$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: WgRcGl7lorJJwhA8u/wqPCS0oRu04wUkS63Kzq3jXEE= Subject key identifier: D6:C8:03:C4:EC:96:51:C8:96:D3:8C:64:1C:2E:C8:92:F1:CA:A8:79 Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 5169 Signing time: Sat 18 Oct 2025 15:25:24 +0000 Manifest this update: Sat 18 Oct 2025 15:25:23 +0000 Manifest next update: Sat 25 Oct 2025 15:25:23 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: jRG89+GNAfl1vP1zpPVqJNkwgSYbnqYuDMaw2la+D18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Oct 18 15:25:23 2025 GMT Not After : Oct 25 15:25:23 2025 GMT Subject: CN=68f3b164-4034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:87:dd:f9:b3:3b:66:57:36:dc:24:31:c2: df:ed:32:8d:82:23:f7:44:a8:37:65:93:82:1f:a1: 6a:8f:73:4c:83:f4:61:06:a9:12:9b:25:3d:a8:a4: 2b:00:08:34:e2:1b:1e:6f:28:59:f6:ca:a5:d9:3e: a2:41:20:72:ec:1d:b2:68:e4:0c:d8:4a:fc:89:40: 54:ec:a2:ff:64:0d:02:49:ce:2c:28:44:e8:48:66: 50:34:21:1f:52:ba:4e:b5:db:51:41:96:85:15:81: 90:ea:b3:30:bd:ad:b9:56:a0:d7:80:2c:6e:dc:78: b9:d6:32:ca:86:eb:57:ce:73:e4:a2:4a:51:19:0a: b9:65:6e:b7:78:ad:f0:aa:f9:2a:a6:56:27:bf:4c: 17:72:0b:4b:9d:e4:52:cd:e2:82:15:b1:cc:98:b5: 3b:4d:ec:48:e6:5f:1e:57:1d:b4:af:e5:96:5e:5d: 65:8f:61:c7:c7:25:54:de:c2:d5:9e:7f:22:4c:e1: e1:39:0f:a4:3b:6e:f5:4d:a9:77:bc:fe:e0:bf:f0: f9:6c:15:d1:51:7b:36:ef:3a:42:da:4a:6f:3a:ea: 0f:e0:21:ba:62:01:d7:75:82:9b:ce:07:6e:51:fa: 78:8b:6a:f1:fa:e4:a4:3e:93:a5:42:77:1c:1c:22: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:03:C4:EC:96:51:C8:96:D3:8C:64:1C:2E:C8:92:F1:CA:A8:79 X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f3:0c:42:f8:e9:f7:10:6d:4e:86:1b:18:3f:4a:5f:e1:8b: 8c:c1:99:d7:a6:f9:3d:e7:b6:8a:bf:b4:a6:76:b5:21:87:85: e1:df:d5:5c:a5:07:98:c4:e8:6c:fe:0f:b3:dd:20:e7:92:1d: 78:fc:db:9c:de:9e:eb:64:36:ed:5d:ec:a7:14:4f:4b:1f:ea: c0:77:b9:c8:9a:42:29:d2:41:3d:95:ae:d3:7c:1f:08:4f:db: fe:f4:7a:6c:47:c4:c2:31:eb:30:8d:a6:b6:83:57:f2:45:d3: 2d:e2:fd:5a:87:95:b3:f9:7e:b5:72:e4:f5:89:2a:0b:d2:44: c2:06:80:2a:24:95:f8:3d:50:84:d0:7d:39:37:52:14:0c:9d: a1:75:b1:7b:0a:f9:ef:c5:d6:14:f0:fb:46:d4:34:b1:f4:71: 24:0a:6b:31:29:1b:4e:07:a3:07:4b:5d:4b:c8:55:a5:fc:6b: 7b:d1:47:0e:fb:f7:f3:f6:b3:cd:39:54:60:8b:6f:5c:39:1c: 8c:88:31:9e:a6:2c:b6:3b:9c:06:b1:6b:b0:73:f0:1c:d3:7b: e3:a6:91:c1:cf:6c:9e:ad:22:b2:76:b3:3f:e8:b8:51:db:5f: 65:b7:79:1e:29:6e:91:c3:d3:26:bd:a7:27:65:b7:4e:39:3e: a7:bc:08:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUxMDE4MTUyNTIzWhcNMjUxMDI1MTUyNTIzWjAYMRYwFAYD VQQDEw02OGYzYjE2NC00MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHGH3fmzO2ZXNtwkMcLf7TKNgiP3RKg3ZZOCH6Fqj3NMg/RhBqkSmyU9qKQr AAg04hsebyhZ9sql2T6iQSBy7B2yaOQM2Er8iUBU7KL/ZA0CSc4sKEToSGZQNCEf UrpOtdtRQZaFFYGQ6rMwva25VqDXgCxu3Hi51jLKhutXznPkokpRGQq5ZW63eK3w qvkqplYnv0wXcgtLneRSzeKCFbHMmLU7TexI5l8eVx20r+WWXl1lj2HHxyVU3sLV nn8iTOHhOQ+kO271Tal3vP7gv/D5bBXRUXs27zpC2kpvOuoP4CG6YgHXdYKbzgdu Ufp4i2rx+uSkPpOlQnccHCLqOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbIA8Ts llHIltOMZBwuyJLxyqh5MB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO8wxC+On3EG1OhhsYP0pf4YuMwZnXpvk957aKv7SmdrUhh4Xh39Vc pQeYxOhs/g+z3SDnkh14/Nuc3p7rZDbtXeynFE9LH+rAd7nImkIp0kE9la7TfB8I T9v+9HpsR8TCMeswjaa2g1fyRdMt4v1ah5Wz+X61cuT1iSoL0kTCBoAqJJX4PVCE 0H05N1IUDJ2hdbF7CvnvxdYU8PtG1DSx9HEkCmsxKRtOB6MHS11LyFWl/Gt70UcO +/fz9rPNOVRgi29cORyMiDGepiy2O5wGsWuwc/Ac03vjppHBz2yerSKydrM/6LhR 219lt3keKW6Rw9MmvacnZbdOOT6nvAiB -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:29 2025 by rpki-client