$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: 7k0s6X8So58YJkGtgY9afvnhEOuffas/7EpCfcrZo4U= Subject key identifier: 5E:85:66:40:B7:F3:92:1B:65:B9:78:91:42:93:47:D3:0C:80:C7:B8 Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 5361 Signing time: Mon 20 Oct 2025 15:10:54 +0000 Manifest this update: Mon 20 Oct 2025 15:10:53 +0000 Manifest next update: Mon 27 Oct 2025 15:10:53 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: mY23PhkRPS048ELefac8/wI4k9Z5smX5ha+k/DtMJSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: Oct 20 15:10:53 2025 GMT Not After : Oct 27 15:10:53 2025 GMT Subject: CN=68f650fd-27a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:da:5e:18:84:bb:10:19:a2:d7:af:dd:db: 36:e5:6b:76:ad:0a:5c:9c:da:03:c7:2c:99:73:90: 01:cd:8f:68:0f:7b:be:2b:d3:c0:8e:a7:02:8e:7d: 7d:1f:6b:c1:f5:01:1b:f4:c1:5b:8d:63:ca:42:d1: fd:26:c3:48:79:98:7b:34:56:f1:a6:f7:71:2a:8a: c1:8d:ff:8b:d2:cf:bb:75:cf:82:f5:b3:e9:ba:b5: 14:ed:98:7f:41:a3:9c:08:95:83:53:f0:f3:e2:07: 69:dc:6e:17:95:aa:11:e5:fe:3a:e9:a4:bc:84:e0: 21:31:9c:1b:0d:bb:1c:3b:24:7b:d5:29:7d:af:c3: ac:3b:74:08:c6:97:b7:21:d2:5c:0c:ba:1f:ec:1a: fb:7e:95:eb:97:0b:74:a2:f4:9b:18:ed:a5:f7:80: 16:27:0b:10:c2:ab:ba:35:1c:f8:4c:ba:e1:e4:d4: 40:f8:b9:cc:ec:b8:f2:f8:44:b6:f7:4a:d5:09:d9: 6b:4b:c3:30:88:de:af:13:74:64:35:1b:ea:96:93: b5:5f:ed:63:b6:82:5f:ee:19:07:2d:57:7f:fd:1c: 95:a9:07:0d:51:50:c8:8e:2c:b1:d5:73:40:f4:e2: 05:7a:d1:99:c6:77:89:6c:f9:3d:52:2c:65:b9:76: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:85:66:40:B7:F3:92:1B:65:B9:78:91:42:93:47:D3:0C:80:C7:B8 X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3d:33:7d:a7:75:a5:e2:68:41:dd:c3:5d:de:3c:59:a7:25: 49:a9:08:00:b2:ee:ce:48:8e:87:7d:2a:b0:9c:f1:e9:5e:e9: 6d:b9:91:5f:a8:60:06:19:1d:87:e2:56:c8:f2:ff:49:02:aa: 59:2e:c7:b6:a5:2a:ad:3e:61:e8:3d:89:64:04:10:9f:3c:68: 17:ff:0a:92:80:23:7c:e4:a1:1d:61:bd:40:79:84:35:7b:ad: cc:e7:4e:e1:d4:dc:c6:5f:5b:df:0f:e6:c6:1f:55:64:d6:01: 4d:fa:4a:aa:f8:0c:98:22:0e:c4:91:9d:47:36:99:18:68:c4: f8:98:42:e0:01:9f:99:e5:22:04:16:66:a1:af:91:0b:1d:ee: ec:26:da:b9:24:f3:e4:83:56:0c:77:af:42:ab:c7:ed:12:a0: f5:bd:d6:62:eb:ad:38:0f:f5:70:b0:85:5c:93:57:8f:77:fe: c0:cf:16:45:f8:c6:85:36:e7:01:8a:9b:dc:3f:11:aa:61:73: f4:57:b3:46:52:95:45:2a:c3:2b:b2:ec:40:d5:bd:4e:0d:50: 42:b6:f1:58:dc:56:e1:75:9c:95:05:15:54:b1:9a:24:10:0b: 60:f7:27:d7:4c:19:8f:0c:b0:7f:43:76:f6:8d:9f:17:c7:f4: 28:b6:ed:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjUxMDIwMTUxMDUzWhcNMjUxMDI3MTUxMDUzWjAYMRYwFAYD VQQDEw02OGY2NTBmZC0yN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukraXhiEuxAZotev3ds25Wt2rQpcnNoDxyyZc5ABzY9oD3u+K9PAjqcCjn19 H2vB9QEb9MFbjWPKQtH9JsNIeZh7NFbxpvdxKorBjf+L0s+7dc+C9bPpurUU7Zh/ QaOcCJWDU/Dz4gdp3G4XlaoR5f466aS8hOAhMZwbDbscOyR71Sl9r8OsO3QIxpe3 IdJcDLof7Br7fpXrlwt0ovSbGO2l94AWJwsQwqu6NRz4TLrh5NRA+LnM7Ljy+ES2 90rVCdlrS8MwiN6vE3RkNRvqlpO1X+1jtoJf7hkHLVd//RyVqQcNUVDIjiyx1XNA 9OIFetGZxneJbPk9UixluXbGbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6FZkC3 85IbZbl4kUKTR9MMgMe4MB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQPTN9p3Wl4mhB3cNd3jxZpyVJqQgAsu7OSI6HfSqwnPHpXultuZFf qGAGGR2H4lbI8v9JAqpZLse2pSqtPmHoPYlkBBCfPGgX/wqSgCN85KEdYb1AeYQ1 e63M507h1NzGX1vfD+bGH1Vk1gFN+kqq+AyYIg7EkZ1HNpkYaMT4mELgAZ+Z5SIE Fmahr5ELHe7sJtq5JPPkg1YMd69Cq8ftEqD1vdZi6604D/VwsIVck1ePd/7AzxZF +MaFNucBipvcPxGqYXP0V7NGUpVFKsMrsuxA1b1ODVBCtvFY3FbhdZyVBRVUsZok EAtg9yfXTBmPDLB/Q3b2jZ8Xx/Qotu0P -----END CERTIFICATE-----Generated at Mon Oct 20 21:43:50 2025 by rpki-client