$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: 0VdWlFBChPgoMqu+w6zojYV43N6BpFRzU8NTiHHxYDc= Subject key identifier: BE:68:57:EA:38:7A:F9:A7:06:49:29:CC:FA:A6:9F:A4:9A:9B:44:7E Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 34CA Signing time: Mon 20 Oct 2025 15:06:36 +0000 Manifest this update: Mon 20 Oct 2025 15:06:36 +0000 Manifest next update: Mon 27 Oct 2025 15:06:36 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: yHEcLJVFO2dcIBDhoJnfte69OU9xGqbyoScA/j9QNLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: Oct 20 15:06:36 2025 GMT Not After : Oct 27 15:06:36 2025 GMT Subject: CN=68f64ffc-02d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:14:f1:b7:35:64:0e:4f:e9:94:c9:29:26:ef: 45:11:55:6c:bd:46:73:68:45:38:07:aa:6a:61:a3: e0:54:16:b6:b7:53:bb:ea:0d:bb:79:fc:6a:36:9b: 08:ed:b7:8b:1a:bd:50:c7:4d:5d:7a:7b:16:0f:3d: 29:3f:e0:e1:09:c9:03:4d:86:f1:d2:41:5e:07:94: 7a:40:29:b9:ff:2b:3a:17:a3:fb:69:31:bb:50:2a: dd:6b:23:34:05:42:a7:f2:f2:8c:28:27:98:d9:13: 8e:52:1b:a6:d6:1b:97:71:03:2d:15:1b:d1:c3:a7: a7:c3:58:8e:4d:6f:ea:32:61:3d:ba:c5:ed:b9:81: 9d:14:53:96:7d:dd:f7:02:60:ae:83:81:8a:0c:b4: 80:be:05:ed:85:77:5f:00:b7:98:24:92:c8:3b:5f: de:4b:52:84:1a:c4:6f:1c:64:c1:07:cd:2e:a9:36: 3b:7f:1c:04:4f:77:42:15:7d:39:94:e9:88:5d:1d: eb:f8:3e:49:7c:91:20:b3:86:88:ee:97:e3:9e:f7: 8b:02:7d:9d:15:4b:46:a3:6b:3f:3c:ed:6d:e7:68: f7:98:69:8b:b4:95:16:4e:8d:38:43:16:9d:88:e6: 50:00:55:5d:eb:cf:3d:bf:f5:e2:b8:c5:6e:6e:d4: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:68:57:EA:38:7A:F9:A7:06:49:29:CC:FA:A6:9F:A4:9A:9B:44:7E X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:9f:b2:1f:7b:a0:4e:c8:d0:46:e3:c7:0e:9d:06:c9:b4:18: d8:aa:cc:34:fe:28:35:7c:df:8d:1c:bb:d3:46:95:a7:f6:90: e3:09:b3:ee:97:b0:e7:dc:bd:1b:cc:e3:f5:0b:c1:a6:26:d5: 2a:05:3d:69:1f:96:e4:bc:49:3b:53:9e:65:54:ce:fe:0c:b6: 2d:c6:1d:0c:60:63:49:79:e5:75:67:7c:30:28:b6:e7:fd:66: 92:32:a0:29:32:34:bc:f8:c7:ce:ba:f9:f3:e7:28:2c:a1:ec: a7:6f:3b:04:49:58:f3:0a:6b:fa:bb:ad:14:97:9a:b3:a3:7d: ec:51:78:fa:ab:56:80:a9:87:fb:d2:94:ba:2a:25:0b:2d:de: af:bd:2b:52:5b:76:1e:6a:e9:dc:d8:8d:22:d7:14:23:ac:2b: e9:8b:04:b3:75:52:4e:e6:0e:ef:28:5c:37:db:6b:a9:a9:1a: 1e:26:35:04:e3:f6:b4:a0:67:74:11:ae:be:a1:05:ec:91:ae: 1a:d2:8b:e9:e9:cb:fc:be:72:8c:ce:fb:e1:de:e2:49:4f:bc: 50:3c:5d:70:35:4a:f8:7f:01:fc:da:bb:9f:73:46:dd:50:59: 1a:e5:2f:d4:82:3b:49:a0:9f:2c:f3:1f:08:09:2e:eb:8e:aa: cb:0b:db:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUxMDIwMTUwNjM2WhcNMjUxMDI3MTUwNjM2WjAYMRYwFAYD VQQDEw02OGY2NGZmYy0wMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RTxtzVkDk/plMkpJu9FEVVsvUZzaEU4B6pqYaPgVBa2t1O76g27efxqNpsI 7beLGr1Qx01densWDz0pP+DhCckDTYbx0kFeB5R6QCm5/ys6F6P7aTG7UCrdayM0 BUKn8vKMKCeY2ROOUhum1huXcQMtFRvRw6enw1iOTW/qMmE9usXtuYGdFFOWfd33 AmCug4GKDLSAvgXthXdfALeYJJLIO1/eS1KEGsRvHGTBB80uqTY7fxwET3dCFX05 lOmIXR3r+D5JfJEgs4aI7pfjnveLAn2dFUtGo2s/PO1t52j3mGmLtJUWTo04Qxad iOZQAFVd6889v/XiuMVubtTg8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5oV+o4 evmnBkkpzPqmn6Sam0R+MB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7n7Ife6BOyNBG48cOnQbJtBjYqsw0/ig1fN+NHLvTRpWn9pDjCbPu l7Dn3L0bzOP1C8GmJtUqBT1pH5bkvEk7U55lVM7+DLYtxh0MYGNJeeV1Z3wwKLbn /WaSMqApMjS8+MfOuvnz5ygsoeynbzsESVjzCmv6u60Ul5qzo33sUXj6q1aAqYf7 0pS6KiULLd6vvStSW3Yeaunc2I0i1xQjrCvpiwSzdVJO5g7vKFw322upqRoeJjUE 4/a0oGd0Ea6+oQXska4a0ovp6cv8vnKMzvvh3uJJT7xQPF1wNUr4fwH82rufc0bd UFka5S/UgjtJoJ8s8x8ICS7rjqrLC9u4 -----END CERTIFICATE-----Generated at Tue Oct 21 03:15:15 2025 by rpki-client