$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: E3q3TFeP2vR5TtZnFx5k4Cpjc0QXYzWVpI29cUtdwuQ= Subject key identifier: 5A:BA:AE:72:F3:4C:5B:D7:7D:C5:A0:F8:80:89:90:79:67:52:28:11 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 0164 Signing time: Wed 05 Nov 2025 04:10:15 +0000 Manifest this update: Wed 05 Nov 2025 04:10:14 +0000 Manifest next update: Wed 12 Nov 2025 04:10:14 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: 7lljmoEngjTjUnOi1LG65PwZ7HsisBEVU7Sfm4Z2fvY=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Nov 5 04:10:14 2025 GMT Not After : Nov 12 04:10:14 2025 GMT Subject: CN=690ace27-e9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:5e:f4:f0:f7:d0:a0:19:b4:e5:15:ad:fc: fd:ee:46:a5:3c:c6:29:4e:7a:e7:a5:f4:53:59:9d: 10:b1:95:44:34:d2:10:04:d8:5b:66:4b:d4:95:1c: 58:14:8e:b5:af:b3:0d:20:80:e1:7e:24:98:be:0d: 22:38:a8:79:b0:c3:8f:f8:d7:63:fc:8c:86:55:d6: 1c:f4:cc:51:33:c6:fe:1f:72:d8:63:38:91:2b:08: 54:52:93:43:20:3c:67:08:b3:96:d5:0e:b0:b4:cc: 7c:20:f6:0b:a3:a2:72:ae:21:a6:18:e7:bb:1a:32: 6f:94:c1:50:07:fd:9d:b0:fd:2f:53:35:b5:c7:2e: b3:7c:ea:1f:92:3b:77:35:6d:8d:ab:4f:8c:75:bf: 71:b5:7a:2a:50:cb:71:7e:ba:41:26:b6:a3:d0:a7: 3f:1a:43:53:a6:9e:15:a7:30:18:8a:08:0d:92:98: db:de:5b:db:cd:27:b7:f2:f0:1b:2f:d4:d4:c2:c9: c3:be:a0:f5:8c:d1:d8:8b:31:95:f4:af:29:11:2b: fc:f4:1c:3e:ac:36:6e:0c:ee:9e:61:cf:0b:38:dc: c7:d2:a5:01:48:3d:a1:5d:4c:dd:b2:a6:43:a6:05: 3a:99:01:a4:25:86:c0:99:89:93:f0:fb:0c:9e:1a: cb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:AE:72:F3:4C:5B:D7:7D:C5:A0:F8:80:89:90:79:67:52:28:11 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:25:33:bf:d6:52:c6:07:d5:f1:85:ba:5c:03:90:04:f6:68: b0:b2:05:5e:50:a9:3a:27:99:8c:91:ce:c8:bc:55:45:2d:1d: 0d:be:e6:fc:9d:ab:82:8a:ff:ea:a6:74:42:f5:6f:76:c6:99: c3:a5:16:86:e7:8d:ba:0d:3f:d9:94:f6:f8:a5:92:36:4e:1a: d0:0c:fe:fe:22:d3:77:f4:f9:00:65:90:7b:bd:fc:e9:34:f2: b6:42:9b:d3:b3:fd:f6:7d:16:1f:61:88:1b:f5:9e:71:63:6c: 5f:62:f2:44:42:e8:04:93:39:47:c1:6f:8d:ab:a9:88:91:bc: d4:07:a1:36:85:a7:f1:32:b7:4d:ed:89:a0:0e:69:68:6a:2b: 6d:45:88:29:8b:b5:0b:88:70:1a:66:5d:23:48:a6:7b:0a:09: bd:73:9b:02:8e:2a:c6:8c:a4:c0:4a:1c:42:a8:8d:f8:b5:e1: ab:c3:e6:6b:ad:87:3a:69:f3:31:12:08:b7:19:5e:79:b9:4a: 4a:36:4f:cc:9a:f1:1f:22:e4:63:70:9b:46:6b:23:dc:c7:ff: 23:6d:7a:bb:92:79:67:ca:04:f0:e3:39:43:fc:5e:6c:cd:ae: 7d:49:f0:bf:6a:b8:36:b9:6c:16:92:49:b0:23:2b:cc:a7:9f: ad:4c:1a:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjUxMTA1MDQxMDE0WhcNMjUxMTEyMDQxMDE0WjAYMRYwFAYD VQQDEw02OTBhY2UyNy1lOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuNe9PD30KAZtOUVrfz97kalPMYpTnrnpfRTWZ0QsZVENNIQBNhbZkvUlRxY FI61r7MNIIDhfiSYvg0iOKh5sMOP+Ndj/IyGVdYc9MxRM8b+H3LYYziRKwhUUpND IDxnCLOW1Q6wtMx8IPYLo6JyriGmGOe7GjJvlMFQB/2dsP0vUzW1xy6zfOofkjt3 NW2Nq0+Mdb9xtXoqUMtxfrpBJraj0Kc/GkNTpp4VpzAYiggNkpjb3lvbzSe38vAb L9TUwsnDvqD1jNHYizGV9K8pESv89Bw+rDZuDO6eYc8LONzH0qUBSD2hXUzdsqZD pgU6mQGkJYbAmYmT8PsMnhrLfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq6rnLz TFvXfcWg+ICJkHlnUigRMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUJTO/1lLGB9XxhbpcA5AE9miwsgVeUKk6J5mMkc7IvFVFLR0Nvub8 nauCiv/qpnRC9W92xpnDpRaG5426DT/ZlPb4pZI2ThrQDP7+ItN39PkAZZB7vfzp NPK2QpvTs/32fRYfYYgb9Z5xY2xfYvJEQugEkzlHwW+Nq6mIkbzUB6E2hafxMrdN 7YmgDmloaittRYgpi7ULiHAaZl0jSKZ7Cgm9c5sCjirGjKTAShxCqI34teGrw+Zr rYc6afMxEgi3GV55uUpKNk/MmvEfIuRjcJtGayPcx/8jbXq7knlnygTw4zlD/F5s za59SfC/arg2uWwWkkmwIyvMp5+tTBqk -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:34 2025 by rpki-client