$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json) Hash identifier: jSqFeaMr23DHdcys3f5b0pwJ+AF1jrFJzQwPTqq6Aj0= Subject key identifier: E5:59:00:3E:76:26:09:EF:5F:62:09:9E:50:11:F5:7A:B3:6F:BA:1C Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft Manifest number: 3B Signing time: Wed 05 Nov 2025 07:42:26 +0000 Manifest this update: Wed 05 Nov 2025 07:42:25 +0000 Manifest next update: Wed 12 Nov 2025 07:42:25 +0000 Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: QL6mbsfYbEuVJDIxazsCkeazGQFbC3HlO7iv/4V8020=) 2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Validity Not Before: Nov 5 07:42:25 2025 GMT Not After : Nov 12 07:42:25 2025 GMT Subject: CN=690affe2-5823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:4b:9b:b4:0b:95:e2:05:fa:45:f4:10:87: 60:fb:5d:23:17:2f:57:72:96:80:d1:f3:f8:95:de: 96:8f:e9:9f:30:d4:aa:a1:34:5c:3e:6d:d2:29:34: ba:48:57:be:87:10:6a:f8:fa:64:91:9a:a7:de:34: 8e:0a:f3:ad:c4:81:32:bc:96:3c:f1:a0:af:a1:da: b4:ad:67:41:99:5c:12:d4:f8:94:a3:3a:d1:5b:f2: 19:33:f4:39:f5:2d:75:6b:9c:7b:78:38:74:e0:55: 57:25:16:96:4a:c8:a3:5a:06:32:f1:34:9b:63:93: 77:fc:b4:60:c9:1f:0e:92:ec:ca:40:a9:68:60:a9: c5:21:ab:58:13:e1:99:47:d9:42:3f:e6:20:26:9b: 2d:06:d0:6c:5e:fd:61:b9:b0:c8:4b:96:dc:48:f9: 42:94:06:57:f9:ba:70:ae:dc:de:92:f9:72:40:a8: 41:82:11:34:7d:38:32:74:bd:20:66:98:02:1c:0a: e7:00:b3:16:6c:76:cd:96:db:0b:31:d2:3d:b9:1c: 8c:a1:c4:f3:7b:c7:0e:f4:24:f8:40:0f:77:3a:01: 4c:96:5a:7b:78:7a:c5:df:5c:7f:2d:bc:86:e4:de: 66:a5:6f:bb:50:48:b6:bd:72:8a:4d:a6:90:ae:f5: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:59:00:3E:76:26:09:EF:5F:62:09:9E:50:11:F5:7A:B3:6F:BA:1C X509v3 Authority Key Identifier: keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:46:89:ae:fc:aa:e4:b9:c5:52:bd:3b:3f:5f:f8:30:a5:6b: d7:88:ce:d9:af:33:e9:71:15:3a:93:16:0a:05:af:51:dc:f6: 58:fd:d8:55:be:fd:d2:38:cf:cc:93:d0:62:61:89:80:a4:28: 6b:4b:fe:f2:de:22:6e:14:bb:c6:a4:e9:33:16:84:a6:d2:82: 37:f3:37:9f:7d:2a:65:0e:1d:82:0b:d6:04:2c:06:05:c6:02: 05:08:5f:fd:1a:7a:f7:37:f3:a8:50:b1:d5:67:18:f7:17:df: 7c:6c:02:a9:c2:3c:0e:2d:7d:ca:6b:f4:a5:20:b3:17:b1:2e: e9:cf:9e:f7:77:f6:5c:7b:4a:1b:09:01:88:42:d1:c1:db:68: 6d:06:f0:87:85:e0:a4:94:45:eb:31:21:4d:7e:7f:88:89:2c: b2:95:29:39:d1:6e:de:56:f1:3d:60:56:59:94:07:92:9a:41: 59:cd:15:84:80:c3:80:e1:e1:f5:a5:ce:e0:e4:65:1c:be:03: f1:7b:e4:32:13:4a:e8:23:87:cd:a0:9a:77:06:4d:5b:b0:e5: fd:f1:76:55:12:c9:eb:89:29:56:1a:c9:bf:9c:ef:eb:50:81: 89:aa:81:63:75:64:3b:fe:35:a7:04:4a:4b:c8:ba:e5:fd:c0: 1d:5a:82:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjUxNTExMC8GA1UEBRMoMzZEQjQ0RDRDMTU5ODg2NzM4MjE1QTU2MTBCMTEwQzI0 NDg2Q0E1NjAeFw0yNTExMDUwNzQyMjVaFw0yNTExMTIwNzQyMjVaMBgxFjAUBgNV BAMTDTY5MGFmZmUyLTU4MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzp0ubtAuV4gX6RfQQh2D7XSMXL1dyloDR8/iV3paP6Z8w1KqhNFw+bdIpNLpI V76HEGr4+mSRmqfeNI4K863EgTK8ljzxoK+h2rStZ0GZXBLU+JSjOtFb8hkz9Dn1 LXVrnHt4OHTgVVclFpZKyKNaBjLxNJtjk3f8tGDJHw6S7MpAqWhgqcUhq1gT4ZlH 2UI/5iAmmy0G0Gxe/WG5sMhLltxI+UKUBlf5unCu3N6S+XJAqEGCETR9ODJ0vSBm mAIcCucAsxZsds2W2wsx0j25HIyhxPN7xw70JPhAD3c6AUyWWnt4esXfXH8tvIbk 3malb7tQSLa9copNppCu9aoxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5VkAPnYm Ce9fYgmeUBH1erNvuhwwHwYDVR0jBBgwFoAUNttE1MFZiGc4IVpWELEQwkSGylYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTE1Lzg0QzQ2NzRBNjBD MTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3ls WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnR0RTFNRlppR2M0SVZwV0VMRVF3a1NHeWxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 NTE1Lzg0QzQ2NzRBNjBDMTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdj NElWcFdFTEVRd2tTR3lsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFNGia78quS5xVK9Oz9f+DCla9eIztmvM+lxFTqTFgoFr1Hc9lj92FW+ /dI4z8yT0GJhiYCkKGtL/vLeIm4Uu8ak6TMWhKbSgjfzN599KmUOHYIL1gQsBgXG AgUIX/0aevc386hQsdVnGPcX33xsAqnCPA4tfcpr9KUgsxexLunPnvd39lx7ShsJ AYhC0cHbaG0G8IeF4KSUResxIU1+f4iJLLKVKTnRbt5W8T1gVlmUB5KaQVnNFYSA w4Dh4fWlzuDkZRy+A/F75DITSugjh82gmncGTVuw5f3xdlUSyeuJKVYayb+c7+tQ gYmqgWN1ZDv+NacESkvIuuX9wB1agvA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:08 2025 by rpki-client