$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft File: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json) Hash identifier: TrG+oyKHl+lOSBbq/6sRQp/FVz5PNnD/V40chzBSX18= Subject key identifier: 53:78:35:25:CB:A3:6D:2D:E6:05:1A:97:AF:24:F1:21:78:F1:1D:65 Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Certificate serial: 05C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft Manifest number: 05BB Signing time: Tue 04 Nov 2025 23:11:26 +0000 Manifest this update: Tue 04 Nov 2025 23:11:25 +0000 Manifest next update: Tue 11 Nov 2025 23:11:25 +0000 Files and hashes: 1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: 4R+ll9rbWKM9VUxArK3Ds/LKxsNd64oaz+BdR4sUtFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1476 (0x5c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Validity Not Before: Nov 4 23:11:25 2025 GMT Not After : Nov 11 23:11:25 2025 GMT Subject: CN=690a881d-d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:16:88:28:9f:9f:42:44:e7:8c:fd:cc:67: a9:7e:6a:34:3e:64:69:73:ad:73:86:bf:f3:b1:01: 2a:13:f4:51:59:ad:34:a7:d5:cf:c5:fe:21:1a:26: c2:ea:8f:55:f3:55:7a:93:a8:a7:42:0f:85:82:e1: c4:8f:b9:9a:a1:99:0d:31:b4:c9:57:27:e7:a2:1f: dd:29:72:b9:77:e4:d8:0c:2c:b3:96:11:11:15:62: 90:77:d3:05:db:a0:ad:3e:8d:5d:b9:2d:a2:61:5d: 38:b6:86:ee:a7:1e:13:22:bc:e8:51:e4:a7:ac:44: 89:bd:b1:75:33:1b:99:2f:e9:ed:2a:5a:c5:b7:75: 62:4d:e1:70:b6:bd:d0:c8:76:70:e4:f7:d1:49:b2: 13:69:82:51:54:25:3d:74:c5:ab:43:59:b0:0f:10: 22:c4:35:b7:8b:98:c1:63:e7:8b:a7:68:2f:3d:72: 40:19:27:84:b3:98:ea:4e:09:2e:33:1d:2c:12:bc: 6b:50:10:0a:16:31:85:5b:22:d9:75:2a:5c:8f:32: e2:cc:c7:31:67:e9:88:9d:71:4f:ec:16:1e:36:c3: 59:7a:cb:d4:fb:98:81:d3:2a:10:65:48:a3:68:5c: 1e:55:60:23:eb:b7:33:3a:d2:4e:79:ab:8f:b6:ac: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:35:25:CB:A3:6D:2D:E6:05:1A:97:AF:24:F1:21:78:F1:1D:65 X509v3 Authority Key Identifier: keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8d:69:9e:8b:48:c0:54:b3:30:30:9d:b6:a5:4f:dc:13:c2: a1:72:18:cd:f6:86:3d:2b:8c:6f:f4:4d:1c:bd:6d:f1:b6:ab: 3f:91:bd:1e:c1:24:11:de:25:0a:e7:58:2a:f2:f7:8a:d5:49: 0a:22:f7:88:12:dc:f6:7c:fd:d5:7e:4e:c2:b7:b8:2b:3e:65: 24:05:c8:ff:70:15:12:4a:d9:af:e4:ad:3c:d1:46:1b:0b:44: 65:36:8f:78:ff:87:81:a7:27:90:28:5b:44:ce:58:20:87:22: b2:49:8b:15:ba:d3:54:28:5b:9d:9f:be:4a:d2:fb:6f:d0:58: 71:fc:22:ae:77:2f:7f:ed:8f:e3:dd:03:0a:d2:87:f3:eb:15: 00:bb:8b:54:10:26:e0:cc:22:c7:b9:c5:dd:4d:8c:e5:4a:28: 4f:fb:b0:8b:e0:76:9e:74:92:41:ed:4c:0a:ad:b1:0e:7c:50: c6:3d:b2:fe:9a:f1:11:6f:c9:cc:41:88:20:12:18:9d:7d:b7: f8:34:e1:97:2c:36:0d:2d:c0:fb:e5:a2:1e:68:2e:9e:65:a5: 87:94:de:80:04:10:74:4f:cc:9c:d5:d7:1d:5e:b3:e8:93:38: f2:a3:25:33:31:cc:9b:ba:8c:fb:5c:ca:c4:34:87:f1:6c:80: 17:71:98:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3QjAxMTAvBgNVBAUTKDM2QkZERjRDNjVDREVFNkJCNzZFOUYzRTYwODAzNDY2 MUE5RDdBMjYwHhcNMjUxMTA0MjMxMTI1WhcNMjUxMTExMjMxMTI1WjAYMRYwFAYD VQQDEw02OTBhODgxZC1kNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupcWiCifn0JE54z9zGepfmo0PmRpc61zhr/zsQEqE/RRWa00p9XPxf4hGibC 6o9V81V6k6inQg+FguHEj7maoZkNMbTJVyfnoh/dKXK5d+TYDCyzlhERFWKQd9MF 26CtPo1duS2iYV04tobupx4TIrzoUeSnrESJvbF1MxuZL+ntKlrFt3ViTeFwtr3Q yHZw5PfRSbITaYJRVCU9dMWrQ1mwDxAixDW3i5jBY+eLp2gvPXJAGSeEs5jqTgku Mx0sErxrUBAKFjGFWyLZdSpcjzLizMcxZ+mInXFP7BYeNsNZesvU+5iB0yoQZUij aFweVWAj67czOtJOeauPtqxPawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN4NSXL o20t5gUal68k8SF48R1lMB8GA1UdIwQYMBaAFDa/30xlze5rt26fPmCANGYanXom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdCMC8yMUMwMDgxOEU0 NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdtdTNicDgtWUlBMFpocWRl aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05yX2ZUR1hON211M2JwOC1ZSUEwWmhxZGVpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdCMC8yMUMwMDgxOEU0NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdt dTNicDgtWUlBMFpocWRlaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALjWmei0jAVLMwMJ22pU/cE8KhchjN9oY9K4xv9E0cvW3xtqs/kb0e wSQR3iUK51gq8veK1UkKIveIEtz2fP3Vfk7Ct7grPmUkBcj/cBUSStmv5K080UYb C0RlNo94/4eBpyeQKFtEzlgghyKySYsVutNUKFudn75K0vtv0Fhx/CKudy9/7Y/j 3QMK0ofz6xUAu4tUECbgzCLHucXdTYzlSihP+7CL4HaedJJB7UwKrbEOfFDGPbL+ mvERb8nMQYggEhidfbf4NOGXLDYNLcD75aIeaC6eZaWHlN6ABBB0T8yc1dcdXrPo kzjyoyUzMcybuoz7XMrENIfxbIAXcZiN -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:50 2025 by rpki-client