$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: oj8ixtezkKUlzFQ7VwEnkg+rkAxJxDJ9iQQVPatJZTk= Subject key identifier: 6F:33:0A:78:69:93:57:41:07:02:21:91:7B:19:DA:69:A6:5C:70:96 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0FF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0FCA Signing time: Tue 04 Nov 2025 17:35:14 +0000 Manifest this update: Tue 04 Nov 2025 17:35:14 +0000 Manifest next update: Tue 11 Nov 2025 17:35:14 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: lukauNsq/5n1QqGRZ5o4TrnLk2BvknAeuz9jN9da6ZY=) 2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=) 4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=) 5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=) 6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4083 (0xff3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Nov 4 17:35:14 2025 GMT Not After : Nov 11 17:35:14 2025 GMT Subject: CN=690a3952-7314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:66:46:bf:ae:45:54:50:8e:60:a2:58:6a: bd:a0:f3:e5:d9:af:d3:59:10:19:a0:03:59:e5:c9: 90:5c:da:bf:6b:17:ea:f3:c1:4d:9c:d2:7d:be:f6: bb:e6:cb:a5:eb:9e:7f:e1:84:51:8c:7f:0d:b7:b2: ed:cf:7c:23:a6:4f:ac:8c:9e:a0:80:3f:d1:c9:61: 0f:64:36:d8:59:a4:23:b5:9c:53:f4:8a:71:45:e4: b3:a2:0b:94:80:09:ab:55:70:24:80:18:67:51:94: c9:c4:7b:d8:ff:d3:68:41:d1:f1:97:b6:83:ab:70: 4a:2a:b7:b1:46:82:98:79:9e:97:e9:7b:ec:83:e0: b2:27:3f:e3:43:15:2b:ee:96:8c:44:52:7b:a4:64: 22:bd:4f:c4:8a:16:92:43:c0:5d:5b:57:6d:19:84: 94:80:85:5c:a2:5a:79:ae:5d:c9:72:f8:65:8f:52: f6:9c:bf:47:00:18:48:a5:e9:f7:09:d6:85:a8:c8: 8e:67:78:9e:77:ea:e4:1c:be:b9:2c:41:71:ba:03: 54:e8:f1:87:f2:f6:e4:2c:80:9a:0e:23:f1:0b:05: e0:ee:5b:98:0a:7d:d4:67:2c:b8:d7:03:00:a9:c5: cc:1f:1e:50:8e:2b:21:a6:df:de:f5:22:eb:1d:0a: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:33:0A:78:69:93:57:41:07:02:21:91:7B:19:DA:69:A6:5C:70:96 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b8:db:c4:3a:d6:f7:72:14:2b:89:2f:47:9b:e7:9e:88:bb: 39:9b:2f:f1:69:b5:19:69:3b:1e:c8:4c:77:9a:45:5b:37:97: ae:4e:4c:0e:0e:2b:3c:3c:38:13:4e:91:d4:5a:77:e6:0b:85: ca:f8:00:04:0a:d2:0f:51:0e:52:5c:92:a8:0f:01:f3:b1:49: 8e:57:58:57:47:f4:dc:60:a0:a1:d4:a2:59:6f:b6:5f:da:d2: f0:d1:6f:60:ab:e3:bb:f4:df:11:fb:2e:e5:8c:e4:38:a5:85: e8:fb:3f:5f:6a:33:98:00:be:5b:25:2e:01:08:a2:4d:42:3d: 4a:15:47:27:10:e2:31:04:fa:91:43:a6:27:84:c5:8d:d4:31: 5c:a9:af:c8:f1:b2:9b:7b:87:0b:58:24:04:23:a1:34:c0:ad: 64:bd:ee:0f:25:ab:35:8b:21:b9:22:07:61:db:1d:58:eb:3c: 66:0e:15:18:e8:de:59:de:7a:bb:1c:bd:8f:41:d4:87:50:ab: 92:4d:f4:29:27:9c:50:b3:30:a7:93:cc:1c:6a:6f:5e:52:01: 71:ad:b3:b5:6f:bf:f2:22:e2:e1:0a:69:37:8c:57:21:3d:3c: ba:da:f6:93:b0:79:f8:07:52:c2:8b:cb:fe:97:20:af:3d:78: 30:09:57:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUxMTA0MTczNTE0WhcNMjUxMTExMTczNTE0WjAYMRYwFAYD VQQDEw02OTBhMzk1Mi03MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngNmRr+uRVRQjmCiWGq9oPPl2a/TWRAZoANZ5cmQXNq/axfq88FNnNJ9vva7 5sul655/4YRRjH8Nt7Ltz3wjpk+sjJ6ggD/RyWEPZDbYWaQjtZxT9IpxReSzoguU gAmrVXAkgBhnUZTJxHvY/9NoQdHxl7aDq3BKKrexRoKYeZ6X6Xvsg+CyJz/jQxUr 7paMRFJ7pGQivU/EihaSQ8BdW1dtGYSUgIVcolp5rl3Jcvhlj1L2nL9HABhIpen3 CdaFqMiOZ3ied+rkHL65LEFxugNU6PGH8vbkLICaDiPxCwXg7luYCn3UZyy41wMA qcXMHx5Qjishpt/e9SLrHQrzoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8zCnhp k1dBBwIhkXsZ2mmmXHCWMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBruNvEOtb3chQriS9Hm+eeiLs5my/xabUZaTseyEx3mkVbN5euTkwO Dis8PDgTTpHUWnfmC4XK+AAECtIPUQ5SXJKoDwHzsUmOV1hXR/TcYKCh1KJZb7Zf 2tLw0W9gq+O79N8R+y7ljOQ4pYXo+z9fajOYAL5bJS4BCKJNQj1KFUcnEOIxBPqR Q6YnhMWN1DFcqa/I8bKbe4cLWCQEI6E0wK1kve4PJas1iyG5Igdh2x1Y6zxmDhUY 6N5Z3nq7HL2PQdSHUKuSTfQpJ5xQszCnk8wcam9eUgFxrbO1b7/yIuLhCmk3jFch PTy62vaTsHn4B1LCi8v+lyCvPXgwCVcY -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:17 2025 by rpki-client