$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: f0u5HfgzQgPDy0WzDeAgHgwTxwWbpHwj9z/f/2ho17A= Subject key identifier: E8:6B:03:40:D4:2A:CF:4F:4E:39:20:D1:5F:FF:4A:76:B0:4D:19:03 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 115A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 10EE Signing time: Tue 04 Nov 2025 17:23:05 +0000 Manifest this update: Tue 04 Nov 2025 17:23:05 +0000 Manifest next update: Tue 11 Nov 2025 17:23:05 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: big00JqE+4UH6aIw2Y97nwQ37qntEkhNKFekFxb7Vag=) 2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: R1CUbIu0V+HE4f06nI4AoF8weg5+WJaRb7OLoB74u3o=) 3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: JSG6xv2uqNAgwOpDXcHQxv8WbhIpG22unWVbGkO466o=) 4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 6mj2ePigEKlPzc3f7+eTQsUuSCZHP+3UsHzZtRH/e3g=) 5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: AQJjv8c1H+P8QI0s3FB/4mPX+TV6GerHGXja71yYLBo=) 6: 52685F222E9111E999636910C4F9AE02.roa (hash: tnJuonmKS/V0uoywfbn8ky35GlWjycjl3empqFomJY8=) 7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: fajAFqylWikP3Jikl5nRrG0DTxFJf4fODLkvijKh8uw=) 8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: /vrezSo6RJ5dq1cFDK2anelkL8dBqwcaNrTPSxP8eN8=) 9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: aDxTmBiu7r/Tn9jcjNLK8UcWaXq5NN3ow+MDjn+I+ck=) 10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: MmpvHOBJX6/TYN9r3lrc9Z7dr+vQVfQyHD+RNXiHs1I=) 11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: S5sgxNBi0p+O5VGwcCA6mYFpVmBWw6J0mLdcaJC7l/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4442 (0x115a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Nov 4 17:23:05 2025 GMT Not After : Nov 11 17:23:05 2025 GMT Subject: CN=690a3679-ac0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:73:87:eb:83:f1:75:51:33:3f:d5:9d:47: 7b:2c:b6:33:2d:ef:94:db:a4:90:e4:a6:e0:64:a1: ac:56:f0:e8:aa:22:bb:10:d9:ac:a2:db:6b:df:22: 9a:5a:f0:80:45:c8:7e:e2:ff:1a:ec:88:62:7f:78: 35:22:69:a1:aa:6b:1a:cc:ca:9c:d8:99:32:7a:3a: ec:6e:07:b8:e4:53:03:a8:48:10:e7:f5:1d:6d:11: d7:76:cc:01:89:90:f5:98:60:bc:3f:11:e3:a3:ae: 1c:cc:3d:cd:6d:31:9e:98:25:4d:51:ae:7c:42:f6: 9a:c8:10:62:d8:40:b4:0a:9e:af:bb:e1:52:17:0c: 66:86:55:a4:2e:48:f6:97:a8:8f:b3:28:c2:be:37: c7:ca:f4:ce:1e:df:6a:92:0d:20:be:27:53:79:df: c4:36:91:5c:96:06:4b:38:2c:3a:59:13:21:50:f4: 5f:3b:17:5a:83:03:05:a5:ad:87:80:e0:26:dc:54: fe:65:f4:29:bd:c9:13:88:f3:f0:c2:15:a5:3e:70: 66:dc:74:ba:f2:e3:38:28:df:e1:ab:8d:d5:fb:0d: 59:fa:43:d3:a5:0f:03:10:ae:b1:69:4e:17:84:55: 9c:0b:93:f0:c4:3f:49:42:0e:70:9b:ab:8a:1d:ec: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6B:03:40:D4:2A:CF:4F:4E:39:20:D1:5F:FF:4A:76:B0:4D:19:03 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6f:48:63:43:a7:81:e8:c5:52:f0:73:20:5a:57:a9:93:18: 7d:82:58:ab:da:c5:91:fe:e1:c6:c4:41:21:3a:7a:cb:38:90: e7:3a:e3:50:bc:7b:ad:30:9b:33:16:68:8c:de:7c:eb:bf:36: 5d:2a:d1:9d:0a:60:c1:98:72:0c:c3:6b:87:3d:3b:a9:1b:c6: fc:82:59:4d:31:82:87:2c:d8:4e:36:03:09:e1:9d:d2:23:26: dd:d2:c8:e5:c7:b3:8d:12:77:31:b2:fe:89:cd:50:ed:3b:ef: ff:60:4f:37:b5:b5:af:38:96:df:1b:dc:71:9a:b3:df:51:e6: 25:f1:1e:c2:18:60:4d:17:b3:cd:11:d5:60:44:d6:3d:1e:7a: 92:93:ac:38:7e:88:93:f6:9e:bc:50:08:58:de:01:7e:e4:07: 89:2a:e9:57:f0:67:1d:de:41:4b:f5:6f:20:a7:41:8e:b5:3b: a2:80:d8:24:51:64:d3:f4:2e:c2:0c:16:35:cf:13:64:34:03: 58:34:37:af:42:ef:09:39:b9:29:e2:bf:90:f1:df:39:12:eb: 76:0b:4e:d9:01:33:3f:cc:ff:63:b9:fd:8b:3e:73:f7:f7:d8: 5a:ae:79:92:77:4e:5e:a9:f9:c3:3a:d2:83:63:cb:bd:8a:25: 4c:78:d7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjUxMTA0MTcyMzA1WhcNMjUxMTExMTcyMzA1WjAYMRYwFAYD VQQDEw02OTBhMzY3OS1hYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Zzh+uD8XVRMz/VnUd7LLYzLe+U26SQ5KbgZKGsVvDoqiK7ENmsottr3yKa WvCARch+4v8a7Ihif3g1ImmhqmsazMqc2Jkyejrsbge45FMDqEgQ5/UdbRHXdswB iZD1mGC8PxHjo64czD3NbTGemCVNUa58QvaayBBi2EC0Cp6vu+FSFwxmhlWkLkj2 l6iPsyjCvjfHyvTOHt9qkg0gvidTed/ENpFclgZLOCw6WRMhUPRfOxdagwMFpa2H gOAm3FT+ZfQpvckTiPPwwhWlPnBm3HS68uM4KN/hq43V+w1Z+kPTpQ8DEK6xaU4X hFWcC5PwxD9JQg5wm6uKHewChwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhrA0DU Ks9PTjkg0V//SnawTRkDMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDb0hjQ6eB6MVS8HMgWlepkxh9glir2sWR/uHGxEEhOnrLOJDnOuNQ vHutMJszFmiM3nzrvzZdKtGdCmDBmHIMw2uHPTupG8b8gllNMYKHLNhONgMJ4Z3S Iybd0sjlx7ONEncxsv6JzVDtO+//YE83tbWvOJbfG9xxmrPfUeYl8R7CGGBNF7PN EdVgRNY9HnqSk6w4foiT9p68UAhY3gF+5AeJKulX8Gcd3kFL9W8gp0GOtTuigNgk UWTT9C7CDBY1zxNkNANYNDevQu8JObkp4r+Q8d85Eut2C07ZATM/zP9juf2LPnP3 99harnmSd05eqfnDOtKDY8u9iiVMeNfo -----END CERTIFICATE-----Generated at Wed Nov 5 18:38:29 2025 by rpki-client