$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: dZUSU4IFitTa/ofQvg9WwPzY0gE0C55Z4jQeibxifQE= Subject key identifier: F7:47:38:8D:91:0F:B8:F3:1F:E2:CB:DE:64:80:3E:B0:E8:7B:DE:32 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C6C Signing time: Tue 04 Nov 2025 18:52:06 +0000 Manifest this update: Tue 04 Nov 2025 18:52:05 +0000 Manifest next update: Tue 11 Nov 2025 18:52:05 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: vvtI8JN/9caADc/YQiC5Bv6n5Way6Xr8nGLxnO6hxJM=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Nov 4 18:52:05 2025 GMT Not After : Nov 11 18:52:05 2025 GMT Subject: CN=690a4b56-8b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:7b:21:8c:a3:30:f3:f5:6d:1e:e9:62:0a: c7:f9:8f:bc:34:c6:86:40:be:91:33:d8:c3:aa:3f: a8:f5:a7:4a:7d:9a:c3:b5:f3:42:67:5c:79:19:65: e0:a2:23:11:66:86:f1:38:82:b6:f3:33:97:70:5a: c0:48:b4:d9:38:a1:9f:a1:2b:77:9a:6f:bd:20:d6: 07:3c:a5:56:aa:12:70:da:ed:aa:cb:cf:ed:5a:ec: e0:72:ae:91:70:84:7c:4f:10:29:96:e2:be:8f:49: dc:4e:eb:b3:64:8e:fa:e1:94:ff:61:c0:18:49:cf: e2:04:a5:55:c2:7a:e2:13:4a:3f:8f:fc:70:d1:99: 37:6b:95:d8:37:a6:27:0b:c1:b4:67:3e:79:8b:ab: d6:56:3b:5b:5e:14:0d:09:26:18:d7:ba:24:83:de: 78:d5:c5:c7:2c:7d:c6:71:35:30:e8:d5:f9:03:3a: 8a:a6:21:80:c4:e8:a6:ab:0a:c8:97:f3:33:9a:ba: d3:19:16:f6:b6:49:aa:6c:bb:01:2d:f5:8b:76:ab: 9e:27:96:a5:9b:f7:a6:f2:dd:2f:4d:8c:b1:60:6f: b9:d9:2d:ee:d0:73:f7:76:11:b8:30:a6:6c:4b:5b: 25:1e:bd:a9:8d:1b:f5:07:12:44:85:b1:b3:b1:0e: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:47:38:8D:91:0F:B8:F3:1F:E2:CB:DE:64:80:3E:B0:E8:7B:DE:32 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ee:9f:2e:fd:41:45:82:bd:cc:4f:2b:db:bb:89:7e:5d:a2: c9:18:a0:fa:f4:80:6f:59:23:76:e4:ff:8e:ff:63:3d:a1:21: 3c:45:cf:f1:d5:a1:08:a4:2d:06:e4:f2:85:ea:45:51:09:a3: a1:db:64:ec:9d:9d:47:c5:9a:3c:22:71:cc:c7:94:90:52:90: 04:fe:bc:95:81:5b:9e:75:08:7f:8f:f0:22:0b:84:cf:32:74: 61:9a:0d:ca:e5:bd:66:fe:93:f5:bc:5f:73:e4:77:11:93:f5: 33:ef:44:f2:5d:9c:46:9a:74:fc:d8:4c:d4:c1:61:08:92:31: 5a:6e:0a:5b:03:ea:40:7c:9d:f7:73:b0:9a:af:7c:f0:69:45: 8c:8c:9b:a4:43:7b:51:91:ab:f3:a0:92:4c:b1:49:5d:fe:fb: b2:78:90:50:06:3a:f4:a2:5a:33:47:e0:bf:ad:f1:1f:7d:98: 28:e5:07:c9:71:1e:5f:0d:eb:45:6f:02:60:a0:59:51:fd:c2: a7:a7:67:38:50:d7:56:cb:9d:c8:51:7b:66:dc:ea:8f:d9:fa: 85:5c:31:a6:f3:c6:63:46:2a:b2:8f:af:83:d9:51:b3:a2:45: 7b:ee:38:7f:5c:c0:8e:51:1f:64:e6:4b:25:3a:0f:5b:a2:24: 0e:b9:ad:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUxMTA0MTg1MjA1WhcNMjUxMTExMTg1MjA1WjAYMRYwFAYD VQQDEw02OTBhNGI1Ni04YjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3N7IYyjMPP1bR7pYgrH+Y+8NMaGQL6RM9jDqj+o9adKfZrDtfNCZ1x5GWXg oiMRZobxOIK28zOXcFrASLTZOKGfoSt3mm+9INYHPKVWqhJw2u2qy8/tWuzgcq6R cIR8TxApluK+j0ncTuuzZI764ZT/YcAYSc/iBKVVwnriE0o/j/xw0Zk3a5XYN6Yn C8G0Zz55i6vWVjtbXhQNCSYY17okg9541cXHLH3GcTUw6NX5AzqKpiGAxOimqwrI l/MzmrrTGRb2tkmqbLsBLfWLdqueJ5alm/em8t0vTYyxYG+52S3u0HP3dhG4MKZs S1slHr2pjRv1BxJEhbGzsQ6YfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdHOI2R D7jzH+LL3mSAPrDoe94yMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo7p8u/UFFgr3MTyvbu4l+XaLJGKD69IBvWSN25P+O/2M9oSE8Rc/x 1aEIpC0G5PKF6kVRCaOh22TsnZ1HxZo8InHMx5SQUpAE/ryVgVuedQh/j/AiC4TP MnRhmg3K5b1m/pP1vF9z5HcRk/Uz70TyXZxGmnT82EzUwWEIkjFabgpbA+pAfJ33 c7Car3zwaUWMjJukQ3tRkavzoJJMsUld/vuyeJBQBjr0olozR+C/rfEffZgo5QfJ cR5fDetFbwJgoFlR/cKnp2c4UNdWy53IUXtm3OqP2fqFXDGm88ZjRiqyj6+D2VGz okV77jh/XMCOUR9k5kslOg9boiQOua26 -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:18 2025 by rpki-client