$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: UBwt94jmWiJ+1GXlmExlvf76+c2P3M4Bk5UAoXYMXS0= Subject key identifier: BD:DD:2E:68:BD:A9:0A:5F:21:64:8C:D2:60:46:39:FA:AA:2E:86:0A Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 7D Signing time: Mon 03 Nov 2025 06:43:42 +0000 Manifest this update: Mon 03 Nov 2025 06:43:41 +0000 Manifest next update: Mon 10 Nov 2025 06:43:41 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: eHar49i7NTfdq0nRklsZ95fKwLVp0rB0z1Hu1z1fhJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Nov 3 06:43:41 2025 GMT Not After : Nov 10 06:43:41 2025 GMT Subject: CN=69084f1e-d34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:25:3f:35:88:39:1a:8d:21:f2:0e:68:69: 9e:9a:ef:7f:2c:f7:5b:2f:39:b1:3d:79:d6:65:7d: b4:11:d4:08:18:59:3c:e1:f9:46:0a:82:3e:bc:91: b2:78:3c:05:86:e9:dd:03:df:2d:21:5a:e7:18:cd: 4f:eb:3e:c8:65:7a:75:db:b9:0f:86:d6:9d:55:86: 01:fd:f7:ed:66:30:35:bd:3e:4c:ba:d7:b3:28:c1: 32:33:45:4e:79:e0:59:c7:30:b2:00:bd:5d:bf:92: 17:58:44:21:d3:bb:d1:b5:f9:2d:47:76:21:01:47: c1:3a:b5:a8:aa:fd:e9:c7:e6:e8:cf:2d:5d:cf:35: 24:e2:48:70:83:69:ca:d5:84:7f:98:cb:7f:91:1c: 82:3e:c5:6b:f6:8b:68:e3:40:68:93:9d:a9:7b:12: 0b:65:c5:b8:d9:fd:f0:66:b2:35:1a:32:10:85:8c: 4e:11:31:47:b9:3f:c9:c7:3e:e4:c0:8c:d3:8b:6b: 8d:00:f6:8f:78:76:11:e1:1c:e3:31:f9:b5:c1:83: 6e:4d:29:32:44:38:07:ba:0d:17:be:aa:8d:db:21: 1d:4d:b0:23:ab:eb:1c:97:d8:df:11:eb:ff:34:f7: ba:1b:be:8c:fd:fc:09:11:94:95:c2:01:ac:a0:b8: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:2E:68:BD:A9:0A:5F:21:64:8C:D2:60:46:39:FA:AA:2E:86:0A X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c9:78:5d:04:71:43:ea:dc:2b:ac:ed:73:d8:03:2b:a7:ea: f2:32:81:f5:ed:52:5c:8e:e2:32:58:66:95:5f:fe:3e:99:71: 60:26:2f:eb:80:ca:d3:b3:b1:50:ff:b6:b7:22:d3:0d:2a:13: 06:81:3c:78:ef:c3:88:50:ad:8b:78:87:6d:c9:e1:dc:7e:7d: 65:f1:b9:03:71:5a:35:d4:67:20:7f:be:c6:f6:47:79:1f:52: 6b:c6:cd:85:c3:76:db:6e:69:d1:44:cc:96:46:41:bb:97:09: 5f:9c:aa:e0:3c:90:fb:a6:88:01:d1:b5:2e:79:a1:87:56:2c: e8:02:f9:48:ab:cd:7e:c1:a9:9b:79:84:ea:cb:85:bb:93:40: ec:e3:5d:13:8e:25:5b:7d:92:f4:08:1f:b0:cc:c6:db:0f:47: 1a:76:8d:27:4e:3b:08:e6:2e:d4:82:56:3e:f6:52:f1:77:dd: 21:fd:bf:6a:c8:b2:88:e4:db:50:f1:80:c7:8c:e0:a7:be:b7: 6e:26:8c:54:dc:5e:ec:f2:9f:b2:9d:27:9b:b6:5d:d5:75:96: 3f:8d:fd:b9:0c:09:5d:3b:48:be:39:55:7d:86:ac:c4:34:ca: 37:f8:8c:be:b5:fe:02:73:7a:99:7f:05:1b:7b:73:9a:e6:db: 38:df:1d:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoOUU3MUZCNzFCNjcwMEM0MDQ1QTVDMzQwQzE4RjEzMEYw ODYwQUEzOTAeFw0yNTExMDMwNjQzNDFaFw0yNTExMTAwNjQzNDFaMBgxFjAUBgNV BAMTDTY5MDg0ZjFlLWQzNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9pSU/NYg5Go0h8g5oaZ6a738s91svObE9edZlfbQR1AgYWTzh+UYKgj68kbJ4 PAWG6d0D3y0hWucYzU/rPshlenXbuQ+G1p1VhgH99+1mMDW9Pky617MowTIzRU55 4FnHMLIAvV2/khdYRCHTu9G1+S1HdiEBR8E6taiq/enH5ujPLV3PNSTiSHCDacrV hH+Yy3+RHII+xWv2i2jjQGiTnal7EgtlxbjZ/fBmsjUaMhCFjE4RMUe5P8nHPuTA jNOLa40A9o94dhHhHOMx+bXBg25NKTJEOAe6DRe+qo3bIR1NsCOr6xyX2N8R6/80 97obvoz9/AkRlJXCAayguETpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvd0uaL2p Cl8hZIzSYEY5+qouhgowHwYDVR0jBBgwFoAUnnH7cbZwDEBFpcNAwY8TDwhgqjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzU0NjY2QjNDRjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm5IN2NiWndERUJGcGNOQXdZOFREd2hncWprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzU0NjY2QjNDRjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVC RnBjTkF3WThURHdoZ3Fqay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLJeF0EcUPq3Cus7XPYAyun6vIygfXtUlyO4jJYZpVf/j6ZcWAmL+uA ytOzsVD/trci0w0qEwaBPHjvw4hQrYt4h23J4dx+fWXxuQNxWjXUZyB/vsb2R3kf UmvGzYXDdttuadFEzJZGQbuXCV+cquA8kPumiAHRtS55oYdWLOgC+UirzX7BqZt5 hOrLhbuTQOzjXROOJVt9kvQIH7DMxtsPRxp2jSdOOwjmLtSCVj72UvF33SH9v2rI sojk21DxgMeM4Ke+t24mjFTcXuzyn7KdJ5u2XdV1lj+N/bkMCV07SL45VX2GrMQ0 yjf4jL61/gJzepl/BRt7c5rm2zjfHUA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:57 2025 by rpki-client