$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json) Hash identifier: W5fuLRwSqBdQ3JymE2cKX1NNCjfAth5htsk0qCeHP5o= Subject key identifier: A7:88:5F:5A:5F:01:06:65:C4:22:75:AF:87:DF:B1:C0:E0:D5:2E:31 Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft Manifest number: 0CF8 Signing time: Tue 04 Nov 2025 18:17:15 +0000 Manifest this update: Tue 04 Nov 2025 18:17:14 +0000 Manifest next update: Tue 11 Nov 2025 18:17:14 +0000 Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: jmEQ64IGaTYtTUewu6llNmisyTb2khBH1EP2kOTmCSA=) 2: 13D5D992979E11F08E996475C4F9AE02.roa (hash: uqXdul36EDPRkEmn7F3Pi5w/fW3yUykVpbjNAjajNRk=) 3: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: jBmeI5y0SVJB4aMWbKmtmiFdyrbiBVSMzrKP/rJrmhI=) 4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Nov 4 18:17:14 2025 GMT Not After : Nov 11 18:17:14 2025 GMT Subject: CN=690a432a-d5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:34:97:c9:bc:12:92:73:60:27:b9:dc:d1:b8: f9:18:09:28:81:e5:4d:83:f7:58:ce:8c:64:4e:df: 6d:73:34:a7:3e:70:44:f5:89:fa:f5:6a:85:d5:a7: 91:b3:a3:a6:83:64:bb:a0:a1:19:05:c0:ad:cf:45: ee:f6:f8:32:f7:e6:89:aa:cf:a9:38:77:76:79:e2: 78:1d:23:3d:87:fc:9e:c4:79:2c:3b:51:b1:d3:e4: 29:72:7e:71:69:a4:97:91:f6:66:3a:ec:58:b2:74: 5f:a2:c7:0e:34:6c:c8:99:b4:34:3f:5b:e2:44:4f: b7:21:07:1f:51:db:5c:6a:bf:b3:d7:e9:96:60:8a: 45:3a:57:ba:56:9f:36:6d:df:fe:f7:de:aa:c8:9c: 7f:96:6a:ab:ee:ca:01:13:64:d7:d8:63:cb:a5:f0: 27:a4:12:b6:7e:9a:23:86:fc:fc:1d:5d:4c:40:96: e3:06:46:60:6a:b9:35:2f:bb:47:80:d3:32:d9:47: b5:ec:0f:ce:2c:ab:64:d7:e0:bb:ed:b3:77:a9:38: 80:64:f3:2c:41:8d:d1:06:89:42:06:b3:ec:16:5e: 43:8b:e0:cf:0f:ee:bf:7d:80:43:1b:54:1b:96:f2: 0f:9c:76:9f:21:92:1d:3c:14:dd:3e:68:58:1d:77: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:88:5F:5A:5F:01:06:65:C4:22:75:AF:87:DF:B1:C0:E0:D5:2E:31 X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7b:da:3c:de:29:e2:b4:de:e0:4d:3d:32:88:05:81:12:71: 3b:0f:7f:aa:32:b1:45:47:c0:f7:07:c0:61:67:4d:97:b1:fa: 34:84:3b:70:89:de:97:9d:5b:04:66:53:1b:22:c2:f2:f6:e9: d9:a7:d8:1b:bf:28:57:9c:cf:bd:f1:f0:c0:b4:01:e1:2b:06: bc:23:f7:e8:a5:50:09:8d:67:b4:cf:55:3b:23:4d:5b:22:1a: 27:51:7f:2a:59:02:5d:07:05:92:15:5a:f8:b8:3f:56:42:de: aa:a7:3b:e5:dc:f1:b0:9d:89:c6:b8:8e:79:07:01:c0:41:15: 13:55:f2:e5:2a:af:85:5c:29:f5:b7:7d:97:05:57:7a:a4:5f: 2a:13:de:64:22:e3:42:a7:9f:40:da:a7:9e:2b:bd:0e:be:76: 20:96:7d:4d:29:3b:99:be:f1:46:b8:4e:4f:d4:cf:97:57:d8: 68:d7:5b:3b:bb:f6:a3:d3:9e:96:47:97:bd:be:3c:f8:ef:1a: ef:7c:d0:fe:c0:99:bf:9e:eb:69:ea:70:40:d3:62:8f:e9:30: d8:e7:56:b0:58:be:50:4e:fd:53:51:20:f6:ba:40:19:15:d4: 40:6b:8c:42:2b:8a:f3:a7:5a:44:a6:02:39:3a:d7:ec:42:16: e4:0a:01:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUxMTA0MTgxNzE0WhcNMjUxMTExMTgxNzE0WjAYMRYwFAYD VQQDEw02OTBhNDMyYS1kNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jSXybwSknNgJ7nc0bj5GAkogeVNg/dYzoxkTt9tczSnPnBE9Yn69WqF1aeR s6Omg2S7oKEZBcCtz0Xu9vgy9+aJqs+pOHd2eeJ4HSM9h/yexHksO1Gx0+Qpcn5x aaSXkfZmOuxYsnRfoscONGzImbQ0P1viRE+3IQcfUdtcar+z1+mWYIpFOle6Vp82 bd/+996qyJx/lmqr7soBE2TX2GPLpfAnpBK2fpojhvz8HV1MQJbjBkZgark1L7tH gNMy2Ue17A/OLKtk1+C77bN3qTiAZPMsQY3RBolCBrPsFl5Di+DPD+6/fYBDG1Qb lvIPnHafIZIdPBTdPmhYHXc6rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeIX1pf AQZlxCJ1r4ffscDg1S4xMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm XzRnVmx3QTNZOEc2SktIZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAle9o83initN7gTT0yiAWBEnE7D3+qMrFFR8D3B8BhZ02Xsfo0hDtw id6XnVsEZlMbIsLy9unZp9gbvyhXnM+98fDAtAHhKwa8I/fopVAJjWe0z1U7I01b IhonUX8qWQJdBwWSFVr4uD9WQt6qpzvl3PGwnYnGuI55BwHAQRUTVfLlKq+FXCn1 t32XBVd6pF8qE95kIuNCp59A2qeeK70OvnYgln1NKTuZvvFGuE5P1M+XV9ho11s7 u/aj056WR5e9vjz47xrvfND+wJm/nutp6nBA02KP6TDY51awWL5QTv1TUSD2ukAZ FdRAa4xCK4rzp1pEpgI5OtfsQhbkCgFC -----END CERTIFICATE-----Generated at Wed Nov 5 15:51:21 2025 by rpki-client