$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: FC9814ooIquHokq9zehlNWY1RVgIrbzhrIX0PN3Zd6M= Subject key identifier: 8F:A0:0A:4A:08:0B:05:59:BD:53:5B:2B:17:13:EA:F2:68:0C:07:61 Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 11BB Signing time: Sat 18 Oct 2025 20:32:38 +0000 Manifest this update: Sat 18 Oct 2025 20:32:37 +0000 Manifest next update: Sat 25 Oct 2025 20:32:37 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: Vh8OZSxz+U4fuaxdPZJ31r+D2sUYmPDmPW7Fbi2sMyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Validity Not Before: Oct 18 20:32:37 2025 GMT Not After : Oct 25 20:32:37 2025 GMT Subject: CN=68f3f966-fd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:60:fa:c1:0a:c1:cc:0a:7b:22:6a:47:66: 86:28:c0:7a:fc:cf:45:fd:05:49:27:5c:70:d4:e6: 0c:60:08:9a:da:fd:c0:ff:ab:66:11:de:16:69:ee: c1:a1:5d:f8:5b:33:78:ca:da:30:c2:9f:9d:4d:7d: 94:05:94:0b:14:77:b2:2b:ae:01:a5:c3:89:20:a1: 4d:b9:6e:f9:ca:b8:ea:e0:10:e1:14:32:85:46:b4: 3c:98:f9:5c:f9:c9:32:77:b4:bc:2c:85:23:94:ce: 00:a3:5f:b4:0e:47:b5:32:40:01:c4:51:62:13:da: 7f:f0:32:0a:9a:48:9c:b5:dc:b9:6f:c8:e7:3a:82: 7c:ec:e9:09:5c:32:54:8c:bb:75:dd:21:fa:59:36: 7c:60:4a:96:83:df:8e:99:12:3e:f8:d2:d9:c0:36: 2d:78:42:5c:9a:ab:a3:c9:f5:8c:e6:d4:b1:df:37: 18:b5:32:11:24:2b:42:04:ff:37:a2:e9:2d:31:c8: 9b:93:63:a3:a9:d3:08:70:c7:e2:38:e0:e9:a9:84: b7:4a:e7:da:08:8a:c3:01:8d:d7:50:1e:fd:75:0e: 05:e8:5d:81:1b:e0:44:6b:a0:c6:3b:c0:50:79:e7: ce:5a:02:1f:07:98:ed:a9:8b:c8:97:4a:d3:43:19: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A0:0A:4A:08:0B:05:59:BD:53:5B:2B:17:13:EA:F2:68:0C:07:61 X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:bd:f3:76:c5:b0:fc:7d:a7:53:d8:27:a1:c8:51:bc:53:a3: 1e:3d:57:b5:f3:64:09:c9:39:2a:fa:14:92:2c:72:97:c0:ef: df:3f:47:5f:10:43:cf:d7:7c:8c:a9:67:c1:44:04:ef:8c:29: cc:97:d6:32:73:85:cd:53:9b:59:3e:2a:86:74:05:a6:67:6d: d2:f1:f3:70:4e:c5:a7:8b:56:08:0d:dd:31:5d:75:f4:4b:2c: 80:38:ca:ff:3a:50:56:52:01:63:80:cc:3a:26:6c:b3:6d:72: 87:9a:12:b0:43:90:e4:23:7d:6a:a0:ea:ed:3e:6f:54:d8:55: 77:b8:83:a9:ec:63:ca:d0:b8:f6:50:b3:12:f2:f9:78:87:fe: d7:12:fb:18:a2:15:1d:5a:80:28:52:9b:b0:ab:b3:10:20:14: 7a:8d:f6:8e:2b:c5:90:32:96:f5:4a:49:4e:5f:c3:69:1e:7a: 29:df:e3:a7:58:96:cc:22:d7:e4:20:c6:35:f2:5b:b2:c2:db: cf:d8:ed:f0:f2:ca:b8:41:c5:fe:e1:e8:02:80:7b:48:16:20: 56:4c:6b:6d:56:df:a9:0a:50:b0:8c:7f:5d:45:32:bf:ca:01: a7:06:d0:e8:26:01:a1:eb:b3:d9:77:0a:f5:66:aa:c4:6c:fe: 34:b9:82:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjUxMDE4MjAzMjM3WhcNMjUxMDI1MjAzMjM3WjAYMRYwFAYD VQQDEw02OGYzZjk2Ni1mZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMtg+sEKwcwKeyJqR2aGKMB6/M9F/QVJJ1xw1OYMYAia2v3A/6tmEd4Wae7B oV34WzN4ytowwp+dTX2UBZQLFHeyK64BpcOJIKFNuW75yrjq4BDhFDKFRrQ8mPlc +ckyd7S8LIUjlM4Ao1+0Dke1MkABxFFiE9p/8DIKmkictdy5b8jnOoJ87OkJXDJU jLt13SH6WTZ8YEqWg9+OmRI++NLZwDYteEJcmqujyfWM5tSx3zcYtTIRJCtCBP83 ouktMcibk2OjqdMIcMfiOODpqYS3SufaCIrDAY3XUB79dQ4F6F2BG+BEa6DGO8BQ eefOWgIfB5jtqYvIl0rTQxlqPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+gCkoI CwVZvVNbKxcT6vJoDAdhMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUvfN2xbD8fadT2CehyFG8U6MePVe182QJyTkq+hSSLHKXwO/fP0df EEPP13yMqWfBRATvjCnMl9Yyc4XNU5tZPiqGdAWmZ23S8fNwTsWni1YIDd0xXXX0 SyyAOMr/OlBWUgFjgMw6JmyzbXKHmhKwQ5DkI31qoOrtPm9U2FV3uIOp7GPK0Lj2 ULMS8vl4h/7XEvsYohUdWoAoUpuwq7MQIBR6jfaOK8WQMpb1SklOX8NpHnop3+On WJbMItfkIMY18luywtvP2O3w8sq4QcX+4egCgHtIFiBWTGttVt+pClCwjH9dRTK/ ygGnBtDoJgGh67PZdwr1ZqrEbP40uYJl -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:41 2025 by rpki-client