$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: GCux6+qm0Gu+VjtrCU+WGUlMSRfCtIkqpehxpQJ9qUc= Subject key identifier: EA:5C:27:9F:43:38:F5:40:E0:5E:3B:1D:67:5A:44:78:54:A8:66:E5 Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 09F6 Signing time: Sat 18 Oct 2025 21:37:37 +0000 Manifest this update: Sat 18 Oct 2025 21:37:36 +0000 Manifest next update: Sat 25 Oct 2025 21:37:36 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: L+g9fp4jRPBRik0OLx/a/QFwUjS65yo3YZMur4z49Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Oct 18 21:37:36 2025 GMT Not After : Oct 25 21:37:36 2025 GMT Subject: CN=68f408a0-8016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:6d:83:1a:71:36:6c:2f:23:50:82:02:e3: f4:01:dd:23:d1:70:4a:44:04:11:6c:98:cc:77:4a: e8:00:f3:a3:41:c2:30:28:bd:0b:a2:3d:aa:e7:03: 76:0a:42:45:28:00:55:3e:33:6a:67:7c:5d:74:62: 8b:c8:00:cd:5d:9e:aa:77:32:06:ac:e1:09:f7:8d: 9f:d5:72:59:85:a4:75:d1:e2:03:66:6b:d6:a9:4d: eb:fb:6e:02:f9:ca:80:e3:bd:42:91:df:7b:b1:6c: b6:81:9e:d6:f0:e8:20:c2:3f:fc:88:3e:37:66:3f: fe:c3:ae:cc:62:7e:61:0d:e7:6b:d8:6e:6b:f2:64: 6b:0a:ee:8b:b1:f6:f4:5a:9d:a3:a7:62:fb:ce:ea: 9b:c3:67:83:d9:a7:30:af:7c:08:85:d1:6a:5b:85: 64:aa:86:fd:37:10:50:d3:12:68:53:c7:45:1a:bb: 36:82:f9:83:71:13:39:4f:6c:ea:cc:3e:28:9e:18: ad:06:8e:a9:5d:86:cb:59:61:43:0c:40:db:68:a4: d2:64:73:f9:a3:55:2c:05:66:b6:b5:02:a7:da:a3: 17:13:4b:d2:26:2f:50:71:fb:63:0a:f3:3b:cf:80: 9e:ec:fe:83:5f:60:4b:51:7b:c5:f5:b1:f3:6f:22: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5C:27:9F:43:38:F5:40:E0:5E:3B:1D:67:5A:44:78:54:A8:66:E5 X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:5a:35:40:29:e6:a5:1e:36:2e:ee:4e:92:00:ff:56:58:05: 56:60:02:07:37:7d:9d:7a:c1:14:c3:7b:51:1f:ec:ef:93:ba: db:d2:18:ec:4c:cc:cc:a9:32:f4:d0:72:c7:cd:0c:7d:3a:96: d0:a8:2a:0c:eb:2c:38:d0:d8:0d:da:9f:96:85:6e:fb:1c:ac: 99:47:d8:47:ad:a2:64:b3:71:79:26:fd:79:5d:88:11:11:5e: 00:a8:2b:32:6b:f6:11:8e:2c:dd:a6:6d:a2:5f:4e:66:3a:15: 81:ac:47:e8:76:c7:90:23:ad:cc:50:86:be:95:d1:e4:45:88: fc:e2:c2:28:80:95:f2:c3:79:c0:46:7e:86:9c:25:b0:45:c6: 63:7e:5e:f2:17:e7:41:04:b6:ab:75:98:d9:9b:98:d1:ca:58: 77:6e:57:45:16:74:cc:fa:dc:a1:50:72:5c:af:2c:f6:82:4d: 98:9a:33:07:8a:1c:c0:4b:95:36:b9:fb:c1:e7:f1:b3:91:70: ce:de:65:14:aa:14:c4:2d:44:c3:2b:2c:64:15:d9:30:22:18: 4e:e5:e1:0b:9e:ee:92:1f:de:03:6a:3b:79:bc:e1:d6:50:48: 31:b5:9b:be:4f:c5:14:c6:db:71:8e:67:ea:96:a0:b6:33:a4: 2b:82:79:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUxMDE4MjEzNzM2WhcNMjUxMDI1MjEzNzM2WjAYMRYwFAYD VQQDEw02OGY0MDhhMC04MDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4xtgxpxNmwvI1CCAuP0Ad0j0XBKRAQRbJjMd0roAPOjQcIwKL0Loj2q5wN2 CkJFKABVPjNqZ3xddGKLyADNXZ6qdzIGrOEJ942f1XJZhaR10eIDZmvWqU3r+24C +cqA471Ckd97sWy2gZ7W8Oggwj/8iD43Zj/+w67MYn5hDedr2G5r8mRrCu6Lsfb0 Wp2jp2L7zuqbw2eD2acwr3wIhdFqW4Vkqob9NxBQ0xJoU8dFGrs2gvmDcRM5T2zq zD4onhitBo6pXYbLWWFDDEDbaKTSZHP5o1UsBWa2tQKn2qMXE0vSJi9QcftjCvM7 z4Ce7P6DX2BLUXvF9bHzbyJMaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpcJ59D OPVA4F47HWdaRHhUqGblMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSWjVAKealHjYu7k6SAP9WWAVWYAIHN32desEUw3tRH+zvk7rb0hjs TMzMqTL00HLHzQx9OpbQqCoM6yw40NgN2p+WhW77HKyZR9hHraJks3F5Jv15XYgR EV4AqCsya/YRjizdpm2iX05mOhWBrEfodseQI63MUIa+ldHkRYj84sIogJXyw3nA Rn6GnCWwRcZjfl7yF+dBBLardZjZm5jRylh3bldFFnTM+tyhUHJcryz2gk2YmjMH ihzAS5U2ufvB5/GzkXDO3mUUqhTELUTDKyxkFdkwIhhO5eELnu6SH94Dajt5vOHW UEgxtZu+T8UUxttxjmfqlqC2M6Qrgnku -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:02 2025 by rpki-client