$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json) Hash identifier: 7r9raVlHlZzclDoFzaPBaJ7a9h4q5M+5L3NCUKPMN68= Subject key identifier: E3:2A:DC:A9:B7:4E:3A:1B:5C:E7:ED:54:B3:62:C3:26:10:F3:99:60 Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft Manifest number: B6 Signing time: Mon 03 Nov 2025 06:02:15 +0000 Manifest this update: Mon 03 Nov 2025 06:02:14 +0000 Manifest next update: Mon 10 Nov 2025 06:02:14 +0000 Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: PSZmVERlURO6D7MtABcepMYBY6NdRG+1hMvLqL7/WQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Validity Not Before: Nov 3 06:02:14 2025 GMT Not After : Nov 10 06:02:14 2025 GMT Subject: CN=69084567-1779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:1f:91:2d:f9:21:64:8e:98:6b:84:49:d6: e8:90:79:a8:3b:2c:25:c3:5a:74:a4:53:37:b3:0e: d0:83:8a:bc:14:70:c0:45:af:70:1b:a0:5d:16:db: 58:6f:91:29:c4:b8:9f:71:bd:69:b1:c8:22:06:39: 0f:38:f6:9e:24:d8:7e:a0:7f:ee:5a:52:d8:0f:ff: 41:ad:f2:b6:d7:5e:cb:f0:c2:64:fb:ef:df:4c:61: 16:93:9f:6d:36:5c:10:03:f2:f0:aa:a8:cc:5a:39: ac:ab:a8:01:7c:8c:94:b8:0c:a9:a7:ed:92:71:0e: a2:81:00:21:4b:a6:38:a9:2b:dd:26:19:75:c2:11: 40:d7:0f:62:93:56:ce:0e:76:4a:28:02:de:3d:43: ce:52:3e:69:a4:f9:07:e7:3d:36:a7:be:31:bf:37: 01:ee:06:e8:37:24:b1:0e:c5:e0:9d:be:28:eb:0e: 31:00:d4:01:a4:c7:0b:0e:85:df:97:12:4b:6f:73: 77:ae:ee:87:74:7c:af:aa:57:c1:e6:a3:66:5f:f3: fd:2e:45:d9:85:1f:51:63:85:76:88:9d:77:09:b9: ba:62:e5:29:2b:9d:ec:a4:0c:e6:7c:50:c1:1e:39: 7c:e3:2a:87:78:8d:f7:79:f1:21:78:b7:6a:86:22: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:DC:A9:B7:4E:3A:1B:5C:E7:ED:54:B3:62:C3:26:10:F3:99:60 X509v3 Authority Key Identifier: keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:91:7b:ad:7d:64:81:d2:d1:30:ff:09:0c:49:e9:a1:a0: 9c:3c:62:93:ea:f1:2b:47:a2:07:ea:bc:ff:7d:ac:7d:93:83: 71:92:91:9a:34:2b:89:29:c3:c4:1b:a2:2c:04:f7:e3:d8:a7: 9f:73:18:5e:7c:d9:6a:ce:4b:1a:bf:97:59:04:71:68:d7:82: 83:ab:7e:3b:f2:7c:eb:8b:43:be:2c:92:b9:53:24:74:81:77: f0:0b:4a:ed:8e:48:ac:70:f2:1e:92:b8:59:f3:a5:6d:ee:45: 30:b4:50:06:39:b9:c6:cc:98:48:8b:16:7e:df:da:31:38:a6: db:b5:dc:0f:ed:2a:81:25:bb:2a:74:78:62:b3:75:cf:85:c0: 3a:a4:b9:ae:9c:cf:17:7f:8c:6c:b7:73:13:fd:ab:2b:98:f7: 5b:a9:ae:0d:7f:6c:46:7c:f2:89:51:71:38:6d:47:36:fc:3f: 0c:ff:4b:00:1f:e6:71:fe:53:a0:a2:44:dc:04:91:5d:9c:bd: 82:af:a1:de:aa:9b:ae:48:28:61:79:b0:5c:c2:f1:7e:08:7c: 3d:49:ba:d3:1e:16:d0:3a:33:5b:bf:3a:a2:d9:d2:e0:6c:4b: 34:7f:33:61:58:89:47:57:2a:9c:5c:1f:58:ad:6c:90:73:21: 59:4c:43:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzMjkxMTAvBgNVBAUTKDM2Q0FBOUE0NzNBOUVBNzM4MjlGNzM1NjgwOUJDMTYx MDNBRDAzQUUwHhcNMjUxMTAzMDYwMjE0WhcNMjUxMTEwMDYwMjE0WjAYMRYwFAYD VQQDEw02OTA4NDU2Ny0xNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMwfkS35IWSOmGuESdbokHmoOywlw1p0pFM3sw7Qg4q8FHDARa9wG6BdFttY b5EpxLifcb1pscgiBjkPOPaeJNh+oH/uWlLYD/9BrfK2117L8MJk++/fTGEWk59t NlwQA/LwqqjMWjmsq6gBfIyUuAypp+2ScQ6igQAhS6Y4qSvdJhl1whFA1w9ik1bO DnZKKALePUPOUj5ppPkH5z02p74xvzcB7gboNySxDsXgnb4o6w4xANQBpMcLDoXf lxJLb3N3ru6HdHyvqlfB5qNmX/P9LkXZhR9RY4V2iJ13Cbm6YuUpK53spAzmfFDB Hjl84yqHeI33efEheLdqhiLr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMq3Km3 TjobXOftVLNiwyYQ85lgMB8GA1UdIwQYMBaAFDbKqaRzqepzgp9zVoCbwWEDrQOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjMyOS9EMDg2RDU1RUEy NjgxMUVGOUQ5MTQxMThDNEY5QUUwMi9Oc3FwcEhPcDZuT0NuM05XZ0p2QllRT3RB NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zcXBwSE9wNm5PQ24zTldnSnZCWVFPdEE2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjMyOS9EMDg2RDU1RUEyNjgxMUVGOUQ5MTQxMThDNEY5QUUwMi9Oc3FwcEhPcDZu T0NuM05XZ0p2QllRT3RBNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXz5F7rX1kgdLRMP8JDEnpoaCcPGKT6vErR6IH6rz/fax9k4NxkpGa NCuJKcPEG6IsBPfj2KefcxhefNlqzksav5dZBHFo14KDq3478nzri0O+LJK5UyR0 gXfwC0rtjkiscPIekrhZ86Vt7kUwtFAGObnGzJhIixZ+39oxOKbbtdwP7SqBJbsq dHhis3XPhcA6pLmunM8Xf4xst3MT/asrmPdbqa4Nf2xGfPKJUXE4bUc2/D8M/0sA H+Zx/lOgokTcBJFdnL2Cr6HeqpuuSChhebBcwvF+CHw9SbrTHhbQOjNbvzqi2dLg bEs0fzNhWIlHVyqcXB9YrWyQcyFZTEOm -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:58 2025 by rpki-client