$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: pae3eqfLcHEkXrhm/5O5UWJhWtUfQ42oROPrV5hh6DU= Subject key identifier: A0:6E:73:11:97:F2:0B:0C:69:26:B1:D7:AE:66:BB:56:FA:82:36:EF Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 05DB Signing time: Sun 02 Nov 2025 22:59:38 +0000 Manifest this update: Sun 02 Nov 2025 22:59:38 +0000 Manifest next update: Sun 09 Nov 2025 22:59:38 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: 1WpaBj4Kx8txdtReGm8gzn9j0Wxc5S1a3D5xz0W29S0=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 91y/zfPKe4toYeLlym6g8YBWRWa9in1N6/DuRedfMc4=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: OIkPyY1gexI0QB7Mc75F4AkfEDtSi4kbvtIlfRRk1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Nov 2 22:59:38 2025 GMT Not After : Nov 9 22:59:38 2025 GMT Subject: CN=6907e25a-b2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:04:81:84:c5:0f:35:27:1e:35:9c:96:8c: 51:6b:32:bd:54:2e:c7:c3:60:65:0d:92:90:d5:dd: 49:97:99:46:30:20:d7:55:dc:a3:c4:75:9a:df:b0: b7:ac:08:11:fd:0a:c3:06:0d:2f:a1:37:e9:b6:37: bb:87:e7:e6:4d:eb:c7:0c:50:3d:34:ba:6a:e2:c5: 1d:26:5c:d8:72:c6:50:f2:03:e0:55:d6:13:db:05: e3:b1:12:35:0d:fe:6b:7b:7e:db:e7:2b:1f:42:ac: b9:98:3b:85:72:43:7b:e3:fc:d3:f1:49:ab:d9:df: d5:42:6e:8b:89:dd:76:16:43:4e:dc:91:d7:80:21: 80:8a:59:b5:12:1d:f2:ec:45:ff:eb:54:81:2b:0a: 7b:0c:78:9e:37:39:04:2a:1c:26:70:c3:e0:1c:6d: 45:50:46:86:b9:2f:d0:5e:0e:8d:73:35:ae:63:52: 69:b9:f6:ae:50:07:b3:d1:69:bb:35:d6:fb:f4:51: db:f6:9b:7d:59:35:b6:c3:81:f1:ed:b1:42:53:69: 7a:ec:f5:37:dc:ed:e6:2d:d3:b8:df:ad:12:4f:d8: df:3c:0b:43:d9:ec:67:ed:ea:9d:be:69:0c:78:d7: 3e:55:4c:bb:05:ca:b6:57:8c:6d:fd:89:4a:d0:40: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6E:73:11:97:F2:0B:0C:69:26:B1:D7:AE:66:BB:56:FA:82:36:EF X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:11:90:38:48:d2:43:cf:0d:f8:4f:82:de:4e:8f:e6:7c:8d: 76:e7:d0:71:59:5a:8e:c9:f5:a3:eb:da:fe:68:76:b0:82:3d: 5c:f8:95:47:4a:be:27:7e:e4:9e:59:6b:f8:b9:ff:07:0a:70: 66:8d:93:ac:27:95:9f:f8:66:e1:8b:bc:c0:ad:db:10:a9:82: a1:e5:39:0d:85:2a:c0:96:13:81:25:eb:cc:53:7b:3f:d0:bf: 5c:97:2c:ee:3f:f9:5b:11:ee:bd:b6:37:bc:f1:b4:e4:f3:be: 8d:88:a4:92:53:61:8c:57:a6:85:a9:d7:0f:55:ae:96:a9:6e: 4d:38:3a:16:69:75:90:b9:48:69:f4:c2:cb:7c:ba:91:94:66: b5:b8:9c:5f:cd:58:30:a7:ee:4f:cf:08:75:7d:a4:ef:93:0b: 0f:5f:f8:d3:96:2c:b3:5a:44:fc:4c:5d:f8:59:bd:e5:bb:fb: 3f:b1:00:98:95:25:f7:0f:6d:21:11:b2:c0:6b:4a:cb:4b:1f: 28:4a:4c:f3:99:ea:8b:69:e0:36:77:f5:66:8f:15:11:cc:5f: 71:2b:c9:62:f4:a6:03:53:a8:75:91:ad:93:e6:3b:87:66:cb: 26:93:2d:0c:09:9e:1b:f1:f2:49:12:ab:9d:37:1f:15:3a:ca: 1f:d7:b7:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUxMTAyMjI1OTM4WhcNMjUxMTA5MjI1OTM4WjAYMRYwFAYD VQQDEw02OTA3ZTI1YS1iMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDcEgYTFDzUnHjWcloxRazK9VC7Hw2BlDZKQ1d1Jl5lGMCDXVdyjxHWa37C3 rAgR/QrDBg0voTfptje7h+fmTevHDFA9NLpq4sUdJlzYcsZQ8gPgVdYT2wXjsRI1 Df5re37b5ysfQqy5mDuFckN74/zT8Umr2d/VQm6Lid12FkNO3JHXgCGAilm1Eh3y 7EX/61SBKwp7DHieNzkEKhwmcMPgHG1FUEaGuS/QXg6NczWuY1JpufauUAez0Wm7 Ndb79FHb9pt9WTW2w4Hx7bFCU2l67PU33O3mLdO4360ST9jfPAtD2exn7eqdvmkM eNc+VUy7Bcq2V4xt/YlK0EBysQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBucxGX 8gsMaSax165mu1b6gjbvMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+EZA4SNJDzw34T4LeTo/mfI1259BxWVqOyfWj69r+aHawgj1c+JVH Sr4nfuSeWWv4uf8HCnBmjZOsJ5Wf+Gbhi7zArdsQqYKh5TkNhSrAlhOBJevMU3s/ 0L9clyzuP/lbEe69tje88bTk876NiKSSU2GMV6aFqdcPVa6WqW5NODoWaXWQuUhp 9MLLfLqRlGa1uJxfzVgwp+5Pzwh1faTvkwsPX/jTliyzWkT8TF34Wb3lu/s/sQCY lSX3D20hEbLAa0rLSx8oSkzzmeqLaeA2d/VmjxURzF9xK8li9KYDU6h1ka2T5juH Zssmky0MCZ4b8fJJEqudNx8VOsof17cw -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:04 2025 by rpki-client