$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json) Hash identifier: okTeKa0HDmsWa/HMoCLO3Nbf0B4QFmJNdZOf31dBBj0= Subject key identifier: CB:E2:43:F5:30:E3:7A:BE:15:E2:A9:B5:F7:92:FA:26:81:2C:6D:87 Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft Manifest number: 09 Signing time: Mon 03 Nov 2025 08:01:54 +0000 Manifest this update: Mon 03 Nov 2025 08:01:53 +0000 Manifest next update: Mon 10 Nov 2025 08:01:53 +0000 Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: WzGYtHJ3xMfv9DmtUKCCwhXEy+OUBtWTAL4/dEt4D+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Validity Not Before: Nov 3 08:01:53 2025 GMT Not After : Nov 10 08:01:53 2025 GMT Subject: CN=69086171-8f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:c0:e9:9c:3d:bc:1d:75:25:fd:fd:4c:e7: 64:e5:c4:39:35:30:5b:dc:3b:2b:a0:06:7c:0c:0a: 7b:1d:66:d2:b4:d7:16:7f:63:f5:a1:3a:84:e9:c3: b7:66:01:d2:53:54:05:30:91:d3:bf:32:e2:18:b4: f4:8d:21:41:0c:89:0b:17:39:2e:f1:6e:35:77:2e: 65:17:46:a7:5d:90:d3:fc:e0:22:5b:f3:76:f5:6d: 1a:3c:1c:7c:9d:60:64:d7:28:a5:ce:f1:16:c9:d6: e9:4d:e4:26:c9:09:2c:fb:01:15:12:25:9c:55:0c: 5c:2e:e5:78:09:b9:d5:44:e6:5d:a8:26:74:8c:e4: d6:02:e0:b8:61:a9:bb:fd:88:13:67:1d:3b:04:98: 65:6d:78:8c:48:9d:fb:09:c8:e0:02:e5:2a:2b:ef: c8:e9:7b:bc:31:58:dc:da:c7:a4:77:39:72:cb:2a: 8d:f4:f5:91:a2:20:0e:b4:45:e9:ec:1f:90:10:d0: d5:04:d4:ef:1a:dc:fc:59:e7:17:3a:49:b3:f8:4c: 8a:c2:5d:44:60:4c:7d:b8:cf:88:cc:92:30:1e:97: 0b:90:02:c9:79:88:db:1d:2e:2d:47:c9:09:71:df: db:e9:ac:a7:f3:cc:c4:ea:6c:3b:da:f0:0c:95:a7: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E2:43:F5:30:E3:7A:BE:15:E2:A9:B5:F7:92:FA:26:81:2C:6D:87 X509v3 Authority Key Identifier: keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:98:e0:91:a2:ad:50:c1:14:e0:0b:7a:ce:20:07:5c:e9:e5: 52:b1:cf:94:b5:74:73:2f:9b:04:9b:f3:e4:42:bc:9b:1b:56: cc:e3:0d:97:6f:25:e1:a6:cb:84:d3:c8:51:b2:97:e2:f3:17: c4:ff:56:73:f7:6e:03:07:4e:9c:b4:1c:6b:e6:aa:3a:93:8d: 09:5a:fa:95:f7:00:e4:98:7f:5a:5a:41:30:32:d5:46:3c:d7: 1a:6e:95:d9:a5:32:f9:58:db:2f:be:14:b6:38:ee:bb:17:37: 9b:c5:2d:01:13:f1:71:5f:8a:f6:d8:de:78:d9:eb:2a:7b:db: 98:67:2d:b4:06:f7:fd:f9:e2:b3:50:46:43:d1:1d:63:94:ca: 9d:86:cc:ba:6a:ea:fb:b6:6f:23:bf:9c:16:97:78:25:1f:25: cc:e2:b9:8e:d1:75:06:40:3f:4a:30:00:5b:6f:a8:c4:fa:18: b4:e4:ed:0c:53:7a:bd:ad:1d:58:4a:23:8b:ac:09:33:b6:86: 32:57:df:1d:b3:a1:bd:76:8f:58:4f:a6:19:9a:30:12:6f:2c: 58:17:69:3f:48:0b:dd:fd:1e:41:e8:c8:17:4a:72:b5:b3:29: 37:a5:ce:e0:43:d0:d0:63:38:a9:16:d9:f6:c6:fe:75:98:c8: 45:e6:59:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDRFMjExMC8GA1UEBRMoMzZENUFENkUxMjZDRDVCMThFQzE0NUJDNzcyRjQ5MDBG OTRDQTZCQzAeFw0yNTExMDMwODAxNTNaFw0yNTExMTAwODAxNTNaMBgxFjAUBgNV BAMTDTY5MDg2MTcxLThmNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBWsDpnD28HXUl/f1M52TlxDk1MFvcOyugBnwMCnsdZtK01xZ/Y/WhOoTpw7dm AdJTVAUwkdO/MuIYtPSNIUEMiQsXOS7xbjV3LmUXRqddkNP84CJb83b1bRo8HHyd YGTXKKXO8RbJ1ulN5CbJCSz7ARUSJZxVDFwu5XgJudVE5l2oJnSM5NYC4Lhhqbv9 iBNnHTsEmGVteIxInfsJyOAC5Sor78jpe7wxWNzax6R3OXLLKo309ZGiIA60Rens H5AQ0NUE1O8a3PxZ5xc6SbP4TIrCXURgTH24z4jMkjAelwuQAsl5iNsdLi1HyQlx 39vprKfzzMTqbDva8AyVpx4XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy+JD9TDj er4V4qm195L6JoEsbYcwHwYDVR0jBBgwFoAUNtWtbhJs1bGOwUW8dy9JAPlMprww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENEUyLzFGREIwRjNFQUVE QTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJHT3dVVzhkeTlKQVBsTXBy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnRXdGJoSnMxYkdPd1VXOGR5OUpBUGxNcHJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NEUyLzFGREIwRjNFQUVEQTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJH T3dVVzhkeTlKQVBsTXBydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISY4JGirVDBFOALes4gB1zp5VKxz5S1dHMvmwSb8+RCvJsbVszjDZdv JeGmy4TTyFGyl+LzF8T/VnP3bgMHTpy0HGvmqjqTjQla+pX3AOSYf1paQTAy1UY8 1xpuldmlMvlY2y++FLY47rsXN5vFLQET8XFfivbY3njZ6yp725hnLbQG9/354rNQ RkPRHWOUyp2GzLpq6vu2byO/nBaXeCUfJcziuY7RdQZAP0owAFtvqMT6GLTk7QxT er2tHVhKI4usCTO2hjJX3x2zob12j1hPphmaMBJvLFgXaT9IC939HkHoyBdKcrWz KTelzuBD0NBjOKkW2fbG/nWYyEXmWVc= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:56 2025 by rpki-client