$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft File: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json) Hash identifier: 8aGokHrMmSm9yEkiudoTakKuItFQphMnlejoqqR5BSQ= Subject key identifier: 5F:B7:5C:72:70:4B:E7:82:89:78:ED:0F:68:9F:47:50:30:42:EE:CE Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A Certificate issuer: /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft Manifest number: 072E Signing time: Sat 18 Oct 2025 23:09:26 +0000 Manifest this update: Sat 18 Oct 2025 23:09:25 +0000 Manifest next update: Sat 25 Oct 2025 23:09:25 +0000 Files and hashes: 1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: tYTiqNLsLaZ5LKjnfC89VUSu/NoYwqwHmea36+yv8XI=) 2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: ErOTyz5l442f54R4SgwNJSi5aE/r3E7WeodId76rTk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Validity Not Before: Oct 18 23:09:25 2025 GMT Not After : Oct 25 23:09:25 2025 GMT Subject: CN=68f41e25-8ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:6c:52:d7:d0:4d:ca:00:db:06:06:30:fd: 74:ad:03:d3:8e:22:01:45:ac:4e:50:b6:40:24:0f: 14:c0:76:30:31:ed:5c:51:3b:29:09:79:05:2d:ca: 6e:8f:78:b4:09:6a:f3:3e:8d:ed:9e:71:4f:64:7f: cb:cf:95:d5:47:b9:57:e8:de:37:66:46:df:6d:1c: 89:c3:56:a3:86:9b:4a:73:d9:36:40:58:f0:17:72: 0f:ec:16:84:f4:e0:31:cd:a9:40:e3:e4:8c:9b:03: 8a:2b:1e:bb:6f:97:f4:ac:2a:92:bb:e4:c0:3b:cd: df:ec:8f:5e:f3:43:b6:06:63:9e:7f:ef:c3:7b:ae: 78:09:54:be:44:c0:97:35:6c:61:5e:ab:50:37:4b: 52:9f:4f:31:4a:cb:a2:20:45:1a:f7:79:e6:e9:11: 5a:53:be:32:87:27:48:13:ae:2f:5d:f7:67:61:f6: 7e:54:99:de:81:1a:24:37:99:f6:f1:b9:7a:cc:cb: 0b:a2:b1:b0:13:f5:ae:ea:30:00:6f:08:28:29:f9: ef:35:11:e8:7d:dc:74:22:c9:c0:fc:09:15:b8:55: 6e:dc:7a:12:f6:b3:1f:a3:5e:1a:f7:20:7b:b7:a9: a8:53:b1:c7:a0:a5:3b:32:1f:07:62:a4:6e:4b:c7: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B7:5C:72:70:4B:E7:82:89:78:ED:0F:68:9F:47:50:30:42:EE:CE X509v3 Authority Key Identifier: keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c4:44:3a:c2:a9:7f:87:8c:28:f0:50:f6:66:27:9c:05:43: f2:e2:e6:1f:19:12:44:a4:f8:de:de:e7:54:8b:50:19:f3:0c: 9c:c1:4f:7f:34:63:3b:62:ce:eb:57:7b:1e:5f:ef:8a:50:93: 8e:53:eb:a8:83:12:f3:d6:cb:57:39:dd:76:e8:3d:bb:bb:81: 30:39:70:f8:8e:22:b0:0e:2d:ca:cd:58:6b:2d:11:bd:5f:6e: 00:49:48:e0:60:18:34:50:3e:84:0e:00:c6:03:e0:e7:eb:db: 60:a6:37:e0:6b:b5:48:81:3b:db:64:8b:61:cd:4f:54:fd:4e: d4:42:e1:29:54:52:cc:8b:33:d2:bc:27:05:1d:f4:d5:b1:06: 76:f2:8b:1f:1f:1e:dc:e4:ee:3b:bf:dc:7a:0a:32:0d:6b:d1: e2:bf:45:db:46:43:2a:d5:93:dc:39:94:61:e3:be:6f:ee:40: 32:d5:a3:16:9f:82:5e:2c:51:1f:59:e8:c3:87:60:74:38:7e: 74:88:dc:18:69:86:ee:5f:6f:4e:e2:18:e7:0d:18:c9:e9:2d: 1b:83:39:96:88:b9:b4:11:56:a6:1e:6b:bd:74:01:d0:eb:2f: a1:30:35:68:51:a1:f8:42:4a:97:12:b9:b3:e9:f1:2b:24:2e: 63:86:e9:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNTMxMTAvBgNVBAUTKDM0OUU1OTdDNzE3ODgxMDRCMDY0OUYwNzNBQkE3MkY2 NUYyODRCOUEwHhcNMjUxMDE4MjMwOTI1WhcNMjUxMDI1MjMwOTI1WjAYMRYwFAYD VQQDEw02OGY0MWUyNS04ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVRsUtfQTcoA2wYGMP10rQPTjiIBRaxOULZAJA8UwHYwMe1cUTspCXkFLcpu j3i0CWrzPo3tnnFPZH/Lz5XVR7lX6N43ZkbfbRyJw1ajhptKc9k2QFjwF3IP7BaE 9OAxzalA4+SMmwOKKx67b5f0rCqSu+TAO83f7I9e80O2BmOef+/De654CVS+RMCX NWxhXqtQN0tSn08xSsuiIEUa93nm6RFaU74yhydIE64vXfdnYfZ+VJnegRokN5n2 8bl6zMsLorGwE/Wu6jAAbwgoKfnvNRHofdx0IsnA/AkVuFVu3HoS9rMfo14a9yB7 t6moU7HHoKU7Mh8HYqRuS8dcXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+3XHJw S+eCiXjtD2ifR1AwQu7OMB8GA1UdIwQYMBaAFDSeWXxxeIEEsGSfBzq6cvZfKEua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU1My9BNEE1MTlFQTRF NjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdRU3daSjhIT3JweTlsOG9T NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KNVpmSEY0Z1FTd1pKOEhPcnB5OWw4b1M1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU1My9BNEE1MTlFQTRFNjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdR U3daSjhIT3JweTlsOG9TNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvxEQ6wql/h4wo8FD2ZiecBUPy4uYfGRJEpPje3udUi1AZ8wycwU9/ NGM7Ys7rV3seX++KUJOOU+uogxLz1stXOd126D27u4EwOXD4jiKwDi3KzVhrLRG9 X24ASUjgYBg0UD6EDgDGA+Dn69tgpjfga7VIgTvbZIthzU9U/U7UQuEpVFLMizPS vCcFHfTVsQZ28osfHx7c5O47v9x6CjINa9Hiv0XbRkMq1ZPcOZRh475v7kAy1aMW n4JeLFEfWejDh2B0OH50iNwYaYbuX29O4hjnDRjJ6S0bgzmWiLm0EVamHmu9dAHQ 6y+hMDVoUaH4QkqXErmz6fErJC5jhukL -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:56 2025 by rpki-client