$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: m5E+fQ1k1nyCA4LGglXAKDZhzgLynUiZ6kqpqJp4rEo= Subject key identifier: B5:A1:9D:6B:37:E1:CF:AE:B1:D8:95:84:09:78:28:13:F6:B8:E8:71 Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 0318 Signing time: Wed 05 Nov 2025 01:13:33 +0000 Manifest this update: Wed 05 Nov 2025 01:13:33 +0000 Manifest next update: Wed 12 Nov 2025 01:13:33 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: jbyFMiGFloQP9KL7rVVYvlJhuMID2JSNhLTREAJ/+qk=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: q/TcJaaAitP3rzneDoOcxqjjnobWifgs1ChVJEG3jdI=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: NLX9iBQc5qpA5HiI79qnyQxZYjEiAaFpUSGQqEwDv14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Nov 5 01:13:33 2025 GMT Not After : Nov 12 01:13:33 2025 GMT Subject: CN=690aa4bd-e274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:2f:ec:ca:5c:e7:31:62:8f:f6:4f:46:01: ac:6b:4d:da:cb:96:a2:d3:b2:7c:61:4e:30:93:82: 0f:01:00:d3:e2:43:1b:3d:51:ce:41:12:a2:b1:71: 45:d7:4a:0a:06:02:02:85:85:05:a4:51:0e:bc:47: ed:1a:7f:48:65:96:f7:5f:18:5a:ee:9f:d6:78:55: ad:c6:58:1f:f4:19:78:a7:98:2c:d8:ed:06:87:ea: a8:95:7a:ec:fd:fa:bb:37:69:08:e2:7b:55:39:9c: 87:4f:dd:6b:12:82:90:5c:04:ea:9d:5a:de:bd:69: ca:93:26:80:6a:82:fb:db:68:9a:5f:2f:61:c0:67: 8f:2d:15:83:94:7b:d2:dd:0a:0f:d7:f9:71:96:5f: c7:9c:a9:7a:4c:c8:80:cc:4a:e9:36:f7:5e:b2:1f: 58:33:c5:c5:70:a3:bd:83:7d:6f:78:0c:25:95:2e: 05:14:f7:00:3d:41:52:88:df:ff:d5:11:31:83:66: 0f:6c:77:03:32:b5:3f:16:7e:81:87:24:5c:f7:c0: 06:55:f6:cc:0d:83:9f:71:1d:6b:2d:2d:44:ca:97: 09:2f:1a:26:ca:a8:a0:96:39:24:5b:e9:6f:b7:b7: 7f:94:d5:17:85:7c:66:8d:94:56:6f:bf:95:5a:3b: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A1:9D:6B:37:E1:CF:AE:B1:D8:95:84:09:78:28:13:F6:B8:E8:71 X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6e:35:05:28:8b:e1:bb:ad:68:be:3c:ee:c5:86:38:23:74: 0d:72:90:42:67:35:58:05:98:f8:49:18:cd:78:66:4e:d2:3c: 9d:36:8a:b1:11:fc:16:1c:c8:45:06:99:f7:18:b8:f9:c0:e0: 00:36:91:f8:0b:18:57:e4:5c:45:98:6c:65:44:82:8a:d7:0a: 69:ad:89:af:a4:57:af:0a:a7:eb:fe:17:1e:33:05:c6:b3:05: d9:6b:b6:04:12:f3:b7:09:c0:1f:9d:ee:bb:19:21:9e:0d:3c: 8a:90:21:26:8d:73:4b:20:57:8d:8b:5a:11:9e:b2:d5:38:45: c2:7c:2c:ca:76:64:84:8f:fa:5e:d6:74:07:d4:e9:f0:f7:99: 65:f7:c2:4c:ee:81:09:35:f3:0f:6b:29:47:6f:a6:6a:69:eb: ee:e6:23:85:27:ce:e8:b4:06:bf:58:25:e8:41:9d:9f:2b:54: ed:12:2b:2f:ce:67:9a:04:90:00:86:43:00:bc:ba:54:35:ab: e5:b9:a9:01:2b:d9:02:d9:98:cd:e8:d5:4f:6c:1d:fe:c3:af: 7b:a4:67:a0:03:ed:01:30:cc:93:9d:ce:52:c7:28:ec:87:50: b5:8b:ff:bb:ce:47:0d:4c:96:a6:99:8e:78:1d:c1:94:a8:90: dd:58:64:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjUxMTA1MDExMzMzWhcNMjUxMTEyMDExMzMzWjAYMRYwFAYD VQQDEw02OTBhYTRiZC1lMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKQv7Mpc5zFij/ZPRgGsa03ay5ai07J8YU4wk4IPAQDT4kMbPVHOQRKisXFF 10oKBgIChYUFpFEOvEftGn9IZZb3Xxha7p/WeFWtxlgf9Bl4p5gs2O0Gh+qolXrs /fq7N2kI4ntVOZyHT91rEoKQXATqnVrevWnKkyaAaoL722iaXy9hwGePLRWDlHvS 3QoP1/lxll/HnKl6TMiAzErpNvdesh9YM8XFcKO9g31veAwllS4FFPcAPUFSiN// 1RExg2YPbHcDMrU/Fn6BhyRc98AGVfbMDYOfcR1rLS1EypcJLxomyqigljkkW+lv t7d/lNUXhXxmjZRWb7+VWjuljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWhnWs3 4c+usdiVhAl4KBP2uOhxMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMbjUFKIvhu61ovjzuxYY4I3QNcpBCZzVYBZj4SRjNeGZO0jydNoqx EfwWHMhFBpn3GLj5wOAANpH4CxhX5FxFmGxlRIKK1wpprYmvpFevCqfr/hceMwXG swXZa7YEEvO3CcAfne67GSGeDTyKkCEmjXNLIFeNi1oRnrLVOEXCfCzKdmSEj/pe 1nQH1Onw95ll98JM7oEJNfMPaylHb6Zqaevu5iOFJ87otAa/WCXoQZ2fK1TtEisv zmeaBJAAhkMAvLpUNavluakBK9kC2ZjN6NVPbB3+w697pGegA+0BMMyTnc5Sxyjs h1C1i/+7zkcNTJammY54HcGUqJDdWGSA -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:07 2025 by rpki-client