$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: paea8uykCSCDv+N1YRjMCPJ1qvDBd67uwpMyTGo9UC8= Subject key identifier: 7E:03:12:EF:EE:0B:47:F7:F0:1C:99:F4:F5:6D:AF:2C:63:FE:79:43 Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03F5 Signing time: Sun 19 Oct 2025 02:27:26 +0000 Manifest this update: Sun 19 Oct 2025 02:27:25 +0000 Manifest next update: Sun 26 Oct 2025 02:27:25 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: LvUOPDmVNF82RTJIPurJGCW+Zd+HkMrNULFCng/rYms=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Oct 19 02:27:25 2025 GMT Not After : Oct 26 02:27:25 2025 GMT Subject: CN=68f44c8e-10a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d9:c2:29:a5:73:e3:8d:40:63:00:71:24:3b: eb:cc:30:02:6b:4d:61:ae:48:d3:b9:d9:fe:c2:5b: f2:b4:03:13:52:98:a6:41:9b:13:9d:ee:fd:ad:aa: 70:9a:07:cb:e5:b2:68:78:85:76:b8:79:0a:23:04: 36:d3:25:0c:5d:b9:c8:03:83:4d:ac:bf:1e:29:90: 75:9a:95:03:7e:49:6a:ea:92:0d:bc:93:30:20:fb: bd:1b:f2:aa:4f:3e:3d:6f:d6:2f:e1:19:c7:9b:b4: 5c:20:98:f3:59:b0:1b:a2:21:be:16:14:5c:68:dc: c3:0f:d2:1a:85:0f:2c:b9:a4:17:60:2c:5c:81:2e: 3e:9e:c3:ad:2e:db:10:0d:46:ba:86:a4:62:f8:84: b1:ec:44:57:89:27:ba:b6:11:b0:98:0b:24:50:0c: ed:fa:f8:82:27:79:dc:57:5e:89:d2:a2:32:a8:70: 97:4b:8a:b3:58:cb:7e:6c:63:16:f8:c8:e1:93:49: de:66:8e:89:ea:55:d5:af:9b:95:64:83:e4:91:b1: 3d:17:4e:33:91:36:c8:85:2d:bb:6f:41:0a:ee:da: a2:e0:64:cf:6a:05:8f:7e:24:57:87:b9:e7:c5:a6: 58:89:d4:b0:7d:87:86:98:5b:38:8e:5c:db:3b:9f: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:03:12:EF:EE:0B:47:F7:F0:1C:99:F4:F5:6D:AF:2C:63:FE:79:43 X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:b0:da:4c:6a:a7:ff:ae:d2:76:fd:ba:71:27:a3:7c:5c:a8: c6:dd:22:75:57:99:f4:83:d2:03:73:ab:9d:fa:b8:05:3a:bb: 2b:2c:51:22:f8:07:b3:80:d4:fe:ed:2c:bf:f8:78:9d:a0:2d: 4c:ed:99:d5:f2:45:d3:f0:c7:bf:b1:cb:79:d9:48:de:86:92: ce:70:c5:32:17:36:e4:ea:56:d3:90:85:4a:65:34:a6:cb:8e: 5a:97:79:47:70:9f:40:43:05:9c:49:c5:64:6b:c4:31:f5:b2: 63:04:c0:45:ba:ab:aa:a9:9f:e0:a3:bb:a2:23:f0:48:8d:6e: 05:33:b5:5a:7a:31:b7:b5:93:76:12:e6:a9:ce:71:7f:31:5f: 55:2d:e8:67:59:e1:f8:61:e6:3f:23:54:bd:f8:42:9d:e5:4e: 19:15:96:fd:e2:c7:96:81:99:f8:00:dc:c4:12:e0:b1:d2:d3: 60:53:28:48:06:cb:25:4a:97:38:6a:cc:3f:98:ea:68:55:d9: fe:80:f3:62:4a:6d:21:fe:10:d1:cc:3b:8c:10:b5:4e:f0:81: da:dd:33:7b:4d:66:18:ca:4d:ef:8e:d6:d0:2a:a7:3a:17:45: c7:1b:49:6e:fa:b0:40:11:ca:3e:7a:bb:af:71:08:95:ba:6b: d0:b5:56:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUxMDE5MDIyNzI1WhcNMjUxMDI2MDIyNzI1WjAYMRYwFAYD VQQDEw02OGY0NGM4ZS0xMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NnCKaVz441AYwBxJDvrzDACa01hrkjTudn+wlvytAMTUpimQZsTne79rapw mgfL5bJoeIV2uHkKIwQ20yUMXbnIA4NNrL8eKZB1mpUDfklq6pINvJMwIPu9G/Kq Tz49b9Yv4RnHm7RcIJjzWbAboiG+FhRcaNzDD9IahQ8suaQXYCxcgS4+nsOtLtsQ DUa6hqRi+ISx7ERXiSe6thGwmAskUAzt+viCJ3ncV16J0qIyqHCXS4qzWMt+bGMW +Mjhk0neZo6J6lXVr5uVZIPkkbE9F04zkTbIhS27b0EK7tqi4GTPagWPfiRXh7nn xaZYidSwfYeGmFs4jlzbO59ogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4DEu/u C0f38ByZ9PVtryxj/nlDMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCisNpMaqf/rtJ2/bpxJ6N8XKjG3SJ1V5n0g9IDc6ud+rgFOrsrLFEi +AezgNT+7Sy/+HidoC1M7ZnV8kXT8Me/sct52UjehpLOcMUyFzbk6lbTkIVKZTSm y45al3lHcJ9AQwWcScVka8Qx9bJjBMBFuquqqZ/go7uiI/BIjW4FM7VaejG3tZN2 EuapznF/MV9VLehnWeH4YeY/I1S9+EKd5U4ZFZb94seWgZn4ANzEEuCx0tNgUyhI BsslSpc4asw/mOpoVdn+gPNiSm0h/hDRzDuMELVO8IHa3TN7TWYYyk3vjtbQKqc6 F0XHG0lu+rBAEco+eruvcQiVumvQtVag -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:21 2025 by rpki-client