$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft File: N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json) Hash identifier: N8AckUnJu0HaMRCrSxkiJY0VMnuo0yCxjLWJDl2PMnk= Subject key identifier: F1:7B:4F:5E:74:A8:A9:F2:B6:B3:7C:A4:9C:16:CD:54:16:02:05:0D Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 Certificate issuer: /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Certificate serial: 17B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft Manifest number: 535D Signing time: Sat 18 Oct 2025 15:12:37 +0000 Manifest this update: Sat 18 Oct 2025 15:12:36 +0000 Manifest next update: Sat 25 Oct 2025 15:12:36 +0000 Files and hashes: 1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: sYn9I3rdqs5E9zWFAXyxt1CQrrHbiZgI1tSfNAZMAy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6069 (0x17b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Validity Not Before: Oct 18 15:12:36 2025 GMT Not After : Oct 25 15:12:36 2025 GMT Subject: CN=68f3ae65-e19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:6f:61:56:2f:ed:da:84:bb:9b:31:ad:37: 5a:3b:9c:a1:1f:47:29:6f:05:b6:83:17:2f:a9:b2: b5:7b:af:dc:da:eb:60:71:5a:c7:f7:5d:c2:e2:a3: 05:f2:7d:fe:f1:52:de:ba:7f:ec:5e:c0:db:48:37: bb:8c:26:8e:5c:7d:47:3e:6c:29:1d:61:28:7b:81: 80:bf:a1:9c:36:81:b4:5d:37:27:a4:61:8d:ca:1e: 09:56:ff:94:8f:b8:e1:6f:98:c1:9b:6b:85:97:91: 15:f1:f0:13:2a:67:f7:f7:71:b9:19:7f:70:27:0e: 43:a4:f3:07:24:52:1f:16:11:0c:dd:e8:33:46:e9: 05:04:87:33:85:6b:c2:3d:a1:3a:af:35:f1:fd:fb: cd:8d:d5:9a:d1:f1:4e:8d:f9:e8:5f:8c:c0:33:4e: 82:b1:62:9c:85:a9:19:08:5b:db:92:e7:04:b0:a1: a3:4e:7f:1f:fd:47:5d:6a:1a:74:ac:47:57:1f:ad: ce:8f:a2:52:50:c0:89:9f:22:15:bc:44:74:64:38: 36:94:9a:17:15:93:36:df:11:0d:16:db:56:7b:90: 79:42:08:b6:83:91:17:25:61:9b:e5:da:4a:3a:1e: f2:96:64:46:e8:1a:5a:00:08:c9:c8:88:84:d6:2b: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7B:4F:5E:74:A8:A9:F2:B6:B3:7C:A4:9C:16:CD:54:16:02:05:0D X509v3 Authority Key Identifier: keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c4:8d:e0:ed:7a:e3:f5:d7:90:07:47:cb:4d:63:8b:de:4e: 32:e6:ed:58:59:34:46:26:47:2c:bf:2b:27:9e:cd:3b:d5:92: 00:83:8a:49:ce:08:9c:0f:6e:ff:fe:e0:b2:06:4e:e2:36:78: c5:61:2e:9b:9b:d0:5f:a8:94:9d:d8:70:91:5b:dd:4c:63:41: 32:f4:f7:eb:61:37:83:ec:13:aa:54:01:cb:d5:a6:65:34:e7: 99:a0:98:46:c3:dd:13:dc:fc:6c:e7:dd:60:26:65:18:79:0a: 25:a9:c2:0c:c4:c3:dd:f9:12:38:5a:19:1a:96:6b:f4:3b:30: 8d:22:7a:16:8a:5d:56:12:3f:14:7b:bd:58:83:c5:25:de:31: 2c:c7:81:55:26:84:e7:60:82:7f:0c:7f:74:4d:6f:30:2b:e5: c4:df:b0:da:49:f5:95:c4:a1:de:93:09:74:0f:37:6e:29:42: 65:6f:8b:43:34:31:4f:d8:74:b3:bd:39:d2:f6:e9:6c:a0:a9: 5d:d9:ed:d9:91:a9:e2:a8:24:04:5b:9c:ba:1f:37:81:4f:5a: 9e:b0:6e:2f:c5:37:67:85:63:c9:43:14:4d:69:84:53:bd:a0: 66:6e:f6:46:f4:cc:3f:c7:0c:2f:74:e8:58:4a:59:a1:0e:e8: cc:4d:82:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDM3RjUwRDlERTU0RTZGRDZFRUI1MzJBNzYxNUNGMzBF RDI0MkVGNjEwHhcNMjUxMDE4MTUxMjM2WhcNMjUxMDI1MTUxMjM2WjAYMRYwFAYD VQQDEw02OGYzYWU2NS1lMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ5vYVYv7dqEu5sxrTdaO5yhH0cpbwW2gxcvqbK1e6/c2utgcVrH913C4qMF 8n3+8VLeun/sXsDbSDe7jCaOXH1HPmwpHWEoe4GAv6GcNoG0XTcnpGGNyh4JVv+U j7jhb5jBm2uFl5EV8fATKmf393G5GX9wJw5DpPMHJFIfFhEM3egzRukFBIczhWvC PaE6rzXx/fvNjdWa0fFOjfnoX4zAM06CsWKchakZCFvbkucEsKGjTn8f/Uddahp0 rEdXH63Oj6JSUMCJnyIVvER0ZDg2lJoXFZM23xENFttWe5B5Qgi2g5EXJWGb5dpK Oh7ylmRG6BpaAAjJyIiE1ivj0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF7T150 qKnytrN8pJwWzVQWAgUNMB8GA1UdIwQYMBaAFDf1DZ3lTm/W7rUyp2Fc8w7SQu9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5YnV0VEtuWVZ6ekR0SkM3 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05fVU5uZVZPYjlidXRUS25ZVnp6RHRKQzcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5 YnV0VEtuWVZ6ekR0SkM3MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtxI3g7Xrj9deQB0fLTWOL3k4y5u1YWTRGJkcsvysnns071ZIAg4pJ zgicD27//uCyBk7iNnjFYS6bm9BfqJSd2HCRW91MY0Ey9PfrYTeD7BOqVAHL1aZl NOeZoJhGw90T3Pxs591gJmUYeQolqcIMxMPd+RI4Whkalmv0OzCNInoWil1WEj8U e71Yg8Ul3jEsx4FVJoTnYIJ/DH90TW8wK+XE37DaSfWVxKHekwl0DzduKUJlb4tD NDFP2HSzvTnS9ulsoKld2e3ZkaniqCQEW5y6HzeBT1qesG4vxTdnhWPJQxRNaYRT vaBmbvZG9Mw/xwwvdOhYSlmhDujMTYKW -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:18 2025 by rpki-client