$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft File: 72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json) Hash identifier: 5GQHCboLFFA/Y4bHvjMp9v5rLtn36jLIIE/+/LYpaao= Subject key identifier: 24:69:3D:92:52:84:28:1C:B2:84:3D:76:57:D9:E6:39:D8:3F:70:29 Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 Certificate issuer: /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft Manifest number: 019C Signing time: Mon 03 Nov 2025 03:20:17 +0000 Manifest this update: Mon 03 Nov 2025 03:20:17 +0000 Manifest next update: Mon 10 Nov 2025 03:20:17 +0000 Files and hashes: 1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: lrVR2fzuVmtSYJL5lRrdzQPpSXExQS9shz8DZi7kftI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282 Validity Not Before: Nov 3 03:20:17 2025 GMT Not After : Nov 10 03:20:17 2025 GMT Subject: CN=69081f71-da16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:38:ef:d3:a3:b1:0f:7a:76:1c:7e:f8:22: 04:c5:58:e5:62:90:b4:13:15:ac:f0:b3:2b:df:76: c6:5a:19:66:63:f5:b2:81:66:c7:89:1e:0e:9a:3f: 38:d6:a2:0e:e0:8c:db:67:27:82:d5:50:c6:54:bb: bd:ed:68:4d:8b:88:41:b1:5c:6e:42:fb:93:5f:a1: d4:b6:04:e8:cb:26:24:66:6b:22:32:54:98:ab:f4: a4:7a:73:52:5f:96:24:62:ba:7d:7b:37:c2:ab:e3: 77:4e:0a:96:85:1d:fe:d5:a8:ec:e9:20:a0:86:54: b4:c6:fd:20:40:9e:db:b9:71:85:a6:a5:b6:5e:b7: 8c:70:1d:e7:e8:f1:5b:90:2a:ca:6a:46:ff:40:a0: 2c:89:c0:55:5c:4b:bc:ce:d6:ea:cd:5f:2b:ba:d5: 15:3d:15:a7:9a:df:dd:ad:d4:e0:20:c3:13:dc:79: 17:f5:3a:d1:fa:d9:f3:21:5a:ca:2d:cd:8f:10:82: ee:97:8a:bf:a3:36:96:cc:15:0c:6b:01:3b:d6:41: 1b:f9:d5:a6:a1:b7:31:43:ee:dd:e7:f5:43:4e:bc: e4:a7:74:81:87:c8:a4:db:aa:a1:c7:16:1e:e4:02: 43:6d:d3:ec:35:0a:5a:b4:14:97:fb:da:ac:d4:29: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:3D:92:52:84:28:1C:B2:84:3D:76:57:D9:E6:39:D8:3F:70:29 X509v3 Authority Key Identifier: keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ef:5c:30:ab:08:27:f4:76:58:2d:0a:95:80:14:1e:f0:eb: cf:68:21:fa:61:20:e7:df:46:50:4a:d1:64:00:fc:dd:56:0c: b1:6b:f1:a2:8e:50:d4:ba:b5:e0:df:cb:5b:7c:34:6f:b5:b2: 95:bc:e6:4f:c6:98:d4:a7:34:6b:4b:76:ad:bb:37:b2:7e:68: af:c8:fd:96:ff:9d:a8:0c:76:66:ec:07:c8:05:b9:c1:51:55: c9:81:96:0b:40:e0:40:1a:4d:86:03:27:62:45:5c:ad:de:78: a4:36:6a:54:39:09:51:34:af:3e:1b:d4:27:00:dd:9a:7f:a8: ea:4a:38:44:ab:7d:ef:b3:b8:52:39:f7:b6:6f:21:84:9b:21: 97:00:02:00:04:ad:48:ff:f4:5f:29:6d:61:f1:10:9d:a5:6f: 0a:5b:94:a4:a2:da:b5:31:28:38:a0:09:27:fa:2e:bf:40:11: ff:c6:40:6f:20:c2:66:ca:c2:b8:f6:ca:b8:0e:bb:94:4b:8a: 80:3c:2c:ff:5a:e9:40:b9:48:4c:44:9a:d8:79:8b:a1:a5:7a: 16:ee:17:4a:3d:0b:0f:03:40:25:fe:35:d7:17:53:5b:0b:44: 82:f6:2c:fb:fa:56:5d:4d:76:2d:7c:9a:05:51:a4:1b:1f:1e: 7d:41:9e:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QkQxMTAvBgNVBAUTKEVGNjM2REZCMTU5MkYwMjIyMDE2QjAwRkFDQTI3MDM1 NzNGNEQyODIwHhcNMjUxMTAzMDMyMDE3WhcNMjUxMTEwMDMyMDE3WjAYMRYwFAYD VQQDEw02OTA4MWY3MS1kYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13A479OjsQ96dhx++CIExVjlYpC0ExWs8LMr33bGWhlmY/WygWbHiR4Omj84 1qIO4IzbZyeC1VDGVLu97WhNi4hBsVxuQvuTX6HUtgToyyYkZmsiMlSYq/SkenNS X5YkYrp9ezfCq+N3TgqWhR3+1ajs6SCghlS0xv0gQJ7buXGFpqW2XreMcB3n6PFb kCrKakb/QKAsicBVXEu8ztbqzV8rutUVPRWnmt/drdTgIMMT3HkX9TrR+tnzIVrK Lc2PEILul4q/ozaWzBUMawE71kEb+dWmobcxQ+7d5/VDTrzkp3SBh8ik26qhxxYe 5AJDbdPsNQpatBSX+9qs1ClAMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRpPZJS hCgcsoQ9dlfZ5jnYP3ApMB8GA1UdIwQYMBaAFO9jbfsVkvAiIBawD6yicDVz9NKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhCRC8xMTlDQzIyMDQw RkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhDSWdGckFQcktKd05YUDAw b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTnQteFdTOENJZ0ZyQVByS0p3TlhQMDBvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhCRC8xMTlDQzIyMDQwRkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhD SWdGckFQcktKd05YUDAwb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB71wwqwgn9HZYLQqVgBQe8OvPaCH6YSDn30ZQStFkAPzdVgyxa/Gi jlDUurXg38tbfDRvtbKVvOZPxpjUpzRrS3atuzeyfmivyP2W/52oDHZm7AfIBbnB UVXJgZYLQOBAGk2GAydiRVyt3nikNmpUOQlRNK8+G9QnAN2af6jqSjhEq33vs7hS Ofe2byGEmyGXAAIABK1I//RfKW1h8RCdpW8KW5Skotq1MSg4oAkn+i6/QBH/xkBv IMJmysK49sq4DruUS4qAPCz/WulAuUhMRJrYeYuhpXoW7hdKPQsPA0Al/jXXF1Nb C0SC9iz7+lZdTXYtfJoFUaQbHx59QZ5B -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:55 2025 by rpki-client