:71:4a:30:ab: 3d:ff:e6:f7:be:8d:30:4e:64:96:d2:45:e7:31:80: 90:6b:2c:5e:11:52:20:e0:a9:67:d8:0f:47:1b:28: b1:b6:d8:24:67:49:0a:b7:39:6a:d8:e0:1b:fc:9c: ef:30:ca:16:1c:69:b2:b6:ed:71:47:fb:e9:1c:a5: e4:f7:7c:2f:58:9b:0a:ca:f6:65:c6:52:19:f7:28: ee:28:53:91:72:9b:f2:46:4b:08:ef:e5:5a:8d:b8: e2:5d:ac:88:77:71:b4:5f:96:ce:a7:2f:60:c4:7f: 58:f9:89:63:e5:86:e5:e5:47:cf:36:a9:32:c2:33: 3c:94:aa:7f:b4:ed:ae:6f:01:02:1c:4a:e0:f2:d8: 4d:fb:f2:df:d0:87:9c:a0:fa:c9:d6:65:4f:c7:4c: d1:83:d9:23:bd:5e:de:66:30:40:a8:4b:ef:b7:16: ae:fe:ed:d2:18:a0:9c:d0:0d:11:85:28:a8:1a:08: c2:ad:82:bf:22:b4:06:a1:6f:ef:3c:ec:8b:e2:8f: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:75:AC:72:4F:10:28:D6:D3:4B:29:D4:05:DA:A4:97:3E:EB:88:1A X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:77:f6:e1:e3:ab:39:cb:75:bf:05:3f:3c:a4:e5:a6:ce:b9: 8f:c0:70:56:8d:ec:89:de:57:fd:0d:9f:98:02:eb:87:0d:04: a9:cb:b8:ec:80:79:a5:d7:1d:cc:9a:8d:f9:fa:51:52:29:f8: 78:af:36:12:0b:7d:c4:8e:d6:44:3a:48:04:3f:69:e2:20:e1: d5:e9:2e:54:6f:7d:0a:9e:91:d2:39:af:de:c5:56:15:cb:be: bb:37:94:13:f7:74:98:8a:4b:b6:d6:81:5f:c3:84:59:1c:ee: fc:a7:8e:2a:31:1d:38:13:38:59:f3:5c:e3:13:d7:d9:78:b2: ec:31:08:82:ef:46:12:3e:e0:47:81:89:b9:31:9b:36:09:a2: 68:fb:3f:04:54:66:dd:a6:c1:4c:9c:1d:e6:41:32:50:07:31: 38:4f:05:bf:6a:91:1a:14:fa:2d:6c:53:d9:89:c5:8e:76:87: 59:32:f8:5b:aa:6f:ce:c3:f8:c5:64:94:17:58:e4:6b:31:19: 1b:4a:9b:25:b0:3a:72:10:7b:1b:dd:d2:fb:74:61:48:30:cc: d1:da:ba:73:f5:22:23:53:24:18:84:68:f4:64:1e:a6:e8:8a: e1:56:cb:ec:99:ed:27:d5:ee:ce:66:59:9a:be:ae:78:66:b5: ec:4b:06:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjUxMTA0MTYzMzU0WhcNMjUxMTExMTYzMzU0WjAYMRYwFAYD VQQDEw02OTBhMmFmMy1jZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29c/5Wcpx+lJTgSfxb76SUoH5P5ZaFxq/N+RWu/SUskeEJI9oFMlHRe1BknY Fz5QfJaLjXaNe3FKMKs9/+b3vo0wTmSW0kXnMYCQayxeEVIg4Kln2A9HGyixttgk Z0kKtzlq2OAb/JzvMMoWHGmytu1xR/vpHKXk93wvWJsKyvZlxlIZ9yjuKFORcpvy RksI7+VajbjiXayId3G0X5bOpy9gxH9Y+Ylj5Ybl5UfPNqkywjM8lKp/tO2ubwEC HErg8thN+/Lf0IecoPrJ1mVPx0zRg9kjvV7eZjBAqEvvtxau/u3SGKCc0A0RhSio GgjCrYK/IrQGoW/vPOyL4o9SCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd1rHJP ECjW00sp1AXapJc+64gaMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkd/bh46s5y3W/BT88pOWmzrmPwHBWjeyJ3lf9DZ+YAuuHDQSpy7js gHml1x3Mmo35+lFSKfh4rzYSC33EjtZEOkgEP2niIOHV6S5Ub30KnpHSOa/exVYV y767N5QT93SYiku21oFfw4RZHO78p44qMR04EzhZ81zjE9fZeLLsMQiC70YSPuBH gYm5MZs2CaJo+z8EVGbdpsFMnB3mQTJQBzE4TwW/apEaFPotbFPZicWOdodZMvhb qm/Ow/jFZJQXWORrMRkbSpslsDpyEHsb3dL7dGFIMMzR2rpz9SIjUyQYhGj0ZB6m 6IrhVsvsme0n1e7OZlmavq54ZrXsSwao -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:44 2025 by rpki-client