$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: bGXMiVLBryLaMSO4oEIKpehOSgJg+pUYB9DE8kGIdXU= Subject key identifier: 4D:BE:59:46:C8:6F:65:6A:37:0F:5B:B1:87:26:1A:96:1E:90:FA:D4 Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0A4F Signing time: Sun 02 Nov 2025 19:41:25 +0000 Manifest this update: Sun 02 Nov 2025 19:41:25 +0000 Manifest next update: Sun 09 Nov 2025 19:41:25 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: 3sx96MoVFbE+gJsHiq6RRtC+xVVous8vu5OYr6AOVXk=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: MzXzYE5MrqHvRoe17AJmK7I+zMsNRRFLd5oWGTmAVM0=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: 9GaBS9IbS88to+9kkQ6jxibXk5BWsO+3f5H1a6SCfEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Nov 2 19:41:25 2025 GMT Not After : Nov 9 19:41:25 2025 GMT Subject: CN=6907b3e5-170a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:ec:13:7e:55:bc:4f:ae:c9:f9:79:71:92: af:67:38:f3:bc:eb:39:65:79:31:80:0e:e1:59:04: fc:4d:59:f1:50:fa:93:f7:88:3e:4c:50:86:26:e4: 9d:6d:50:ca:d0:ef:78:14:67:a8:fd:41:f4:8c:97: 43:e0:c3:e9:cf:ae:d0:7c:31:a8:82:a0:14:fd:ea: be:5a:c7:43:9d:b0:8d:45:cb:c5:bd:94:f4:73:2a: e2:ce:21:56:64:90:cc:0e:75:97:51:13:9c:9a:59: a8:cf:73:92:57:0c:c3:29:77:ec:c7:01:3d:29:1a: b9:5e:28:0f:8b:8e:2a:c1:2b:bf:f7:a6:db:01:1a: b4:d8:76:8c:d2:ca:f0:88:a3:f7:4e:48:bd:89:1e: 42:28:5a:17:db:0a:44:98:79:dc:65:a0:9f:87:b9: 36:4b:03:c4:d1:da:29:10:3b:7c:c8:cf:1b:f6:2e: 53:b0:4b:db:9e:36:71:05:a6:34:3f:42:0e:43:b4: 39:f6:27:fe:8b:c0:2b:93:22:fa:c0:74:99:18:35: 89:0a:5c:ec:79:22:ac:e9:d3:48:39:b2:05:b2:0c: 2f:f3:47:57:a2:65:66:62:22:4b:d4:c8:16:5c:af: bd:10:f0:df:8e:be:c6:7b:c8:9e:70:93:ec:2b:16: a1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BE:59:46:C8:6F:65:6A:37:0F:5B:B1:87:26:1A:96:1E:90:FA:D4 X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a5:d9:5e:7f:c0:97:c9:37:6a:21:94:ac:1f:e2:6e:62:79: 9f:61:ea:25:02:20:fe:b2:f7:15:5e:0c:88:ec:1a:11:35:4e: 50:d1:ab:4b:3b:59:99:68:e3:9c:0b:2f:bb:a7:23:1f:0b:9a: a6:e4:e5:b6:3c:98:05:21:4a:fd:97:8a:9b:47:91:3d:d4:f6: ef:45:59:92:33:b2:0f:01:6d:8a:67:e0:74:56:86:e4:7d:a3: 24:5b:ae:0b:0e:bc:77:71:4b:c8:0f:ad:83:b6:61:fe:d7:96: 6b:7e:de:36:ed:dd:b3:c8:f4:51:c3:f6:a8:ed:99:41:31:d4: aa:3a:85:00:c3:1f:ef:04:ee:32:e8:dc:a2:cc:b2:9c:85:29: 6a:d6:4e:38:b0:0a:2f:8d:4a:a6:55:f5:f7:9c:19:11:5e:f0: 78:4d:7e:d8:9d:d5:67:f2:b9:51:29:89:bf:d7:34:5f:eb:00: cc:ab:a3:08:6e:ff:7a:68:e2:f7:ad:75:5e:2f:42:eb:23:92: 8a:bd:da:ff:1b:5f:50:74:62:f5:0f:e0:3e:25:be:fe:08:17: cf:9d:cd:a7:4e:31:08:30:96:fa:f9:e3:bd:24:e8:47:56:a3: 6a:84:35:bb:db:88:73:35:64:a9:1d:4b:ac:11:5a:6f:59:3d: 7c:28:2f:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjUxMTAyMTk0MTI1WhcNMjUxMTA5MTk0MTI1WjAYMRYwFAYD VQQDEw02OTA3YjNlNS0xNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4HsE35VvE+uyfl5cZKvZzjzvOs5ZXkxgA7hWQT8TVnxUPqT94g+TFCGJuSd bVDK0O94FGeo/UH0jJdD4MPpz67QfDGogqAU/eq+WsdDnbCNRcvFvZT0cyriziFW ZJDMDnWXUROcmlmoz3OSVwzDKXfsxwE9KRq5XigPi44qwSu/96bbARq02HaM0srw iKP3Tki9iR5CKFoX2wpEmHncZaCfh7k2SwPE0dopEDt8yM8b9i5TsEvbnjZxBaY0 P0IOQ7Q59if+i8ArkyL6wHSZGDWJClzseSKs6dNIObIFsgwv80dXomVmYiJL1MgW XK+9EPDfjr7Ge8iecJPsKxahWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2+WUbI b2VqNw9bsYcmGpYekPrUMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGpdlef8CXyTdqIZSsH+JuYnmfYeolAiD+svcVXgyI7BoRNU5Q0atL O1mZaOOcCy+7pyMfC5qm5OW2PJgFIUr9l4qbR5E91PbvRVmSM7IPAW2KZ+B0Vobk faMkW64LDrx3cUvID62DtmH+15Zrft427d2zyPRRw/ao7ZlBMdSqOoUAwx/vBO4y 6NyizLKchSlq1k44sAovjUqmVfX3nBkRXvB4TX7YndVn8rlRKYm/1zRf6wDMq6MI bv96aOL3rXVeL0LrI5KKvdr/G19QdGL1D+A+Jb7+CBfPnc2nTjEIMJb6+eO9JOhH VqNqhDW724hzNWSpHUusEVpvWT18KC9F -----END CERTIFICATE-----Generated at Tue Nov 4 20:19:39 2025 by rpki-client