$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: Xgm8qKYrteksr17XjUJ2yUhsI7dPBafnzawrY3vzHFE= Subject key identifier: F9:1C:AE:F3:5B:AC:91:24:7D:74:33:1A:59:5D:34:C7:F2:65:11:6E Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 016F Signing time: Mon 03 Nov 2025 03:51:43 +0000 Manifest this update: Mon 03 Nov 2025 03:51:43 +0000 Manifest next update: Mon 10 Nov 2025 03:51:43 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: BK6UsN6CqETHxeuf75w5ABwwsdV392glnsxJQoCokxg=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Nov 3 03:51:43 2025 GMT Not After : Nov 10 03:51:43 2025 GMT Subject: CN=690826cf-9bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:6b:ff:f4:75:22:a6:ee:1a:b7:54:f9:8b: 59:4f:2a:c9:43:84:fb:cc:47:a7:89:79:8a:a4:53: 55:a3:47:6a:ff:e9:cc:e5:66:a3:93:65:b5:71:7e: fc:18:fa:b2:a7:d4:e6:28:4e:ae:61:16:a5:8e:4a: 53:1c:37:df:62:f9:6c:13:cc:a4:62:13:6f:7c:15: e2:5d:64:b9:d7:4a:27:e7:be:cb:38:4e:92:e1:78: 28:62:5c:77:57:5a:5c:9a:50:08:4b:5c:13:f4:75: 26:58:47:6b:67:34:d3:3a:7e:60:06:7c:bb:0f:b8: b5:a6:97:bc:a1:b5:0f:c9:cb:e3:b8:db:c4:d4:cc: fe:ad:ef:09:eb:19:57:ce:1e:c0:c8:fa:57:95:2e: c4:18:8f:ef:10:76:59:8c:75:c7:83:64:e8:bb:5e: 2b:1b:51:e2:ba:5b:37:ba:f4:12:69:95:15:77:3e: 51:19:c4:a7:da:0a:9f:1d:7e:12:13:72:eb:f2:ef: d5:71:89:8d:73:69:e2:3f:e5:5c:ec:c1:3f:5f:ac: bd:51:6f:19:ee:6d:ea:bf:83:14:7a:ee:67:02:e7: 96:19:1c:0a:bc:de:cd:ad:fe:3c:7f:2b:fd:2a:9d: fe:cc:4b:7c:90:bd:5e:9f:50:8b:92:da:cb:99:23: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:AE:F3:5B:AC:91:24:7D:74:33:1A:59:5D:34:C7:F2:65:11:6E X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:64:32:4e:d2:95:39:2c:ac:6b:03:ea:a3:d0:e2:d3:8b:ee: d3:21:13:9f:05:ca:5e:1f:3d:27:05:7e:1e:0b:23:92:3d:94: c8:05:4d:9a:1d:55:f8:06:13:4f:f8:8b:cf:e0:4d:31:f3:8c: db:3b:bf:9f:15:dd:5f:d6:fa:36:ae:18:b9:8f:30:df:0c:a7: ce:3d:ed:95:5d:e5:63:ff:e8:98:d2:75:cf:a9:e6:a2:5e:73: ab:d4:fc:a0:b3:04:cb:79:ae:be:3c:6c:43:ba:be:5c:e9:8f: 64:b7:15:da:2f:05:97:ea:3e:5a:95:12:68:d6:ee:31:31:bd: 96:fb:2c:b9:0b:16:4a:94:5e:76:f2:9d:bc:b0:53:a9:70:42: 17:d9:38:f4:cc:6e:1a:26:1a:c5:15:49:fe:78:31:93:07:9f: 02:f1:4c:bb:71:1e:08:f9:e2:03:56:d7:c3:20:e7:7e:8d:5c: 8e:fa:8a:40:be:3c:08:df:b4:43:5e:43:9e:1a:0b:a5:1a:a6: 05:12:14:1d:17:2d:b9:03:74:71:11:41:bb:3b:13:de:95:a9: d0:c6:1e:de:ef:63:c6:a4:48:dd:4a:1d:af:75:36:cd:e1:02: f7:22:15:56:31:8c:dd:1a:ea:2e:dd:5d:06:82:bd:e4:53:f9: ef:7f:b4:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUxMTAzMDM1MTQzWhcNMjUxMTEwMDM1MTQzWjAYMRYwFAYD VQQDEw02OTA4MjZjZi05YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBRr//R1IqbuGrdU+YtZTyrJQ4T7zEeniXmKpFNVo0dq/+nM5Wajk2W1cX78 GPqyp9TmKE6uYRaljkpTHDffYvlsE8ykYhNvfBXiXWS510on577LOE6S4XgoYlx3 V1pcmlAIS1wT9HUmWEdrZzTTOn5gBny7D7i1ppe8obUPycvjuNvE1Mz+re8J6xlX zh7AyPpXlS7EGI/vEHZZjHXHg2Tou14rG1Hiuls3uvQSaZUVdz5RGcSn2gqfHX4S E3Lr8u/VcYmNc2niP+Vc7ME/X6y9UW8Z7m3qv4MUeu5nAueWGRwKvN7Nrf48fyv9 Kp3+zEt8kL1en1CLktrLmSNw9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkcrvNb rJEkfXQzGlldNMfyZRFuMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTZDJO0pU5LKxrA+qj0OLTi+7TIROfBcpeHz0nBX4eCyOSPZTIBU2a HVX4BhNP+IvP4E0x84zbO7+fFd1f1vo2rhi5jzDfDKfOPe2VXeVj/+iY0nXPqeai XnOr1PygswTLea6+PGxDur5c6Y9ktxXaLwWX6j5alRJo1u4xMb2W+yy5CxZKlF52 8p28sFOpcEIX2Tj0zG4aJhrFFUn+eDGTB58C8Uy7cR4I+eIDVtfDIOd+jVyO+opA vjwI37RDXkOeGgulGqYFEhQdFy25A3RxEUG7OxPelanQxh7e72PGpEjdSh2vdTbN 4QL3IhVWMYzdGuou3V0Ggr3kU/nvf7Q5 -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:43 2025 by rpki-client