$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: 2luK2EB46LfjuayVNGD4cAB5hOm5wrm8qAyPxPfBX9M= Subject key identifier: CE:C7:99:19:AA:B3:80:81:2A:F7:0E:6D:59:9D:04:C8:D4:17:39:FA Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0AB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0AAE Signing time: Tue 04 Nov 2025 19:35:31 +0000 Manifest this update: Tue 04 Nov 2025 19:35:31 +0000 Manifest next update: Tue 11 Nov 2025 19:35:31 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: m249x4+1e6M/xrhRWDUc7OrHMZsetc5I54KnfPr0BAk=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2741 (0xab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Nov 4 19:35:31 2025 GMT Not After : Nov 11 19:35:31 2025 GMT Subject: CN=690a5583-741a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:e2:12:d9:d8:1b:03:00:2a:5f:be:8b:3e: 40:b2:cd:7c:36:18:fb:d3:2b:69:43:60:2b:23:34: a0:ce:41:bf:e3:94:72:c9:5c:6b:54:a4:39:17:66: 08:24:2d:ed:d9:d8:a7:fc:76:42:dc:1d:6a:14:ef: ed:1c:c7:cd:32:f7:09:c3:1e:46:c8:d5:78:90:67: 4c:da:b8:b0:d0:01:61:14:52:e3:98:8a:91:4c:39: a7:7f:fe:be:5f:82:01:d7:17:c9:5f:5a:65:51:a6: 67:5f:05:0a:d6:e1:2e:a3:7e:dc:fb:69:38:1e:7e: c8:3a:c7:70:85:07:7b:e6:ec:45:c3:ac:b9:65:5c: 79:fc:8c:d1:88:b5:9a:d3:28:48:a7:dc:7e:3a:46: f4:cc:76:df:58:71:17:7b:04:fc:bd:61:13:7f:3a: 69:5e:4d:38:a8:aa:86:92:9c:7a:e6:c1:db:a6:19: f8:d8:9e:ab:2c:8e:65:1a:45:c4:e6:0f:ac:6e:9f: da:21:85:99:73:3f:ed:a1:09:db:7d:2f:c2:15:7b: a7:7f:28:e8:7d:7a:1f:31:88:7b:d4:d5:09:c5:ab: b6:56:a6:1c:f7:73:e0:6d:4a:89:79:71:59:1a:d9: 82:a0:95:87:a2:52:16:2f:ce:92:c8:b3:b8:c1:40: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C7:99:19:AA:B3:80:81:2A:F7:0E:6D:59:9D:04:C8:D4:17:39:FA X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:13:d3:7b:b3:1e:57:c9:e6:48:35:f0:b9:bb:9b:f0:bf:6d: 8c:23:3b:0e:81:fb:1a:7a:c8:c8:7c:8a:f1:be:20:6c:9f:dc: 53:31:f7:32:95:d4:16:cc:d3:d2:de:39:f6:1f:c9:fb:b0:42: 3d:41:bc:a3:c8:25:c0:b1:d8:5c:ca:30:0f:42:3b:cf:55:35: 3b:f2:39:90:0d:8c:94:ac:db:77:b2:f4:26:26:42:2f:76:d4: bb:32:7d:5a:bf:17:d4:f6:af:a1:6d:0b:bf:07:b9:39:aa:ce: 4c:21:9f:9e:2b:8b:15:ac:72:95:68:f4:b6:8f:f5:2c:49:dd: f3:67:f6:1f:4c:10:3f:ce:6b:0a:58:b4:95:e7:2a:68:b1:44: f3:1d:7a:ee:de:b0:ee:a3:e4:8e:c4:f9:60:9c:53:89:8b:25: 05:4f:1a:83:0a:49:f7:f8:71:ff:a2:f4:3f:85:e9:ca:33:3b: 9f:50:3b:eb:04:4d:81:8d:98:f9:33:09:bc:3b:9b:b3:08:97: 84:1b:3e:90:89:b9:5e:f8:61:93:82:2f:ea:28:ae:05:fb:8e: 33:98:a1:df:a2:0d:cc:7a:d3:76:88:86:c5:cb:ef:88:22:9b: a0:10:d7:51:c2:cd:b8:34:f4:1f:84:0f:e4:42:89:22:94:47: f2:0b:f7:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUxMTA0MTkzNTMxWhcNMjUxMTExMTkzNTMxWjAYMRYwFAYD VQQDEw02OTBhNTU4My03NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu/iEtnYGwMAKl++iz5Ass18Nhj70ytpQ2ArIzSgzkG/45RyyVxrVKQ5F2YI JC3t2din/HZC3B1qFO/tHMfNMvcJwx5GyNV4kGdM2riw0AFhFFLjmIqRTDmnf/6+ X4IB1xfJX1plUaZnXwUK1uEuo37c+2k4Hn7IOsdwhQd75uxFw6y5ZVx5/IzRiLWa 0yhIp9x+Okb0zHbfWHEXewT8vWETfzppXk04qKqGkpx65sHbphn42J6rLI5lGkXE 5g+sbp/aIYWZcz/toQnbfS/CFXunfyjofXofMYh71NUJxau2VqYc93PgbUqJeXFZ GtmCoJWHolIWL86SyLO4wUB7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7HmRmq s4CBKvcObVmdBMjUFzn6MB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiE9N7sx5XyeZINfC5u5vwv22MIzsOgfsaesjIfIrxviBsn9xTMfcy ldQWzNPS3jn2H8n7sEI9QbyjyCXAsdhcyjAPQjvPVTU78jmQDYyUrNt3svQmJkIv dtS7Mn1avxfU9q+hbQu/B7k5qs5MIZ+eK4sVrHKVaPS2j/UsSd3zZ/YfTBA/zmsK WLSV5yposUTzHXru3rDuo+SOxPlgnFOJiyUFTxqDCkn3+HH/ovQ/henKMzufUDvr BE2BjZj5Mwm8O5uzCJeEGz6Qible+GGTgi/qKK4F+44zmKHfog3MetN2iIbFy++I IpugENdRws24NPQfhA/kQokilEfyC/dW -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:04 2025 by rpki-client