$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: Pc11W10FXBL+2qHm0awXPaxYQE8SeVzalDufrjPqXJg= Subject key identifier: 7D:6F:36:C9:27:C9:53:04:2F:70:8F:EC:49:4C:58:41:BE:E7:DD:BB Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0179 Signing time: Wed 05 Nov 2025 03:54:55 +0000 Manifest this update: Wed 05 Nov 2025 03:54:54 +0000 Manifest next update: Wed 12 Nov 2025 03:54:54 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: raHaJ777JeGlUBc43nIFURiqGZ2vlH8i1RFzosRHrQI=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: OCKBcCjdkySUCtOriC+2k74TemAnMuuorEBugP8GmLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Nov 5 03:54:54 2025 GMT Not After : Nov 12 03:54:54 2025 GMT Subject: CN=690aca8e-dbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:61:25:e4:70:c2:2b:4f:92:0b:7b:77:7e: a8:e9:d9:bf:11:ba:ed:90:13:68:ef:1d:f5:50:f1: fd:bd:91:df:73:0c:f9:3f:d1:31:a0:d2:15:54:db: 4d:3b:5b:1b:ad:eb:6c:37:b2:8f:3a:b0:d0:20:9c: a9:2f:ab:34:83:05:35:93:4e:e6:f7:32:a7:bf:2d: 88:fa:e8:77:91:d5:d6:01:1b:63:a7:c9:31:dc:1d: 2b:ae:29:4f:57:00:87:da:68:32:66:9b:a7:f3:00: 58:bc:42:6c:c1:6d:37:48:37:72:ce:34:a6:bd:25: 6f:72:0a:7e:ca:72:0a:3d:bd:82:8a:0d:b8:62:e4: ca:4b:2f:3f:b5:f8:e0:86:16:24:7b:e4:7c:ad:b4: cc:9f:7a:e1:1a:f5:bc:ee:79:16:29:8a:30:98:6b: ae:26:4f:6e:34:2f:c9:d7:d0:78:c5:3b:40:c7:e0: eb:9e:df:7c:cf:1c:37:9a:22:f9:b4:34:f9:7d:a8: b5:74:02:87:98:dd:fc:25:26:e8:c4:2f:d1:a5:61: 7b:b9:39:83:14:e3:db:bc:af:df:46:52:a9:39:71: 24:51:f9:d6:d1:f8:fd:8f:0a:32:0d:d4:c8:26:8c: a5:31:6c:ca:c9:cb:3c:ed:2a:89:60:f0:08:10:28: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6F:36:C9:27:C9:53:04:2F:70:8F:EC:49:4C:58:41:BE:E7:DD:BB X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0a:49:4e:ed:a3:ff:40:9f:e4:f2:10:ba:51:63:90:c1:91: bf:bf:94:38:94:d6:9f:d7:0e:a0:c5:b7:bd:fe:e6:d6:77:ca: 53:12:65:cd:01:c6:dc:fa:96:4b:de:78:d9:78:dc:b6:1a:7c: fd:5d:4e:db:a4:67:5f:cb:fe:5f:05:ec:e3:27:a4:fd:b3:61: d6:66:95:63:d8:53:68:a1:41:05:a8:bf:40:4a:22:19:98:80: 4b:55:ad:a0:bb:5d:3c:34:72:d0:c9:ef:2a:d2:e0:ff:98:6f: 40:c9:f9:75:7f:9c:21:85:db:4e:2f:5c:00:39:1a:ca:b7:5d: f5:93:99:ac:2e:b5:4c:42:d9:db:c0:8f:9a:36:ba:c0:2c:38: 22:73:0c:db:f8:6c:67:09:dc:d8:55:08:65:27:ff:1f:d7:ce: c9:10:48:81:aa:8c:11:f5:40:9d:2c:42:12:78:70:06:3e:37: 14:44:4a:9c:0f:e7:c5:11:15:0c:e4:22:3f:fd:5c:16:3b:7f: ff:61:0d:40:54:e6:e9:6a:ca:f7:4d:59:e7:4f:d6:da:d7:f1: 96:38:49:1e:41:fa:55:98:5c:f0:88:5d:3e:f0:7a:6e:27:3a: 83:82:e4:ce:05:01:4b:00:17:e3:51:b1:c3:06:3d:7f:44:89: a6:ce:7a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUxMTA1MDM1NDU0WhcNMjUxMTEyMDM1NDU0WjAYMRYwFAYD VQQDEw02OTBhY2E4ZS1kYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCFhJeRwwitPkgt7d36o6dm/EbrtkBNo7x31UPH9vZHfcwz5P9ExoNIVVNtN O1sbretsN7KPOrDQIJypL6s0gwU1k07m9zKnvy2I+uh3kdXWARtjp8kx3B0rrilP VwCH2mgyZpun8wBYvEJswW03SDdyzjSmvSVvcgp+ynIKPb2Cig24YuTKSy8/tfjg hhYke+R8rbTMn3rhGvW87nkWKYowmGuuJk9uNC/J19B4xTtAx+Drnt98zxw3miL5 tDT5fai1dAKHmN38JSboxC/RpWF7uTmDFOPbvK/fRlKpOXEkUfnW0fj9jwoyDdTI JoylMWzKycs87SqJYPAIECjqkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1vNskn yVMEL3CP7ElMWEG+5927MB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMCklO7aP/QJ/k8hC6UWOQwZG/v5Q4lNaf1w6gxbe9/ubWd8pTEmXN Acbc+pZL3njZeNy2Gnz9XU7bpGdfy/5fBezjJ6T9s2HWZpVj2FNooUEFqL9ASiIZ mIBLVa2gu108NHLQye8q0uD/mG9Ayfl1f5whhdtOL1wAORrKt131k5msLrVMQtnb wI+aNrrALDgicwzb+GxnCdzYVQhlJ/8f187JEEiBqowR9UCdLEISeHAGPjcUREqc D+fFERUM5CI//VwWO3//YQ1AVObpasr3TVnnT9ba1/GWOEkeQfpVmFzwiF0+8Hpu JzqDguTOBQFLABfjUbHDBj1/RImmznqp -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:29 2025 by rpki-client