$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: 1N52nW7opgnhP84ygxn2Oz/KYd7CwoXd06D7HbTH+LE= Subject key identifier: 93:4B:42:7A:C2:C6:C3:65:8C:52:44:70:89:F8:86:ED:D6:E6:9E:62 Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03FC Signing time: Mon 03 Nov 2025 00:26:37 +0000 Manifest this update: Mon 03 Nov 2025 00:26:36 +0000 Manifest next update: Mon 10 Nov 2025 00:26:36 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: KJc1085kHeRkoyyPftMVIS+XvhR7r/ZvqMTTb8bx+3I=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Nov 3 00:26:36 2025 GMT Not After : Nov 10 00:26:36 2025 GMT Subject: CN=6907f6bd-8e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:c5:65:0c:7b:1c:d1:ea:b0:35:54:cd:cf: 4a:99:bc:23:f7:cf:90:f0:ec:ec:9e:24:4a:af:a6: 8e:76:af:ad:32:06:a3:a4:85:96:9f:98:ef:35:6e: ab:da:9c:48:10:4c:a9:7c:bc:a3:99:ae:c2:42:b8: e2:2a:84:a3:ba:0b:9b:9a:7a:86:1e:5c:74:18:aa: 86:d8:75:af:83:5b:ef:87:02:d7:7a:67:ab:f4:5d: 87:be:ce:14:16:2f:ec:43:6f:ed:79:20:85:75:c7: bf:8c:de:a3:b2:6d:1a:9f:5f:19:d4:c2:56:65:a8: b7:34:c1:3f:b1:fe:fa:b8:d4:34:e0:a8:e0:8b:2e: ee:31:29:d2:db:c2:2e:11:39:c7:3b:95:4b:3a:2b: 1f:2f:0b:6a:4e:24:ab:7d:d7:2c:d4:10:f9:b0:0d: e1:0a:d5:dd:01:3c:ae:44:8d:c5:18:e1:1b:c1:73: c8:ff:fc:d7:e3:d0:99:e1:98:7e:e5:ce:70:c3:f6: d9:32:ba:c0:f4:e8:c3:d4:3f:13:f0:c5:c3:e3:58: 95:5a:c1:c2:e8:3a:99:ff:4f:40:e9:f9:4f:f4:94: 9f:99:bc:68:75:b1:54:68:cc:19:69:8a:17:34:db: 74:40:e7:6a:57:a1:ff:00:a1:0b:6d:73:7d:58:52: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4B:42:7A:C2:C6:C3:65:8C:52:44:70:89:F8:86:ED:D6:E6:9E:62 X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:85:21:26:5a:7b:6a:81:60:d2:eb:87:1f:f8:f0:85:7b:87: c8:ad:68:35:da:18:61:2d:99:24:fb:eb:0f:aa:07:e1:51:46: bc:c6:ea:07:f8:ee:9a:74:4b:5a:a5:e7:8a:6b:6d:b1:87:80: 92:51:93:fb:38:84:7b:95:77:41:f7:54:b0:93:9f:74:ec:10: 67:57:6b:22:57:32:b9:e8:a8:cd:d3:92:5a:36:02:a0:ee:a0: 0d:38:1f:36:1d:2b:27:30:ae:45:40:ef:a9:6e:b1:e7:cf:2b: 05:af:ad:13:4f:09:df:6a:fb:6e:cf:ac:3f:86:db:91:f5:95: 97:11:e8:67:82:27:26:b1:a7:99:c1:c3:09:fb:ab:99:18:b2: 7d:8e:1c:e8:6f:d9:81:85:a6:27:83:0e:b3:9a:a1:bc:af:b6: 3d:0d:33:fc:7c:a4:c2:3f:e5:3e:5b:d5:38:c6:74:fc:80:32: de:12:d6:ff:b7:f7:d1:c3:25:ae:66:67:d7:5e:d4:88:96:7f: 1a:8b:dc:41:d1:5b:61:58:b0:42:83:46:5a:8c:e8:af:0f:6a: 29:08:62:bb:83:07:88:a8:89:a6:4b:63:82:ea:5f:f7:9a:30: 5d:cb:12:08:c8:81:a2:19:95:71:50:9e:ea:fc:50:cb:68:67: c7:2e:8e:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUxMTAzMDAyNjM2WhcNMjUxMTEwMDAyNjM2WjAYMRYwFAYD VQQDEw02OTA3ZjZiZC04ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UTFZQx7HNHqsDVUzc9Kmbwj98+Q8OzsniRKr6aOdq+tMgajpIWWn5jvNW6r 2pxIEEypfLyjma7CQrjiKoSjugubmnqGHlx0GKqG2HWvg1vvhwLXemer9F2Hvs4U Fi/sQ2/teSCFdce/jN6jsm0an18Z1MJWZai3NME/sf76uNQ04Kjgiy7uMSnS28Iu ETnHO5VLOisfLwtqTiSrfdcs1BD5sA3hCtXdATyuRI3FGOEbwXPI//zX49CZ4Zh+ 5c5ww/bZMrrA9OjD1D8T8MXD41iVWsHC6DqZ/09A6flP9JSfmbxodbFUaMwZaYoX NNt0QOdqV6H/AKELbXN9WFLgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNLQnrC xsNljFJEcIn4hu3W5p5iMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuhSEmWntqgWDS64cf+PCFe4fIrWg12hhhLZkk++sPqgfhUUa8xuoH +O6adEtapeeKa22xh4CSUZP7OIR7lXdB91Swk5907BBnV2siVzK56KjN05JaNgKg 7qANOB82HSsnMK5FQO+pbrHnzysFr60TTwnfavtuz6w/htuR9ZWXEehngicmsaeZ wcMJ+6uZGLJ9jhzob9mBhaYngw6zmqG8r7Y9DTP8fKTCP+U+W9U4xnT8gDLeEtb/ t/fRwyWuZmfXXtSIln8ai9xB0VthWLBCg0ZajOivD2opCGK7gweIqImmS2OC6l/3 mjBdyxIIyIGiGZVxUJ7q/FDLaGfHLo50 -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:16 2025 by rpki-client