$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft File: m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json) Hash identifier: zokOCBIdywgvzxievV6SbGon2iKLa8JpiAWLAapWU30= Subject key identifier: 6B:FA:15:0B:14:4E:D7:DB:C5:F3:FC:B0:C5:28:29:9E:83:59:EC:75 Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 Certificate issuer: /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft Manifest number: 45 Signing time: Wed 05 Nov 2025 07:34:47 +0000 Manifest this update: Wed 05 Nov 2025 07:34:46 +0000 Manifest next update: Wed 12 Nov 2025 07:34:46 +0000 Files and hashes: 1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: pi/KvfDE+vyQlfonklHNOJ4nHeLnxsbakep2DzcqSVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Validity Not Before: Nov 5 07:34:46 2025 GMT Not After : Nov 12 07:34:46 2025 GMT Subject: CN=690afe17-cef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:93:32:5b:47:3e:6d:b6:94:12:0c:45:e1: a5:79:b8:ef:4f:07:58:e1:67:da:81:8a:30:ee:17: 10:e8:46:c2:0b:6d:86:d9:00:4e:82:dd:5d:9f:9d: 80:66:54:03:11:38:fb:27:09:73:56:fe:52:ab:9f: fe:ef:fe:67:2d:22:bd:13:3f:7f:54:80:69:c7:e2: ea:17:4a:18:48:0d:70:1c:03:7f:53:c8:b0:c2:08: 7d:26:b5:59:98:7c:59:0a:6d:5f:9c:2f:70:05:4f: c1:7e:47:ba:54:fc:d1:da:81:3c:56:48:e4:50:e5: 0d:33:db:ba:94:85:ee:d1:95:46:c0:12:b3:35:88: ec:91:2a:2d:d3:01:c4:dc:ad:8e:09:d6:15:33:10: e3:2c:06:36:65:62:fb:dd:c4:92:fd:ab:47:e4:78: 80:0e:21:9c:47:94:62:11:72:ac:33:ed:25:dd:40: 56:a2:13:e9:40:9d:10:63:26:1d:65:14:f4:89:46: 39:3b:42:4e:72:8d:e7:86:10:8f:0b:66:32:85:75: ce:64:3a:5a:18:13:9d:c3:40:09:5b:89:05:42:61: 33:c3:e4:a7:6d:e2:d7:68:c4:db:62:f3:88:d8:e0: ee:a0:fe:ef:02:57:6f:c4:2d:b1:fd:63:8d:db:82: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FA:15:0B:14:4E:D7:DB:C5:F3:FC:B0:C5:28:29:9E:83:59:EC:75 X509v3 Authority Key Identifier: keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d5:1f:7a:0f:78:9e:2e:e1:7e:69:9b:c3:71:67:ae:97:64: 85:89:6d:f3:39:7e:84:14:06:b1:4a:34:a1:d7:71:b2:5c:8a: 8c:23:8e:9d:df:b3:4c:4c:f3:5f:b8:46:f3:a7:02:8e:bd:f3: 5f:a5:2f:0f:b9:31:8e:69:5b:b8:e6:83:24:62:ed:88:ab:1c: 32:81:3c:51:14:da:60:23:a3:09:92:15:57:6e:ef:f9:cc:04: 07:0b:d6:09:2c:0d:9f:bf:11:4f:cc:0e:30:0c:e3:61:77:d6: a5:bd:c6:9e:d3:e9:57:b9:75:1b:a7:f2:ca:19:07:61:8d:e0: d2:d5:55:6d:c7:59:79:16:be:7a:17:a5:d6:d0:72:ba:a9:8c: ba:40:1d:a6:5b:55:03:1a:af:bd:d1:58:03:5c:1f:73:b5:d3: 2f:ff:74:c1:12:2f:82:e5:ee:6c:d2:65:d8:89:f6:24:ee:d1: 65:82:a7:58:fd:81:81:58:8d:e8:76:47:06:3d:f8:1c:91:03: bf:6c:05:bb:f4:1d:6e:93:9e:dd:31:dd:4d:4f:c8:4e:6b:e3: ce:98:03:9d:dd:da:ce:3b:28:80:e9:88:1c:05:e5:8a:38:d1: 00:ef:ad:51:dc:0a:5a:5a:20:06:d3:ec:d1:a8:1a:cf:4a:e7: 7e:aa:1d:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUI0RkNEMUVEMDZBMUU0QkExQzRCRTlGMUQxMEIyOTQ1 RTkyOEMxOTAeFw0yNTExMDUwNzM0NDZaFw0yNTExMTIwNzM0NDZaMBgxFjAUBgNV BAMTDTY5MGFmZTE3LWNlZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf2JMyW0c+bbaUEgxF4aV5uO9PB1jhZ9qBijDuFxDoRsILbYbZAE6C3V2fnYBm VAMROPsnCXNW/lKrn/7v/mctIr0TP39UgGnH4uoXShhIDXAcA39TyLDCCH0mtVmY fFkKbV+cL3AFT8F+R7pU/NHagTxWSORQ5Q0z27qUhe7RlUbAErM1iOyRKi3TAcTc rY4J1hUzEOMsBjZlYvvdxJL9q0fkeIAOIZxHlGIRcqwz7SXdQFaiE+lAnRBjJh1l FPSJRjk7Qk5yjeeGEI8LZjKFdc5kOloYE53DQAlbiQVCYTPD5Kdt4tdoxNti84jY 4O6g/u8CV2/ELbH9Y43bglBZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa/oVCxRO 19vF8/ywxSgpnoNZ7HUwHwYDVR0jBBgwFoAUm0/NHtBqHkuhxL6fHRCylF6SjBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0VGMTdDM0Q2NTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1aHhMNmZIUkN5bEY2U2pC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTBfTkh0QnFIa3VoeEw2ZkhSQ3lsRjZTakJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0VGMTdDM0Q2NTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1 aHhMNmZIUkN5bEY2U2pCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHVH3oPeJ4u4X5pm8NxZ66XZIWJbfM5foQUBrFKNKHXcbJciowjjp3f s0xM81+4RvOnAo6981+lLw+5MY5pW7jmgyRi7YirHDKBPFEU2mAjowmSFVdu7/nM BAcL1gksDZ+/EU/MDjAM42F31qW9xp7T6Ve5dRun8soZB2GN4NLVVW3HWXkWvnoX pdbQcrqpjLpAHaZbVQMar73RWANcH3O10y//dMESL4Ll7mzSZdiJ9iTu0WWCp1j9 gYFYjeh2RwY9+ByRA79sBbv0HW6Tnt0x3U1PyE5r486YA53d2s47KIDpiBwF5Yo4 0QDvrVHcClpaIAbT7NGoGs9K536qHbk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:58:28 2025 by rpki-client