$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: MYGS89N747kkxqFM8slDcOs12dG79NFwKAJVk3WdowI= Subject key identifier: 4D:EE:01:3B:C1:C8:97:B1:BF:B0:8E:AD:5E:5E:37:E2:66:CB:94:52 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 75 Signing time: Sun 19 Oct 2025 10:07:37 +0000 Manifest this update: Sun 19 Oct 2025 10:07:37 +0000 Manifest next update: Sun 26 Oct 2025 10:07:37 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: LPJcqBe24v6rShY6ZJ2mOGL9xbTLCPmVRq/Z60PokhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Oct 19 10:07:37 2025 GMT Not After : Oct 26 10:07:37 2025 GMT Subject: CN=68f4b869-e39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:63:36:cd:10:86:cd:3e:fb:a7:3b:95:86: 32:67:6f:d6:d9:94:f1:9f:33:47:f1:31:fb:f4:03: f0:4d:d9:66:bd:36:eb:7f:88:5b:9b:4d:83:d8:81: f5:80:c7:22:3b:73:a3:7b:81:e8:3b:77:32:b4:af: bf:5d:fc:e4:74:02:83:a4:f1:f8:05:de:d3:c4:45: 09:d7:d0:2f:dd:8e:ef:29:5e:96:f6:42:07:36:99: eb:fa:3c:0d:ba:86:60:46:6b:bb:93:6d:0c:1e:22: 23:dd:36:63:8e:96:ca:85:f9:c5:33:34:a0:ed:c5: fd:30:ac:75:f6:55:0d:02:32:70:d8:0a:e2:6b:41: a6:b3:bf:2b:ad:30:fa:4e:36:b2:65:b6:59:1b:ed: 39:bd:4b:ff:7c:93:89:a8:cb:b0:72:07:79:cc:ef: d7:f8:5c:45:04:b6:37:ea:52:b4:ac:55:57:16:c8: 4a:e3:23:cf:fb:81:da:84:e2:08:e6:89:5d:63:35: d1:28:75:ae:33:13:41:d5:6a:02:b7:2d:88:a8:28: 35:ae:8b:a7:eb:a6:61:91:ea:dd:c5:e0:c7:90:2f: 0f:a8:ee:f5:a6:dc:4a:74:62:de:f2:b4:bb:25:c3: ad:57:51:65:08:57:e9:b9:8b:66:8f:5d:2f:01:aa: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EE:01:3B:C1:C8:97:B1:BF:B0:8E:AD:5E:5E:37:E2:66:CB:94:52 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:93:eb:e9:9d:8e:e3:74:d7:a9:43:9a:1a:1f:c7:b7:49:6a: 26:66:0a:7f:e9:26:d1:6a:ca:76:71:b6:6f:73:68:86:48:a5: cb:c5:9f:b6:63:9d:39:7d:91:5a:a0:dd:a9:fb:ec:8f:45:7e: b7:cd:64:e5:a5:8d:c1:37:c1:da:1c:9d:c3:93:6b:dd:2c:80: aa:90:a1:50:52:1c:8f:24:46:0a:e6:fb:89:77:04:df:93:ce: 0d:cd:62:95:a1:45:6b:f8:06:f1:b8:88:e5:06:6c:f2:fc:75: 73:9b:bc:9c:c5:45:5d:27:78:dd:2d:af:2b:f4:5a:e7:15:50: 4d:20:da:f2:f0:04:5b:34:a6:0f:1e:6b:c3:b0:c2:7b:27:ee: c9:b4:88:4f:2a:a1:c6:69:f6:3c:cd:e6:2e:6c:47:8d:3a:93: 19:04:e6:8b:f9:ea:f3:c0:31:30:c2:37:a0:bc:43:24:1f:38: 34:ec:b7:74:fe:6d:99:7b:fa:97:e0:48:1c:ad:c6:a6:27:eb: 4b:15:a8:9c:8e:83:72:c2:9e:19:b1:2b:4a:84:0b:f4:19:21: 8c:04:30:31:3a:ef:cf:4f:fb:6c:9a:25:8f:31:66:6f:3f:a1: 77:31:fa:69:c3:18:ed:cf:99:b8:ac:df:2b:83:49:d2:33:8f: 57:4f:03:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoOUU3MUZCNzFCNjcwMEM0MDQ1QTVDMzQwQzE4RjEzMEYw ODYwQUEzOTAeFw0yNTEwMTkxMDA3MzdaFw0yNTEwMjYxMDA3MzdaMBgxFjAUBgNV BAMTDTY4ZjRiODY5LWUzOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2I2M2zRCGzT77pzuVhjJnb9bZlPGfM0fxMfv0A/BN2Wa9Nut/iFubTYPYgfWA xyI7c6N7geg7dzK0r79d/OR0AoOk8fgF3tPERQnX0C/dju8pXpb2Qgc2mev6PA26 hmBGa7uTbQweIiPdNmOOlsqF+cUzNKDtxf0wrHX2VQ0CMnDYCuJrQaazvyutMPpO NrJltlkb7Tm9S/98k4moy7ByB3nM79f4XEUEtjfqUrSsVVcWyErjI8/7gdqE4gjm iV1jNdEoda4zE0HVagK3LYioKDWui6frpmGR6t3F4MeQLw+o7vWm3Ep0Yt7ytLsl w61XUWUIV+m5i2aPXS8BqjGRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTe4BO8HI l7G/sI6tXl434mbLlFIwHwYDVR0jBBgwFoAUnnH7cbZwDEBFpcNAwY8TDwhgqjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzU0NjY2QjNDRjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm5IN2NiWndERUJGcGNOQXdZOFREd2hncWprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzU0NjY2QjNDRjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVC RnBjTkF3WThURHdoZ3Fqay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALmT6+mdjuN016lDmhofx7dJaiZmCn/pJtFqynZxtm9zaIZIpcvFn7Zj nTl9kVqg3an77I9FfrfNZOWljcE3wdocncOTa90sgKqQoVBSHI8kRgrm+4l3BN+T zg3NYpWhRWv4BvG4iOUGbPL8dXObvJzFRV0neN0tryv0WucVUE0g2vLwBFs0pg8e a8Owwnsn7sm0iE8qocZp9jzN5i5sR406kxkE5ov56vPAMTDCN6C8QyQfODTst3T+ bZl7+pfgSBytxqYn60sVqJyOg3LCnhmxK0qEC/QZIYwEMDE6789P+2yaJY8xZm8/ oXcx+mnDGO3Pmbis3yuDSdIzj1dPA+o= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:23 2025 by rpki-client