$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: ki9Oe+8nGxO9f6hdDHRuFvVkX8X4NAw2EIGj/6PyFSE= Subject key identifier: B3:6C:1E:7C:8A:47:98:0C:D4:DE:D7:64:E8:77:C9:D5:F0:7B:A8:72 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 037D Signing time: Mon 03 Nov 2025 00:47:01 +0000 Manifest this update: Mon 03 Nov 2025 00:47:00 +0000 Manifest next update: Mon 10 Nov 2025 00:47:00 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: H7CDdbZ8YSlnZtGLd5Tm178Yw0H4c1SzlbP2+QReqrU=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Nov 3 00:47:00 2025 GMT Not After : Nov 10 00:47:00 2025 GMT Subject: CN=6907fb85-b81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:9e:b9:5a:8f:b0:47:b3:9d:45:b5:bc:97: 33:49:f7:82:77:c2:0e:fd:7a:08:92:8f:10:62:4c: b7:9b:1f:6d:12:f8:0d:32:e1:8b:77:22:92:b6:9b: 87:8d:c8:75:91:9e:41:9a:8e:fb:c1:6c:ea:3c:1e: 71:4f:9a:b3:5a:ac:9e:fd:2c:4c:58:e2:69:a8:86: 52:32:f5:2e:2c:ea:f7:b5:47:27:30:e7:c1:a0:1a: ef:66:29:49:9a:e8:04:49:3b:6f:ae:4e:6e:b6:1d: 92:8b:d1:ff:8f:65:ca:70:eb:ee:9e:af:b1:31:f7: 0e:19:ec:67:ae:cb:50:24:6b:75:1c:58:3b:47:ff: c8:e7:4f:5c:c2:f2:98:40:75:fb:ed:67:d7:73:78: e8:a2:92:48:3f:85:23:ec:5b:06:be:ad:9d:06:fb: ca:29:9c:b3:10:fc:c7:0a:c5:08:55:11:c5:aa:8f: d6:bb:01:bd:85:e5:c1:9e:4e:55:f9:5e:eb:eb:9e: 26:3a:6b:82:f7:89:18:64:a4:af:44:f0:dd:2e:93: 0d:42:94:e2:ef:81:94:e2:14:a0:bc:d1:94:e5:be: 97:67:71:36:52:ce:3c:2d:97:cc:31:1c:ef:06:2b: 18:3a:fd:3c:28:e9:9c:08:49:43:00:48:da:d6:70: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6C:1E:7C:8A:47:98:0C:D4:DE:D7:64:E8:77:C9:D5:F0:7B:A8:72 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:56:d1:15:51:36:67:78:52:88:68:c5:09:84:e0:a3:21:e4: b3:9c:e1:8b:b5:24:1e:23:41:ee:77:a7:ed:8b:05:33:64:b5: 08:9e:8a:d5:de:d0:8e:e4:1b:7b:f3:f8:db:a8:ea:9b:c2:eb: fd:3d:3c:c8:60:32:6e:4d:a3:1f:c7:4e:ab:67:0e:3c:7b:22: f7:31:5e:fd:e4:4a:2a:76:05:27:2a:c8:25:31:25:2a:36:cf: d7:7d:d5:42:00:9b:dc:a2:a7:94:d2:19:b4:07:e8:ff:26:40: d6:64:8e:7e:eb:b8:8f:00:84:15:0d:e5:7e:79:3d:d5:13:0e: 06:87:d5:77:46:59:5b:45:b8:f8:c9:ba:de:cd:bd:2a:0c:c5: 82:cf:d9:69:59:c1:d3:e9:c0:ad:29:60:71:be:a8:10:b5:e8: 36:c8:05:a8:55:16:59:be:9c:72:3c:b5:df:ff:fa:7c:a2:31: c0:44:94:a4:07:40:5f:91:ab:41:9c:4c:be:b1:52:d2:d1:34: ee:6c:43:7c:5a:f1:bf:df:26:00:26:e9:f9:b5:fb:88:92:52: be:aa:0c:29:07:18:72:d6:01:bc:26:a2:8b:5a:99:b5:e5:fb: c9:be:b3:04:98:fe:f2:51:54:ce:a0:a2:08:10:a4:54:84:57: 7c:4f:8b:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUxMTAzMDA0NzAwWhcNMjUxMTEwMDA0NzAwWjAYMRYwFAYD VQQDEw02OTA3ZmI4NS1iODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1qeuVqPsEeznUW1vJczSfeCd8IO/XoIko8QYky3mx9tEvgNMuGLdyKStpuH jch1kZ5Bmo77wWzqPB5xT5qzWqye/SxMWOJpqIZSMvUuLOr3tUcnMOfBoBrvZilJ mugESTtvrk5uth2Si9H/j2XKcOvunq+xMfcOGexnrstQJGt1HFg7R//I509cwvKY QHX77WfXc3joopJIP4Uj7FsGvq2dBvvKKZyzEPzHCsUIVRHFqo/WuwG9heXBnk5V +V7r654mOmuC94kYZKSvRPDdLpMNQpTi74GU4hSgvNGU5b6XZ3E2Us48LZfMMRzv BisYOv08KOmcCElDAEja1nBPvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNsHnyK R5gM1N7XZOh3ydXwe6hyMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsVtEVUTZneFKIaMUJhOCjIeSznOGLtSQeI0Hud6ftiwUzZLUInorV 3tCO5Bt78/jbqOqbwuv9PTzIYDJuTaMfx06rZw48eyL3MV795EoqdgUnKsglMSUq Ns/XfdVCAJvcoqeU0hm0B+j/JkDWZI5+67iPAIQVDeV+eT3VEw4Gh9V3RllbRbj4 ybrezb0qDMWCz9lpWcHT6cCtKWBxvqgQteg2yAWoVRZZvpxyPLXf//p8ojHARJSk B0BfkatBnEy+sVLS0TTubEN8WvG/3yYAJun5tfuIklK+qgwpBxhy1gG8JqKLWpm1 5fvJvrMEmP7yUVTOoKIIEKRUhFd8T4ul -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:04 2025 by rpki-client