$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: 7XIaQWsdDuFJpp5O2O7UMagZiKvngPSAn8LAHXsZark= Subject key identifier: DA:8D:7B:FD:01:D9:2F:53:F4:09:A0:38:AF:26:12:42:B0:12:87:2F Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 44 Signing time: Thu 23 Oct 2025 09:35:01 +0000 Manifest this update: Thu 23 Oct 2025 09:35:00 +0000 Manifest next update: Thu 30 Oct 2025 09:35:00 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: Flbj1g4nw1WU4fMxdOgig0UG37AlET/dMdw99D+WG9E=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2Lm246NHiIIsj3yU5G9cofOj46hOe93SJKM95sww3VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Oct 23 09:35:00 2025 GMT Not After : Oct 30 09:35:00 2025 GMT Subject: CN=68f9f6c5-e425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:41:07:df:55:ce:b9:cc:ea:5f:56:1e:f3:45: 90:5e:f4:16:97:f3:88:0c:72:d6:89:40:cf:73:72: 3a:c5:e3:b8:0b:32:19:14:b8:f2:6a:b5:fe:bb:f6: 7a:d5:9c:96:c7:ce:f2:8f:17:0e:50:8d:f1:14:a1: 66:c6:f5:08:12:80:2c:fe:89:c7:8a:4d:5d:17:98: 2a:e3:06:3e:04:dd:17:33:b2:21:79:95:94:ff:1d: 6d:6c:08:d6:c7:e7:19:ca:49:de:10:06:5f:c6:40: f1:1b:0d:4a:ea:5a:58:e0:f8:11:62:55:88:17:97: 20:4f:e3:f1:ce:5d:df:7a:a9:d4:54:c1:d7:32:f2: b9:42:20:d6:b0:f1:24:5b:e5:22:9a:40:97:bf:08: c2:85:ab:b2:8a:4a:b3:60:bc:97:52:25:51:87:68: 24:42:30:44:33:9f:6a:eb:50:da:9d:c0:33:59:5c: e7:ac:e2:0e:e6:f1:e0:00:47:d3:b4:e0:8c:fe:2a: 14:38:ff:60:b5:1c:54:85:12:5a:0e:dc:29:92:11: 6f:07:5b:46:eb:a7:21:11:2b:01:65:22:ba:f8:13: 8e:c3:a4:91:85:34:b4:04:9b:5b:ad:26:e4:9e:9f: fe:92:d8:2a:42:9d:a9:88:e7:63:57:30:dd:85:e0: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8D:7B:FD:01:D9:2F:53:F4:09:A0:38:AF:26:12:42:B0:12:87:2F X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d1:11:0c:cd:be:69:6e:a3:56:09:be:45:cb:2c:f2:11:b4: e2:9b:44:38:4c:a6:58:4b:6c:1e:68:ac:0c:73:87:57:79:60: a2:0b:f6:ff:cf:f9:f6:66:17:f4:34:0a:55:ae:d5:a8:21:cf: f5:c2:24:a3:fb:4a:6f:05:ca:5e:06:37:cf:2d:b4:24:eb:11: 94:93:b3:92:68:61:80:3e:ca:6c:7a:9d:ef:ac:24:2d:c1:61: 7e:6d:ab:e6:60:15:ae:54:ad:de:25:44:0e:6b:8d:d0:0f:29: 20:43:c3:24:ec:ed:ad:ba:2b:99:ed:f7:ba:44:85:b9:f5:d6: cc:dd:f8:fd:1b:6b:7a:b1:1d:f5:66:ab:70:28:ec:d8:93:42: c3:96:30:ed:9e:dc:ca:5c:f9:b7:5b:21:0b:ee:80:2b:26:da: 06:8d:21:64:32:97:9f:78:57:8c:b9:05:69:3a:5d:01:cf:3a: 81:b1:da:f0:e6:ba:2d:98:b3:45:53:fb:56:41:aa:a2:4d:e3: 85:a5:57:f3:6d:b7:dc:90:57:8a:7f:c8:db:89:cf:e7:ce:43: 97:c8:31:58:b1:7e:c2:48:a9:f6:12:16:50:80:f4:cf:9e:39: fd:8b:4c:5b:5e:b4:07:4d:a0:fe:bb:27:a4:b1:1b:17:ea:44: 2b:64:da:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkVGRjExMC8GA1UEBRMoMzU0MzNDOUVDNDA4MDk5RjcwMThCQzUxNDQxRDIyQzRD MTFGQzM4NTAeFw0yNTEwMjMwOTM1MDBaFw0yNTEwMzAwOTM1MDBaMBgxFjAUBgNV BAMTDTY4ZjlmNmM1LWU0MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSQQffVc65zOpfVh7zRZBe9BaX84gMctaJQM9zcjrF47gLMhkUuPJqtf679nrV nJbHzvKPFw5QjfEUoWbG9QgSgCz+iceKTV0XmCrjBj4E3RczsiF5lZT/HW1sCNbH 5xnKSd4QBl/GQPEbDUrqWljg+BFiVYgXlyBP4/HOXd96qdRUwdcy8rlCINaw8SRb 5SKaQJe/CMKFq7KKSrNgvJdSJVGHaCRCMEQzn2rrUNqdwDNZXOes4g7m8eAAR9O0 4Iz+KhQ4/2C1HFSFEloO3CmSEW8HW0brpyERKwFlIrr4E47DpJGFNLQEm1utJuSe n/6S2CpCnamI52NXMN2F4CKhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2o17/QHZ L1P0CaA4ryYSQrAShy8wHwYDVR0jBBgwFoAUNUM8nsQICZ9wGLxRRB0ixMEfw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRUZGL0FCOTc1QkNFNDg0 OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlVNOG5zUUlDWjl3R0x4UlJCMGl4TUVmdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RUZGL0FCOTc1QkNFNDg0OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5 d0dMeFJSQjBpeE1FZnc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHREQzNvmluo1YJvkXLLPIRtOKbRDhMplhLbB5orAxzh1d5YKIL9v/P +fZmF/Q0ClWu1aghz/XCJKP7Sm8Fyl4GN88ttCTrEZSTs5JoYYA+ymx6ne+sJC3B YX5tq+ZgFa5Urd4lRA5rjdAPKSBDwyTs7a26K5nt97pEhbn11szd+P0ba3qxHfVm q3Ao7NiTQsOWMO2e3Mpc+bdbIQvugCsm2gaNIWQyl594V4y5BWk6XQHPOoGx2vDm ui2Ys0VT+1ZBqqJN44WlV/Ntt9yQV4p/yNuJz+fOQ5fIMVixfsJIqfYSFlCA9M+e Of2LTFtetAdNoP67J6SxGxfqRCtk2uY= -----END CERTIFICATE-----Generated at Sat Oct 25 04:24:27 2025 by rpki-client