$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft File: NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json) Hash identifier: Bdjg86Udx7eJ+ALtGQfTLdk+YQLH4AAlGJf1xdMM3Og= Subject key identifier: 68:B0:A1:34:F9:2F:3B:FE:5B:99:6A:A3:B2:B7:99:33:16:A7:FB:73 Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD Certificate issuer: /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft Manifest number: 0827 Signing time: Mon 03 Nov 2025 00:17:00 +0000 Manifest this update: Mon 03 Nov 2025 00:16:59 +0000 Manifest next update: Mon 10 Nov 2025 00:16:59 +0000 Files and hashes: 1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: NbieYbLOKorWsVgU8QdWAAOZB5HNtx/WPfJlRaIf0qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Validity Not Before: Nov 3 00:16:59 2025 GMT Not After : Nov 10 00:16:59 2025 GMT Subject: CN=6907f47b-b7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:84:9c:82:f0:60:c3:a1:11:d8:ec:20:8b: 83:e1:18:6b:39:70:5e:4a:40:3f:2c:84:cd:25:9d: 5f:c9:18:7b:73:ea:ee:80:cd:da:05:a3:fd:c2:95: 74:fe:dc:7a:35:2d:1a:5c:eb:37:85:b8:7b:ff:2f: 2c:06:d6:31:81:b1:54:76:6d:65:d0:e2:ab:9a:00: 5b:f4:9b:71:7d:80:fc:85:61:db:6a:55:d1:48:00: 37:71:74:6d:81:a1:b5:3c:b5:47:06:32:d2:d7:d9: 51:d5:82:6b:5b:2b:d1:eb:77:35:34:91:63:ea:5d: 62:b5:30:cc:08:f7:d0:32:c0:68:40:11:20:80:6e: a8:7b:8b:2a:4e:2b:d5:9b:73:75:e7:0e:73:fb:d1: 52:08:35:7a:4c:8d:f6:ea:c0:eb:db:06:af:58:92: 5a:fe:c9:e9:b5:00:9a:6d:db:2c:74:39:50:5e:e3: 80:c5:54:23:87:f7:e8:ed:6e:af:76:fe:90:6c:3b: a8:c7:76:d5:9c:1d:bc:54:d5:55:bb:ca:37:ae:4d: 74:df:f0:86:50:2e:2c:10:dc:6d:f8:70:75:6f:15: 0e:8d:8e:c6:fd:1b:c8:d4:a4:5b:cb:7b:5b:7e:14: 40:b2:f0:0d:cb:cf:10:31:3d:74:3e:02:be:2c:80: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B0:A1:34:F9:2F:3B:FE:5B:99:6A:A3:B2:B7:99:33:16:A7:FB:73 X509v3 Authority Key Identifier: keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2e:b2:13:a4:30:2d:02:fa:e6:da:a0:89:ad:47:ed:8e:ef: e8:7d:8c:86:e1:4b:98:da:d8:7e:42:35:46:28:8f:67:bd:07: 56:f5:78:53:ab:e8:60:22:56:53:aa:97:74:ab:32:db:34:51: 2e:cf:96:3e:f4:04:8f:b4:9f:2d:11:22:56:ca:1d:c6:a3:53: d1:66:73:9b:62:22:32:9e:53:09:bb:fc:90:4f:08:cc:e0:8f: 5d:03:19:25:ce:53:68:bf:28:8e:55:f6:81:c6:67:5f:c1:37: 46:b4:45:20:f7:d2:24:0b:ec:90:28:4c:06:22:9f:69:21:52: 9a:9e:f2:8a:a8:03:3c:3d:c9:e4:51:e3:5b:e1:76:5f:4f:6d: 5e:1a:76:a3:92:8b:ed:1b:68:99:d9:84:46:b6:47:5c:80:bd: 3c:ef:93:02:bf:78:34:93:bc:0d:b9:05:f8:10:07:36:05:79: dd:97:70:01:cc:8f:d2:b3:4c:0e:19:56:78:19:5a:87:3d:b6: 88:e0:02:0d:58:c3:fd:ea:ae:29:7e:47:96:a6:5d:70:53:85: 68:93:64:76:11:af:e2:ed:c6:b9:96:6d:d1:72:0a:c0:1a:48: fb:81:4d:13:8b:fa:bc:cf:cc:b5:4d:31:68:5b:9e:6d:5c:df: 4d:f0:f8:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE RjYzQzg2Q0QwHhcNMjUxMTAzMDAxNjU5WhcNMjUxMTEwMDAxNjU5WjAYMRYwFAYD VQQDEw02OTA3ZjQ3Yi1iN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqP2EnILwYMOhEdjsIIuD4RhrOXBeSkA/LITNJZ1fyRh7c+rugM3aBaP9wpV0 /tx6NS0aXOs3hbh7/y8sBtYxgbFUdm1l0OKrmgBb9JtxfYD8hWHbalXRSAA3cXRt gaG1PLVHBjLS19lR1YJrWyvR63c1NJFj6l1itTDMCPfQMsBoQBEggG6oe4sqTivV m3N15w5z+9FSCDV6TI326sDr2wavWJJa/snptQCabdssdDlQXuOAxVQjh/fo7W6v dv6QbDuox3bVnB28VNVVu8o3rk103/CGUC4sENxt+HB1bxUOjY7G/RvI1KRby3tb fhRAsvANy88QMT10PgK+LIDkpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiwoTT5 Lzv+W5lqo7K3mTMWp/tzMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z ZUNJSm5CLTVrZnpmWThoczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9LrITpDAtAvrm2qCJrUftju/ofYyG4UuY2th+QjVGKI9nvQdW9XhT q+hgIlZTqpd0qzLbNFEuz5Y+9ASPtJ8tESJWyh3Go1PRZnObYiIynlMJu/yQTwjM 4I9dAxklzlNovyiOVfaBxmdfwTdGtEUg99IkC+yQKEwGIp9pIVKanvKKqAM8Pcnk UeNb4XZfT21eGnajkovtG2iZ2YRGtkdcgL0875MCv3g0k7wNuQX4EAc2BXndl3AB zI/Ss0wOGVZ4GVqHPbaI4AINWMP96q4pfkeWpl1wU4Vok2R2Ea/i7ca5lm3RcgrA Gkj7gU0Ti/q8z8y1TTFoW55tXN9N8PhZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:03 2025 by rpki-client