$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: z94HoVNniqA9Hd2i00rKEBNJMi6nKw/uK7VpJtYnPjc= Subject key identifier: 9D:75:87:0E:70:80:CC:45:DF:85:32:44:1C:EE:DB:13:A0:44:59:C6 Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 04EC Signing time: Wed 05 Nov 2025 00:11:52 +0000 Manifest this update: Wed 05 Nov 2025 00:11:52 +0000 Manifest next update: Wed 12 Nov 2025 00:11:51 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: DPKPphNom9Qecw2Bru4i5vKdJcFFcXl66DU8hShL1SY=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Nov 5 00:11:52 2025 GMT Not After : Nov 12 00:11:51 2025 GMT Subject: CN=690a9648-f7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:8b:a3:70:03:00:5b:8a:74:c7:65:33:c8: f3:70:a7:e0:75:74:96:0b:5f:ac:66:37:1d:4b:fd: 9f:b9:b1:2d:91:a7:a4:19:61:15:08:d5:a3:28:d1: d0:00:2d:22:b3:22:7b:69:25:b7:bf:4d:91:1c:a1: 73:ce:72:c9:8d:59:43:57:80:61:89:31:eb:cf:33: e3:b8:ff:0f:eb:cb:9e:57:3e:29:ab:b6:dd:8c:01: 0c:1a:c3:92:02:9c:0e:61:04:e4:bd:aa:ff:7f:79: eb:9f:a8:85:32:f9:73:84:9b:af:38:76:9c:36:41: a0:9e:57:37:e2:4a:ee:56:0c:87:8c:26:f4:ea:f3: f5:ce:46:43:5f:43:09:c2:76:68:b4:7b:a3:72:b7: 50:5c:9e:f4:16:28:e4:08:b6:c2:35:14:0c:18:5b: c1:cc:4d:9f:bd:c7:4b:5a:26:f8:f4:ec:92:a1:d1: cc:78:d8:81:b2:e6:51:56:4a:1b:a3:b3:aa:83:67: ad:f2:ba:62:02:33:2e:6f:25:63:d8:96:1c:53:0b: 17:c3:64:f0:e0:34:92:18:0e:9a:4a:ce:90:b6:e3: 9d:bb:07:42:71:34:bf:8e:95:24:67:22:78:fc:94: cc:75:8b:e9:61:6f:ba:0b:ab:62:9a:c0:f2:dd:73: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:87:0E:70:80:CC:45:DF:85:32:44:1C:EE:DB:13:A0:44:59:C6 X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:51:7b:63:2b:31:09:f7:bc:42:09:9c:91:22:da:7c:02:a6: 2a:0d:1c:c7:c8:3b:df:9f:55:fe:12:e8:ea:7a:c2:b0:c0:ee: da:73:b9:e5:69:0c:2b:69:94:68:06:3a:f3:2a:7d:58:72:cc: 0e:24:13:24:3b:ba:f6:92:e7:99:e6:b6:f1:b2:3f:e1:82:93: 81:93:b4:84:6e:6a:d6:62:af:aa:40:87:6d:eb:19:61:e2:4f: 8e:66:5c:a0:f7:40:57:b1:8c:f1:75:7e:fb:54:66:e0:c8:7b: 01:c2:8a:f1:09:90:3b:5d:16:b5:e6:09:41:0a:15:98:e5:d9: 7a:0b:67:47:62:a6:c3:49:62:92:2a:06:1e:9f:0e:75:14:fd: 10:ea:51:02:67:7c:fa:19:5b:b3:ea:58:65:c0:d5:21:43:ae: 02:70:c0:26:47:47:3e:ea:8e:af:5e:c3:25:9a:0d:78:29:9b: 33:94:9f:33:19:67:09:98:ee:2b:96:bc:7b:34:e9:eb:a4:e5: 3c:d9:d6:ce:6e:8c:78:58:aa:81:20:88:3c:62:78:ea:44:ea: 24:a7:50:52:85:85:ff:ab:0a:07:06:50:e6:54:66:38:4a:3b: 4b:07:a3:62:84:1a:12:ef:cc:bd:71:9d:55:f6:4f:c7:38:f5: 91:e0:81:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTExMDUwMDExNTJaFw0yNTExMTIwMDExNTFaMBgxFjAUBgNV BAMTDTY5MGE5NjQ4LWY3ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUIIujcAMAW4p0x2UzyPNwp+B1dJYLX6xmNx1L/Z+5sS2Rp6QZYRUI1aMo0dAA LSKzIntpJbe/TZEcoXPOcsmNWUNXgGGJMevPM+O4/w/ry55XPimrtt2MAQwaw5IC nA5hBOS9qv9/eeufqIUy+XOEm684dpw2QaCeVzfiSu5WDIeMJvTq8/XORkNfQwnC dmi0e6Nyt1BcnvQWKOQItsI1FAwYW8HMTZ+9x0taJvj07JKh0cx42IGy5lFWShuj s6qDZ63yumICMy5vJWPYlhxTCxfDZPDgNJIYDppKzpC24527B0JxNL+OlSRnInj8 lMx1i+lhb7oLq2KawPLdcz3fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnXWHDnCA zEXfhTJEHO7bE6BEWcYwHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlRe2MrMQn3vEIJnJEi2nwCpioNHMfIO9+fVf4S6Op6wrDA7tpzueVp DCtplGgGOvMqfVhyzA4kEyQ7uvaS55nmtvGyP+GCk4GTtIRuatZir6pAh23rGWHi T45mXKD3QFexjPF1fvtUZuDIewHCivEJkDtdFrXmCUEKFZjl2XoLZ0dipsNJYpIq Bh6fDnUU/RDqUQJnfPoZW7PqWGXA1SFDrgJwwCZHRz7qjq9ewyWaDXgpmzOUnzMZ ZwmY7iuWvHs06euk5TzZ1s5ujHhYqoEgiDxieOpE6iSnUFKFhf+rCgcGUOZUZjhK O0sHo2KEGhLvzL1xnVX2T8c49ZHggYo= -----END CERTIFICATE-----Generated at Wed Nov 5 15:16:45 2025 by rpki-client