$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: vF5pkH6Fo46xAQ6MsIev8cTSl5Phn9eZ7ijSMwCq81w= Subject key identifier: 85:BB:58:6E:EB:6A:A2:F2:F9:5C:A4:6F:B5:EC:DC:6E:23:54:45:AE Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 02CC Signing time: Wed 05 Nov 2025 01:32:52 +0000 Manifest this update: Wed 05 Nov 2025 01:32:51 +0000 Manifest next update: Wed 12 Nov 2025 01:32:51 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: VvFxE1eMduhurebmFmkqo8lUsWszJm3exVV4xJ9CYLU=) 2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: mbByEgB1AFGJL7BjsQzaSgyj1ogxzeMRReV2aZF6lPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Nov 5 01:32:51 2025 GMT Not After : Nov 12 01:32:51 2025 GMT Subject: CN=690aa944-2b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:9f:00:e0:0e:f6:5d:49:88:e9:25:8f:47: 7e:27:3c:7d:d2:ae:c8:6d:69:9c:66:5e:73:44:d4: d7:b5:f2:de:7a:1a:6d:fc:a1:2d:21:97:a8:f9:aa: ba:05:6c:d9:1d:0c:18:87:9d:a5:27:e0:a9:bf:a4: 63:04:0f:d3:a8:1c:a7:66:cb:b0:35:cb:d6:94:6c: 9b:9e:bd:3c:aa:e2:ef:78:a1:9a:f3:f6:4b:f4:a9: ca:93:bb:24:47:ac:60:ba:41:6b:8d:e2:75:b4:ce: 29:bc:94:10:2c:f4:da:d4:0d:a6:1f:b6:f7:d2:5e: c5:bf:a5:94:5a:ce:6f:1e:3d:eb:ad:60:db:a6:16: 90:47:cb:e2:41:c4:26:66:e3:e6:c8:89:9f:c2:b1: a5:97:52:27:1d:df:58:58:a1:d7:37:ca:47:3b:3d: 59:9e:d3:97:1b:d9:75:f8:79:16:0d:a0:f3:b8:9e: 86:3f:09:84:ab:b5:b5:6d:61:37:1f:68:cd:fd:0a: 37:08:d2:a9:27:d1:c7:93:42:b8:a0:19:25:7f:d6: fb:86:fe:6a:c8:c8:c2:42:04:86:a1:71:09:53:45: 16:28:65:4d:ac:9d:0f:23:78:ae:0c:30:96:5e:d0: 79:4d:fb:ca:8f:78:71:48:83:0e:25:d4:7d:f4:30: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BB:58:6E:EB:6A:A2:F2:F9:5C:A4:6F:B5:EC:DC:6E:23:54:45:AE X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:79:96:6a:42:43:51:47:c5:e6:2f:2c:0e:18:7b:c2:d7:e6: 54:6d:b9:7f:8f:a0:a3:f5:7f:9e:c1:05:0e:9a:07:7c:ea:ba: ee:6b:bb:d0:92:f0:71:cd:bd:a1:0b:64:73:b8:52:c7:10:28: 22:e1:83:0a:17:70:41:70:22:80:51:16:8d:28:3f:c9:22:68: 0e:1d:85:97:8b:39:b7:f7:be:61:4a:ac:7f:19:1f:c9:b7:5b: 30:45:9a:a8:fe:0b:11:02:c2:61:ad:70:62:42:6e:c3:c9:06: 8f:7a:bc:3e:b6:1d:dc:13:4a:4e:50:66:ed:41:b9:6c:9c:f7: b7:e5:4e:aa:5e:c6:d8:dc:11:72:92:3b:57:17:5c:d3:99:e8: f4:a7:18:e0:f1:d7:04:76:17:29:01:43:92:0f:a8:99:ae:0e: fe:45:62:fb:80:0d:e0:5a:e6:af:63:c1:22:5f:ba:31:78:f9: d2:54:42:f2:95:3b:e6:38:22:b4:81:c9:e5:16:05:1d:72:37: 99:12:c9:2d:9b:20:19:57:51:5d:cf:11:8c:5e:5f:04:de:ac: 1d:9b:cd:cc:af:e5:63:db:43:64:f8:d0:d9:53:63:76:90:ac: 46:3d:50:d8:3f:c6:94:c2:dc:11:d4:38:ae:31:bd:f9:0b:0e: 96:99:53:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUxMTA1MDEzMjUxWhcNMjUxMTEyMDEzMjUxWjAYMRYwFAYD VQQDEw02OTBhYTk0NC0yYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxGfAOAO9l1JiOklj0d+Jzx90q7IbWmcZl5zRNTXtfLeehpt/KEtIZeo+aq6 BWzZHQwYh52lJ+Cpv6RjBA/TqBynZsuwNcvWlGybnr08quLveKGa8/ZL9KnKk7sk R6xgukFrjeJ1tM4pvJQQLPTa1A2mH7b30l7Fv6WUWs5vHj3rrWDbphaQR8viQcQm ZuPmyImfwrGll1InHd9YWKHXN8pHOz1ZntOXG9l1+HkWDaDzuJ6GPwmEq7W1bWE3 H2jN/Qo3CNKpJ9HHk0K4oBklf9b7hv5qyMjCQgSGoXEJU0UWKGVNrJ0PI3iuDDCW XtB5TfvKj3hxSIMOJdR99DASAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW7WG7r aqLy+Vykb7Xs3G4jVEWuMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPeZZqQkNRR8XmLywOGHvC1+ZUbbl/j6Cj9X+ewQUOmgd86rrua7vQ kvBxzb2hC2RzuFLHECgi4YMKF3BBcCKAURaNKD/JImgOHYWXizm3975hSqx/GR/J t1swRZqo/gsRAsJhrXBiQm7DyQaPerw+th3cE0pOUGbtQblsnPe35U6qXsbY3BFy kjtXF1zTmej0pxjg8dcEdhcpAUOSD6iZrg7+RWL7gA3gWuavY8EiX7oxePnSVELy lTvmOCK0gcnlFgUdcjeZEsktmyAZV1FdzxGMXl8E3qwdm83Mr+Vj20Nk+NDZU2N2 kKxGPVDYP8aUwtwR1DiuMb35Cw6WmVPQ -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:51 2025 by rpki-client