$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: q8lqMgRVor2KrrwTiaWY5/DN1iJu43XMEtv5KDjKQi4= Subject key identifier: 77:75:F0:CD:78:E3:66:34:9C:C6:69:A0:4A:C5:D0:EA:70:63:E2:CB Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: AE Signing time: Wed 05 Nov 2025 06:23:39 +0000 Manifest this update: Wed 05 Nov 2025 06:23:38 +0000 Manifest next update: Wed 12 Nov 2025 06:23:38 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: SnR6lb+twbDAVB0CXejrbg9B7IzSE58aL/oIvYuLV04=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Nov 5 06:23:38 2025 GMT Not After : Nov 12 06:23:38 2025 GMT Subject: CN=690aed6b-3a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:1a:2a:c5:5a:c4:9c:93:d2:6a:2f:ae:04: 92:59:c3:c3:39:ba:9b:ce:a7:61:7b:e1:32:c5:de: 60:16:4d:b9:bf:49:3b:83:66:ef:64:91:2e:98:e7: 12:e1:f1:89:34:0a:7f:2e:f7:97:5a:9b:ed:1f:d5: 21:36:5f:72:50:9f:0a:27:9a:dc:36:35:a8:b0:0f: 8e:e8:6a:96:92:b3:d3:a1:e5:75:34:80:b4:2f:09: da:7a:39:e5:d3:94:05:c5:3b:a6:2e:b1:02:4f:51: 63:c8:15:63:09:6a:1c:73:4c:9f:f5:ef:58:51:16: d6:16:fe:91:d7:1d:95:95:35:05:5e:02:62:2f:06: db:36:9f:05:e2:dd:be:96:50:44:02:29:c7:a1:11: 17:53:04:de:c6:aa:66:81:15:9c:d3:b7:b8:50:8f: c9:2d:36:7e:05:c1:9f:2e:d2:53:91:6d:e0:9e:52: ae:93:61:28:91:9a:e6:cb:45:6f:a4:3b:00:0e:4c: 0b:d7:8e:e1:14:9c:68:1b:59:cb:e8:d4:42:91:d0: b9:a8:e0:3c:5c:6b:92:9f:af:7a:21:98:5c:1e:2e: 4d:00:9d:dd:eb:02:5e:61:8c:d9:3f:05:34:eb:a8: 92:32:fb:0c:d0:3f:b3:89:c1:56:46:6e:ae:65:fa: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:75:F0:CD:78:E3:66:34:9C:C6:69:A0:4A:C5:D0:EA:70:63:E2:CB X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:17:3a:3f:82:11:36:9b:cc:7c:58:a8:85:fe:f3:7c:75:fc: a4:da:a0:7c:52:8d:9d:34:e2:e9:9b:41:fd:84:5a:c0:c7:79: 87:0f:52:01:1c:3f:80:b4:6b:75:92:79:82:3b:a4:4e:dd:ab: c7:d4:a0:59:68:d3:f5:33:ec:70:df:29:90:cd:85:b2:dd:ed: 32:ea:f7:a8:ef:ce:1b:27:2a:94:0f:29:49:9c:f4:25:f4:de: f9:bd:93:1b:c5:d8:10:b9:19:b9:8e:44:a1:10:ec:06:a1:b5: 4b:e9:ac:15:a3:7f:a8:e3:5a:bd:37:8a:55:26:e4:96:8c:bd: e2:72:ec:27:da:53:4f:2e:f2:9d:a2:ac:29:84:dd:a2:20:1f: e0:f7:bf:a0:71:ef:7c:30:fa:87:31:68:a9:47:c7:42:5b:be: 5d:c5:94:60:0e:6d:7e:bc:d9:0f:d1:44:d1:9f:b9:5d:3d:f9: d2:00:4b:ec:93:d7:dd:e7:03:7e:8e:48:7c:83:f9:a6:69:a3: 38:c1:c0:40:76:e0:01:5b:84:c0:62:90:ee:93:db:e7:c4:be: 66:0e:eb:2d:b1:4f:3b:34:8f:80:7f:62:b5:66:0f:8f:ac:70: 03:8c:f5:5f:46:44:4e:6e:9a:ef:1f:2a:dc:03:e4:97:aa:1f: d1:2e:d4:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjUxMTA1MDYyMzM4WhcNMjUxMTEyMDYyMzM4WjAYMRYwFAYD VQQDEw02OTBhZWQ2Yi0zYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyoaKsVaxJyT0movrgSSWcPDObqbzqdhe+Eyxd5gFk25v0k7g2bvZJEumOcS 4fGJNAp/LveXWpvtH9UhNl9yUJ8KJ5rcNjWosA+O6GqWkrPToeV1NIC0Lwnaejnl 05QFxTumLrECT1FjyBVjCWocc0yf9e9YURbWFv6R1x2VlTUFXgJiLwbbNp8F4t2+ llBEAinHoREXUwTexqpmgRWc07e4UI/JLTZ+BcGfLtJTkW3gnlKuk2EokZrmy0Vv pDsADkwL147hFJxoG1nL6NRCkdC5qOA8XGuSn696IZhcHi5NAJ3d6wJeYYzZPwU0 66iSMvsM0D+zicFWRm6uZfr9WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHd18M14 42Y0nMZpoErF0OpwY+LLMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAFzo/ghE2m8x8WKiF/vN8dfyk2qB8Uo2dNOLpm0H9hFrAx3mHD1IB HD+AtGt1knmCO6RO3avH1KBZaNP1M+xw3ymQzYWy3e0y6veo784bJyqUDylJnPQl 9N75vZMbxdgQuRm5jkShEOwGobVL6awVo3+o41q9N4pVJuSWjL3icuwn2lNPLvKd oqwphN2iIB/g97+gce98MPqHMWipR8dCW75dxZRgDm1+vNkP0UTRn7ldPfnSAEvs k9fd5wN+jkh8g/mmaaM4wcBAduABW4TAYpDuk9vnxL5mDustsU87NI+Af2K1Zg+P rHADjPVfRkRObprvHyrcA+SXqh/RLtT9 -----END CERTIFICATE-----Generated at Wed Nov 5 20:57:02 2025 by rpki-client