$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: A2Nkhzk7UYU6m5Suvx+zyV8YZIQpWlMb9bNS+as1sBQ= Subject key identifier: DD:3E:4F:9B:0E:01:22:D6:33:5C:E6:77:8A:46:CD:C6:09:0E:D9:A5 Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 43 Signing time: Sun 19 Oct 2025 10:52:04 +0000 Manifest this update: Sun 19 Oct 2025 10:52:03 +0000 Manifest next update: Sun 26 Oct 2025 10:52:03 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: DQkhhzJwZDcCjrP+LTahnfu5R+mfXaI2dU6dKe987LA=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2Lm246NHiIIsj3yU5G9cofOj46hOe93SJKM95sww3VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Oct 19 10:52:03 2025 GMT Not After : Oct 26 10:52:03 2025 GMT Subject: CN=68f4c2d4-bc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:4c:56:f6:f6:95:75:16:7a:ce:fe:a5:5c: 0a:12:03:e1:bc:db:c3:46:65:42:99:8f:cb:c2:f5: a0:00:79:d2:a9:34:ae:2e:6b:2d:56:9f:3d:f2:13: 5d:dc:52:e4:b3:54:aa:b8:55:1c:48:8f:89:d2:5c: e4:c5:21:e2:d2:0c:1f:6d:15:db:0c:1c:fb:5d:0d: 77:04:40:a3:71:3a:bb:76:d9:bd:e0:6f:0a:b4:68: 5a:93:49:5a:da:28:a7:d7:f2:af:ed:c5:70:b2:4a: 3e:10:0d:86:a3:52:1f:50:a7:b7:f7:95:96:f5:ae: 5d:e4:6f:af:38:21:5b:00:a7:6a:70:fe:67:ae:ab: c5:21:d2:d7:25:10:11:ad:00:15:72:d0:54:8b:6f: bb:94:fe:7a:3a:c7:c0:f5:45:9a:35:05:7e:cf:cf: e2:71:f6:2b:92:e9:d9:32:e7:c4:28:2b:51:1a:65: 57:c1:b9:5f:c9:b1:aa:13:1b:44:73:ab:08:37:ee: 08:5e:fd:0b:aa:6d:e6:d4:43:94:69:a7:f2:d8:a1: a6:d7:02:15:0b:e0:6e:bc:b4:b4:6e:eb:bc:54:df: a8:b0:82:93:36:b1:21:fa:7d:23:e0:1c:e4:af:47: 10:21:e8:1b:32:9f:ad:ff:61:b4:ba:c3:42:ec:a2: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3E:4F:9B:0E:01:22:D6:33:5C:E6:77:8A:46:CD:C6:09:0E:D9:A5 X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:db:78:28:b0:91:7e:60:95:43:cb:f0:0a:31:81:31:53: 2c:2b:46:40:82:7d:70:be:e4:c2:d0:a2:29:18:91:18:6a:74: 2f:9b:2e:d6:50:68:98:62:51:bd:2c:ae:38:f6:7c:c6:9f:d1: a2:3b:1b:a4:85:f0:d7:39:eb:24:1a:e1:1e:5b:8b:d7:32:50: 81:6f:81:e5:21:b8:1c:cf:13:82:eb:55:b5:38:f2:e3:bb:af: 39:a4:eb:eb:6d:09:91:f8:d5:7c:04:9e:b9:dc:25:fe:43:d3: 4d:4d:45:a7:3e:23:9f:f7:84:77:0f:50:00:36:d3:da:e2:38: 12:d5:cd:be:cf:86:11:f6:47:5c:25:eb:e3:06:c8:25:d6:31: 88:af:44:64:c2:b1:58:6f:91:f8:87:e0:1d:d5:95:4e:10:2e: 94:8d:fb:c6:c1:67:76:9b:8b:43:14:5d:ce:77:88:b9:9b:dc: af:87:58:ab:db:06:51:6b:ad:81:6c:f7:0e:38:b5:27:28:94: 31:6a:34:7d:bc:71:70:66:2f:ed:41:80:65:8c:71:42:e7:11: 33:aa:cb:ae:f5:15:cd:48:f2:50:66:e9:e9:2e:9e:e3:65:7a: 1b:3f:8a:04:02:17:05:24:17:3f:87:2b:e0:88:73:18:28:e1: b8:f5:68:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkVGRjExMC8GA1UEBRMoMzU0MzNDOUVDNDA4MDk5RjcwMThCQzUxNDQxRDIyQzRD MTFGQzM4NTAeFw0yNTEwMTkxMDUyMDNaFw0yNTEwMjYxMDUyMDNaMBgxFjAUBgNV BAMTDTY4ZjRjMmQ0LWJjMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6G0xW9vaVdRZ6zv6lXAoSA+G828NGZUKZj8vC9aAAedKpNK4uay1Wnz3yE13c UuSzVKq4VRxIj4nSXOTFIeLSDB9tFdsMHPtdDXcEQKNxOrt22b3gbwq0aFqTSVra KKfX8q/txXCySj4QDYajUh9Qp7f3lZb1rl3kb684IVsAp2pw/meuq8Uh0tclEBGt ABVy0FSLb7uU/no6x8D1RZo1BX7Pz+Jx9iuS6dky58QoK1EaZVfBuV/JsaoTG0Rz qwg37ghe/QuqbebUQ5Rpp/LYoabXAhUL4G68tLRu67xU36iwgpM2sSH6fSPgHOSv RxAh6Bsyn63/YbS6w0Lsoqf3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3T5Pmw4B ItYzXOZ3ikbNxgkO2aUwHwYDVR0jBBgwFoAUNUM8nsQICZ9wGLxRRB0ixMEfw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRUZGL0FCOTc1QkNFNDg0 OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlVNOG5zUUlDWjl3R0x4UlJCMGl4TUVmdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RUZGL0FCOTc1QkNFNDg0OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5 d0dMeFJSQjBpeE1FZnc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1d23gosJF+YJVDy/AKMYExUywrRkCCfXC+5MLQoikYkRhqdC+bLtZQ aJhiUb0srjj2fMaf0aI7G6SF8Nc56yQa4R5bi9cyUIFvgeUhuBzPE4LrVbU48uO7 rzmk6+ttCZH41XwEnrncJf5D001NRac+I5/3hHcPUAA209riOBLVzb7PhhH2R1wl 6+MGyCXWMYivRGTCsVhvkfiH4B3VlU4QLpSN+8bBZ3abi0MUXc53iLmb3K+HWKvb BlFrrYFs9w44tScolDFqNH28cXBmL+1BgGWMcULnETOqy671Fc1I8lBm6ekunuNl ehs/igQCFwUkFz+HK+CIcxgo4bj1aM8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:32 2025 by rpki-client