$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft File: MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json) Hash identifier: ym/OrTa9XNXIX4jCCLMVfehGIVg5reTmJwsVGU8Y8EI= Subject key identifier: FF:9E:05:96:3B:4C:D6:75:D0:16:96:E9:B9:AA:8F:07:46:62:69:1E Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft Manifest number: 7D Signing time: Mon 03 Nov 2025 06:47:35 +0000 Manifest this update: Mon 03 Nov 2025 06:47:34 +0000 Manifest next update: Mon 10 Nov 2025 06:47:34 +0000 Files and hashes: 1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: cNquHl0/Spbk0OW61WNLXNfXAvqmTk1+XAJJMpi4fYk=) 2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: t9LgVYyuR76/7PmfedGxaDrMAlK0pUEQonnQh6SyVwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Validity Not Before: Nov 3 06:47:34 2025 GMT Not After : Nov 10 06:47:34 2025 GMT Subject: CN=69085007-5394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:b5:d6:57:ac:2c:5b:c1:65:35:c6:0a:9e: 50:d5:c4:ae:08:d9:45:56:8c:f9:a5:ab:80:8f:61: 35:c3:2b:e4:33:ad:76:c8:8b:6b:e5:ff:09:16:d4: dd:4e:07:fb:1f:78:7e:46:53:bf:8f:e2:39:11:cb: c8:ff:41:1a:ff:1c:ab:ef:80:20:98:1a:6d:70:76: 33:50:1e:9c:73:2b:50:fb:d8:a7:1f:43:1f:b5:e7: a3:22:cf:2e:7f:18:e8:14:9a:af:9a:b1:30:38:38: 9a:ef:15:5f:9b:93:1d:4e:30:d8:67:6f:3c:b5:18: fd:7c:68:3a:d2:c8:24:dd:d6:30:13:3f:b2:11:33: e2:b2:4a:6e:8f:da:d3:f8:b4:9a:1b:38:e2:49:1f: fe:81:57:4c:f0:7c:57:e1:58:7a:6a:64:30:ea:da: a7:10:8c:d8:3d:6f:da:36:75:4c:9f:39:d1:cb:b0: 71:df:c5:cd:59:d3:02:fb:36:4e:d6:2e:52:28:28: eb:7d:e8:2c:de:c8:43:3b:fa:e2:92:a1:ff:43:f1: a5:b1:95:17:c5:cd:42:19:c7:ba:d2:25:ef:78:52: 76:d6:c3:ef:ea:12:02:0a:1b:33:ee:a9:c1:29:6e: d0:f4:f0:dc:8c:85:66:41:dd:d1:b7:e9:7b:07:23: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9E:05:96:3B:4C:D6:75:D0:16:96:E9:B9:AA:8F:07:46:62:69:1E X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:cb:0a:16:e1:13:1e:fa:a6:de:45:43:6b:2c:b5:3a:96:14: 68:2c:07:8f:db:f6:d8:ab:0b:ca:3e:0c:00:e2:88:56:59:8f: 71:ff:21:f4:ce:e9:1d:9f:a3:88:17:58:f5:2b:b1:c7:2e:6a: 8d:dd:c5:54:f6:1f:d4:c0:ea:ec:89:4a:1f:ef:0f:d1:6d:48: d0:dd:80:e8:57:89:70:3e:90:99:40:58:5d:e2:ea:4f:bf:ce: 20:0d:f3:46:56:4b:dc:56:cf:c2:b1:9d:34:47:01:31:92:00: 72:48:e0:f8:27:45:fb:4c:5e:43:bd:33:91:6e:31:fd:4d:19: 9e:78:f0:9c:0a:15:6a:12:4f:e8:b1:26:4c:77:52:ae:84:ba: b5:80:00:8b:94:12:ba:9c:f1:b4:d5:f3:64:f7:47:a5:38:e4: 31:3b:94:ce:32:75:17:85:c5:de:e8:c7:8a:1a:98:54:4b:fc: c3:ad:ee:45:0f:d7:98:7e:83:e4:d0:26:55:28:4b:0a:2f:2c: ee:cc:e8:81:6c:cb:99:ad:f5:05:6c:d1:b6:a5:10:8b:16:c5: f9:ec:55:47:19:5d:7d:9f:61:4f:d9:89:96:47:65:b6:a7:0d: 62:1c:d3:ff:8b:f9:4c:2a:5b:5e:12:2c:a1:af:ea:2d:17:49: e5:0a:02:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI5MTMxMTAvBgNVBAUTKDMwREZDREM4OTJFNzNFRTI1NDY0MjgyNzQyRTI5QzU2 N0VBM0NFMDMwHhcNMjUxMTAzMDY0NzM0WhcNMjUxMTEwMDY0NzM0WjAYMRYwFAYD VQQDEw02OTA4NTAwNy01Mzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/211lesLFvBZTXGCp5Q1cSuCNlFVoz5pauAj2E1wyvkM612yItr5f8JFtTd Tgf7H3h+RlO/j+I5EcvI/0Ea/xyr74AgmBptcHYzUB6ccytQ+9inH0MfteejIs8u fxjoFJqvmrEwODia7xVfm5MdTjDYZ288tRj9fGg60sgk3dYwEz+yETPiskpuj9rT +LSaGzjiSR/+gVdM8HxX4Vh6amQw6tqnEIzYPW/aNnVMnznRy7Bx38XNWdMC+zZO 1i5SKCjrfegs3shDO/rikqH/Q/GlsZUXxc1CGce60iXveFJ21sPv6hICChsz7qnB KW7Q9PDcjIVmQd3Rt+l7ByOvcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+eBZY7 TNZ10BaW6bmqjwdGYmkeMB8GA1UdIwQYMBaAFDDfzciS5z7iVGQoJ0LinFZ+o84D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjkxMy84QjQzQjczNkZF NDkxMUVGQTczNUFENkZDNEY5QUUwMi9NTl9OeUpMblB1SlVaQ2duUXVLY1ZuNmp6 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjkxMy84QjQzQjczNkZFNDkxMUVGQTczNUFENkZDNEY5QUUwMi9NTl9OeUpMblB1 SlVaQ2duUXVLY1ZuNmp6Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJywoW4RMe+qbeRUNrLLU6lhRoLAeP2/bYqwvKPgwA4ohWWY9x/yH0 zukdn6OIF1j1K7HHLmqN3cVU9h/UwOrsiUof7w/RbUjQ3YDoV4lwPpCZQFhd4upP v84gDfNGVkvcVs/CsZ00RwExkgBySOD4J0X7TF5DvTORbjH9TRmeePCcChVqEk/o sSZMd1KuhLq1gACLlBK6nPG01fNk90elOOQxO5TOMnUXhcXe6MeKGphUS/zDre5F D9eYfoPk0CZVKEsKLyzuzOiBbMuZrfUFbNG2pRCLFsX57FVHGV19n2FP2YmWR2W2 pw1iHNP/i/lMKlteEiyhr+otF0nlCgKV -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:22 2025 by rpki-client