$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: 3zBxxaGNtvOcliSZ4kKN45+w4zcg+0sDau2QUm9lj24= Subject key identifier: 09:46:AA:C7:44:D2:AF:7F:40:3A:22:E6:6B:46:3E:6B:22:D5:01:82 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1E3D Signing time: Tue 04 Nov 2025 16:10:45 +0000 Manifest this update: Tue 04 Nov 2025 16:10:45 +0000 Manifest next update: Tue 11 Nov 2025 16:10:45 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: JHwj5F5jyQCkEe+Dnx/XCPf/jVj6Js+rkr4LB0BnMfY=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7756 (0x1e4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Nov 4 16:10:45 2025 GMT Not After : Nov 11 16:10:45 2025 GMT Subject: CN=690a2585-0875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:d6:77:ee:ed:ec:cc:5b:11:e2:85:38:a9: b9:29:b9:2c:2e:53:4e:6a:bc:98:af:f2:ae:a1:bd: 59:23:1c:7e:1f:8d:5b:b6:24:a1:5b:08:e9:ed:95: c7:45:bc:c5:82:76:dc:bd:af:74:af:f3:67:2f:61: 98:76:5a:2c:ca:44:b7:36:08:95:0c:e9:10:30:66: 53:90:32:82:c6:71:86:a7:dc:17:52:b8:ce:0f:23: c2:0a:bf:15:bf:88:21:ac:61:76:d2:89:ac:48:7b: 5e:a8:10:1d:72:64:7a:cf:6f:54:11:2e:cf:ba:8a: df:57:31:34:24:e7:4d:fb:82:ff:ec:e6:ea:a9:ba: f8:76:48:24:c7:51:ac:59:2e:09:78:c9:bf:8d:f1: f1:5c:79:0d:91:4f:62:32:2f:80:8a:9f:a6:f8:d6: 33:78:22:78:15:ef:c6:0a:24:9f:89:e2:63:e4:c5: 10:c4:c3:7f:47:b2:ce:77:d2:c6:ee:87:98:6e:da: e8:46:a5:0f:7d:6e:06:4f:14:6b:c6:3c:cd:d0:1b: 6a:3d:8f:dc:e6:fa:73:f8:1f:08:7b:f4:81:4f:08: 36:50:34:ed:b4:54:46:a0:cf:be:c8:1e:08:54:ec: 46:0d:f9:96:6d:1a:c6:1e:10:48:70:2a:ec:d7:0b: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:AA:C7:44:D2:AF:7F:40:3A:22:E6:6B:46:3E:6B:22:D5:01:82 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a0:e3:51:9d:8e:3a:f9:32:10:a7:ec:df:7e:35:ee:2b:83: f6:22:9d:67:dd:77:7d:27:d6:a7:e5:41:5e:c0:f3:11:76:f6: 4d:2f:95:18:bf:17:24:25:b2:59:19:a5:33:24:61:ae:88:0d: 72:79:be:f1:df:e2:57:14:73:1c:0e:64:42:6b:7c:85:62:92: 73:f7:a4:91:66:bc:be:f0:55:fa:c6:6d:82:21:09:ba:9d:88: bd:fd:15:75:5c:0d:db:f1:ae:50:89:59:97:70:d5:3a:2e:8a: 9f:15:d2:71:54:a9:47:3f:73:d6:e3:e1:45:cb:7b:1b:da:38: 24:c6:3c:46:56:fe:19:de:dd:ec:f7:0c:78:e2:16:74:b2:67: 29:15:ce:ca:39:7c:13:a3:f3:eb:a3:ea:09:28:55:ce:86:7b: 3f:73:3d:15:b1:3e:ce:28:b4:e0:11:d0:dc:3b:f0:f7:d5:9b: ab:83:9f:5d:50:1b:54:89:27:4b:ed:12:69:1c:e3:a9:74:3d: 59:00:1f:41:75:3c:e3:09:a9:ae:be:5c:a8:17:6f:61:03:e0: 30:25:6b:56:61:08:79:44:7c:5b:a4:48:1c:a1:30:24:1e:a9: de:e9:da:93:e0:97:8b:ef:64:9a:54:8b:87:5c:2b:63:da:b2: 1b:fa:b9:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUxMTA0MTYxMDQ1WhcNMjUxMTExMTYxMDQ1WjAYMRYwFAYD VQQDEw02OTBhMjU4NS0wODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPvWd+7t7MxbEeKFOKm5KbksLlNOaryYr/Kuob1ZIxx+H41btiShWwjp7ZXH RbzFgnbcva90r/NnL2GYdlosykS3NgiVDOkQMGZTkDKCxnGGp9wXUrjODyPCCr8V v4ghrGF20omsSHteqBAdcmR6z29UES7PuorfVzE0JOdN+4L/7Obqqbr4dkgkx1Gs WS4JeMm/jfHxXHkNkU9iMi+Aip+m+NYzeCJ4Fe/GCiSfieJj5MUQxMN/R7LOd9LG 7oeYbtroRqUPfW4GTxRrxjzN0BtqPY/c5vpz+B8Ie/SBTwg2UDTttFRGoM++yB4I VOxGDfmWbRrGHhBIcCrs1wskXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlGqsdE 0q9/QDoi5mtGPmsi1QGCMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZoONRnY46+TIQp+zffjXuK4P2Ip1n3Xd9J9an5UFewPMRdvZNL5UY vxckJbJZGaUzJGGuiA1yeb7x3+JXFHMcDmRCa3yFYpJz96SRZry+8FX6xm2CIQm6 nYi9/RV1XA3b8a5QiVmXcNU6LoqfFdJxVKlHP3PW4+FFy3sb2jgkxjxGVv4Z3t3s 9wx44hZ0smcpFc7KOXwTo/Pro+oJKFXOhns/cz0VsT7OKLTgEdDcO/D31Zurg59d UBtUiSdL7RJpHOOpdD1ZAB9BdTzjCamuvlyoF29hA+AwJWtWYQh5RHxbpEgcoTAk Hqne6dqT4JeL72SaVIuHXCtj2rIb+rm2 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:32 2025 by rpki-client