$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft File: jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json) Hash identifier: w7fGaqEjPapfBFC2Vj7L4xG0TTmc9pnYHtBZNlG7LcE= Subject key identifier: 2A:03:78:42:15:86:DC:F1:CF:FD:B7:90:07:F4:17:DD:7F:1E:EA:E7 Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF Certificate issuer: /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft Manifest number: 16 Signing time: Mon 03 Nov 2025 07:51:38 +0000 Manifest this update: Mon 03 Nov 2025 07:51:37 +0000 Manifest next update: Mon 10 Nov 2025 07:51:37 +0000 Files and hashes: 1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: 58Pqg3NVkHaNxhQcpowJ3T88hM7UmWIfvTc4MCkn0oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Validity Not Before: Nov 3 07:51:37 2025 GMT Not After : Nov 10 07:51:37 2025 GMT Subject: CN=69085f0a-904c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:4c:6e:90:a5:21:ee:13:ef:28:04:c7:bc: 01:83:22:05:1d:95:c2:ba:5a:54:00:de:2d:98:12: d3:1e:a3:75:40:5e:16:0a:f3:f2:98:b9:25:d4:a5: 79:8a:d6:19:55:6d:26:5e:c1:64:6a:6c:ad:83:b9: d2:39:3e:cc:ba:7e:fe:f1:65:7e:d2:4a:53:d5:a3: b0:60:65:d3:ef:d1:44:40:7d:56:81:f7:b4:60:48: c3:47:34:9c:63:51:1f:97:de:5d:fb:0b:87:d5:9e: 37:9f:54:32:d4:45:2a:f3:ba:a1:d8:f7:ad:df:ab: 2a:7a:88:94:66:69:eb:6c:a1:75:5c:af:88:0b:ab: a0:17:6e:e3:90:6d:3a:16:98:b1:7f:fd:08:0f:85: 2f:85:ee:d4:76:f4:75:85:a1:30:87:c7:61:a8:48: f5:c6:53:9d:c6:ab:59:25:fd:b2:15:ba:ac:45:7c: f3:64:48:c8:74:74:a0:00:89:20:c8:2c:a6:d3:2d: e7:3d:7c:5a:9d:81:a2:80:f8:3e:5e:66:fd:2e:0f: ab:16:d8:df:ee:a2:da:da:4a:86:0b:76:d0:97:38: a2:94:7d:91:49:68:40:a2:52:72:72:e8:88:66:44: c3:19:aa:2e:5d:92:43:8b:5f:0f:35:cc:aa:a7:d4: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:03:78:42:15:86:DC:F1:CF:FD:B7:90:07:F4:17:DD:7F:1E:EA:E7 X509v3 Authority Key Identifier: keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b2:9a:27:7c:b8:39:6e:39:84:80:e9:f4:99:6c:9f:6d:82: 82:0f:ce:2b:81:c7:0d:1d:6a:70:d8:73:60:fc:11:ec:70:e8: 2c:96:1a:2c:94:0a:50:d8:7f:11:1e:0c:30:b0:b3:0c:85:bb: f4:03:ba:74:3d:e7:8f:bc:38:fa:8b:b0:cc:d0:4e:41:f0:40: 25:7f:f7:82:84:7e:1f:40:ae:6f:7f:0a:a4:fe:2a:68:8e:df: 7c:38:2e:ee:97:45:6e:b1:61:65:ae:60:33:a1:9d:1c:89:a0: 08:7c:1b:f7:bb:f1:94:2f:0e:a3:9b:86:4a:93:f7:39:25:30: 35:81:da:c6:f1:8f:fd:d9:6f:58:c2:81:38:e1:29:be:2d:9d: 76:bf:c9:31:ea:45:98:35:0e:e8:90:76:3d:8a:39:58:4e:29: 8a:34:60:49:88:2b:79:fa:1c:5f:6d:3a:00:96:d2:d7:9c:08: 5d:65:ef:2e:81:ef:01:fa:b6:93:98:11:c3:f1:a0:0f:4f:38: e7:eb:e7:35:ae:c3:9c:af:84:d3:45:5e:31:44:a0:6a:e4:17: 52:3f:7e:04:5d:cb:57:bc:57:b8:76:0b:89:73:2f:c4:ae:61: e1:24:fe:34:18:76:f0:ec:a0:5d:09:be:64:2c:68:bd:e8:61: 9a:fe:cc:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU2RDExMC8GA1UEBRMoOENEM0UxQkNGQzc3ODg4ODczRjZGNTg2RjY0QTY0MzFB M0I1NkNGRjAeFw0yNTExMDMwNzUxMzdaFw0yNTExMTAwNzUxMzdaMBgxFjAUBgNV BAMTDTY5MDg1ZjBhLTkwNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPI0xukKUh7hPvKATHvAGDIgUdlcK6WlQA3i2YEtMeo3VAXhYK8/KYuSXUpXmK 1hlVbSZewWRqbK2DudI5Psy6fv7xZX7SSlPVo7BgZdPv0URAfVaB97RgSMNHNJxj UR+X3l37C4fVnjefVDLURSrzuqHY963fqyp6iJRmaetsoXVcr4gLq6AXbuOQbToW mLF//QgPhS+F7tR29HWFoTCHx2GoSPXGU53Gq1kl/bIVuqxFfPNkSMh0dKAAiSDI LKbTLec9fFqdgaKA+D5eZv0uD6sW2N/uotraSoYLdtCXOKKUfZFJaECiUnJy6Ihm RMMZqi5dkkOLXw81zKqn1AqLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKgN4QhWG 3PHP/beQB/QX3X8e6ucwHwYDVR0jBBgwFoAUjNPhvPx3iIhz9vWG9kpkMaO1bP8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzVBMjlBQjFFOTc2 NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUloejl2V0c5a3BrTWFPMWJQ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5QaHZQeDNpSWh6OXZXRzlrcGtNYU8xYlA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RTZELzVBMjlBQjFFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUlo ejl2V0c5a3BrTWFPMWJQOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACeymid8uDluOYSA6fSZbJ9tgoIPziuBxw0danDYc2D8Eexw6CyWGiyU ClDYfxEeDDCwswyFu/QDunQ954+8OPqLsMzQTkHwQCV/94KEfh9Arm9/CqT+KmiO 33w4Lu6XRW6xYWWuYDOhnRyJoAh8G/e78ZQvDqObhkqT9zklMDWB2sbxj/3Zb1jC gTjhKb4tnXa/yTHqRZg1DuiQdj2KOVhOKYo0YEmIK3n6HF9tOgCW0tecCF1l7y6B 7wH6tpOYEcPxoA9POOfr5zWuw5yvhNNFXjFEoGrkF1I/fgRdy1e8V7h2C4lzL8Su YeEk/jQYdvDsoF0JvmQsaL3oYZr+zBc= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:50 2025 by rpki-client