$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: t2zWNzymlICHYkyhMXT3XtKOp7yZJHADkNUKLDRBVeA= Subject key identifier: FE:29:85:D2:5B:37:16:AA:66:50:8C:62:69:AD:58:15:70:A9:64:63 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 26AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 269C Signing time: Sun 02 Nov 2025 15:41:47 +0000 Manifest this update: Sun 02 Nov 2025 15:41:47 +0000 Manifest next update: Sun 09 Nov 2025 15:41:47 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: XXGZSNY0DaGQO+m0KQPDWXkgRzxmBWzvcf/IPav7/zw=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9903 (0x26af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Nov 2 15:41:47 2025 GMT Not After : Nov 9 15:41:47 2025 GMT Subject: CN=69077bbb-544d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:42:66:6b:8a:b0:6b:42:3a:07:1e:50:dc: 37:73:bc:05:0e:61:11:d3:a6:ec:94:13:99:ee:bb: af:50:16:59:62:48:86:d3:03:5a:17:d5:eb:ca:3c: 99:33:97:bf:00:61:8b:31:03:19:10:d0:e7:1c:46: 1b:3f:87:08:46:5e:fc:33:14:65:7e:48:28:df:a9: d8:a6:e5:a5:e5:46:f5:be:07:b9:aa:24:58:24:d5: 9c:6b:b6:a6:c2:fa:e7:d6:bc:c6:22:9a:53:0a:0b: 03:db:ae:26:57:d4:1e:67:11:c4:36:0b:9a:1f:07: 78:7d:58:c7:55:52:f2:9d:f7:6f:c6:a0:67:fb:73: 14:31:70:fb:5c:f8:ca:14:03:67:3c:40:eb:59:25: a1:82:51:29:66:5d:63:91:5d:43:18:bb:5c:fd:fc: a0:91:7a:33:e8:b9:b2:0b:10:bc:0f:d0:c5:62:df: e0:fd:cf:90:31:c8:d3:4f:32:c8:7b:ff:4b:42:e3: 9b:94:10:c3:31:4f:ef:09:b3:04:57:12:4a:64:23: 89:fc:9b:d5:e9:0d:73:70:b2:94:5d:99:6a:18:b9: b1:ae:fd:ec:48:46:bd:2a:c3:de:9c:6e:90:1e:2a: b4:83:26:6e:90:5c:7f:ca:e9:28:e9:65:3b:9f:bd: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:29:85:D2:5B:37:16:AA:66:50:8C:62:69:AD:58:15:70:A9:64:63 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:ed:06:3c:4f:99:9b:22:94:c2:6d:b4:ee:27:eb:50:3c:55: 4e:df:ab:42:04:8e:b6:0e:91:29:8f:c1:2d:b2:8e:7e:78:17: 52:e4:86:d5:f1:23:a6:2d:f4:b8:af:99:b5:5e:ac:57:e2:44: 76:62:5d:81:2f:c2:f0:a1:3d:01:c1:d4:d4:dd:7d:3d:3b:d9: dc:7e:ed:f9:6b:ee:d2:5c:4e:8e:3f:e8:01:0a:4f:c2:de:ca: ae:df:74:e5:13:15:71:d6:9b:5a:ac:ed:bd:31:3e:d8:e9:92: 75:f4:57:fe:65:af:a4:6b:c7:80:d6:f1:d4:ae:fb:d1:9b:49: bb:ca:c3:ed:ad:85:e6:97:9f:a9:34:ae:ac:b4:2f:58:eb:e3: 7c:cf:73:a8:92:1e:e7:93:7a:64:76:48:a9:b0:4a:8e:cb:e0: ce:4a:e9:d9:52:90:39:ca:89:21:fe:ae:1b:a2:28:54:f1:41: b1:92:43:89:b9:8c:c8:4c:f1:d2:39:73:3e:49:d1:d3:8f:a7: 84:e4:ed:50:cc:50:0c:11:e6:d6:76:32:3e:2c:c1:be:a7:b1: 9f:b8:c6:06:cc:97:d4:60:46:d2:81:89:58:f0:cf:b0:41:15: 56:ff:67:34:79:4b:8a:50:9f:f5:c4:73:96:ea:85:f0:37:27: ff:a6:61:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUxMTAyMTU0MTQ3WhcNMjUxMTA5MTU0MTQ3WjAYMRYwFAYD VQQDEw02OTA3N2JiYi01NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuBCZmuKsGtCOgceUNw3c7wFDmER06bslBOZ7ruvUBZZYkiG0wNaF9XryjyZ M5e/AGGLMQMZENDnHEYbP4cIRl78MxRlfkgo36nYpuWl5Ub1vge5qiRYJNWca7am wvrn1rzGIppTCgsD264mV9QeZxHENguaHwd4fVjHVVLynfdvxqBn+3MUMXD7XPjK FANnPEDrWSWhglEpZl1jkV1DGLtc/fygkXoz6LmyCxC8D9DFYt/g/c+QMcjTTzLI e/9LQuOblBDDMU/vCbMEVxJKZCOJ/JvV6Q1zcLKUXZlqGLmxrv3sSEa9KsPenG6Q Hiq0gyZukFx/yuko6WU7n72/3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4phdJb NxaqZlCMYmmtWBVwqWRjMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM7QY8T5mbIpTCbbTuJ+tQPFVO36tCBI62DpEpj8Etso5+eBdS5IbV 8SOmLfS4r5m1XqxX4kR2Yl2BL8LwoT0BwdTU3X09O9ncfu35a+7SXE6OP+gBCk/C 3squ33TlExVx1ptarO29MT7Y6ZJ19Ff+Za+ka8eA1vHUrvvRm0m7ysPtrYXml5+p NK6stC9Y6+N8z3Ookh7nk3pkdkipsEqOy+DOSunZUpA5yokh/q4boihU8UGxkkOJ uYzITPHSOXM+SdHTj6eE5O1QzFAMEebWdjI+LMG+p7GfuMYGzJfUYEbSgYlY8M+w QRVW/2c0eUuKUJ/1xHOW6oXwNyf/pmHN -----END CERTIFICATE-----Generated at Tue Nov 4 08:14:01 2025 by rpki-client