$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json) Hash identifier: O3Unkqopgff38eLI99N99Z57eCm7m7d/HrdpRNyR1Mw= Subject key identifier: 1B:00:95:DE:7A:D7:7C:E0:1B:D8:AF:C8:C7:EE:21:04:D2:F9:E6:A5 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0EC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft Manifest number: 0E06 Signing time: Tue 04 Nov 2025 18:02:02 +0000 Manifest this update: Tue 04 Nov 2025 18:02:01 +0000 Manifest next update: Tue 11 Nov 2025 18:02:01 +0000 Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: oH+Y/zVn7TjjmVXmcJn4H88eO0xtfhG1z9zKsfteUrU=) 2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 8HpuGDjJ1HaUnvbqwg2p0RqMWNKRPbkcusj7/8dGWQ0=) 3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: LJIpLV7qxEhrQ58WdLL8kVLFvZWp3hu8j4iGoCziiKk=) 4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: Y1hYPriqga57gQ3amB6r8RQVCp/OYrjfwjRFo7bzhN4=) 5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: a0zumIIFq60VnU+h+sczBC8nSfMUtNZJOT2cGQXHtFM=) 6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: 9Y1PvZbBWvXkxPJ/R9kxoHARtC3b9XEV8P94nkayA0Y=) 7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: fVAiyutcaUjImiI/+ZOO2PTga7QNJojrwSKqKhdWN0M=) 8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: eadxsvzaSxzw44MbzuzI+Oul4FdP5+6OIV0GTLKz4ko=) 9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: PAK/TxIr+dmrK+KiwHQ68OGXOTg91fc22TNBIvKrGx0=) 10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: yeuXVIZHgdbGSZuuSW+dQGW9Nla3e2FH/EFT8iqpLcQ=) 11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: 2I5f/ord7l4Z+1cz8mubA9ENQbHncDdSE1Z3NBiS6xA=) 12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: D96s3C0fz4gg+o7Ty1+9cwFV2PT+r04AXwT8/vXI9r8=) 13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: aOW8cu9Nc0zJXm+rBrdFnzfM1/G7gfurLbAv9VHmltc=) 14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: 6YL37qZcSHIsKWgAPwXyLHa/ujTtyBijwb8nN7Syf3U=) 15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 1H9jP4UG0MauS5NOFFxuSSAQmI9fS/xoBhEMmaqDQtc=) 16: 03774914696211EC8A05D115C4F9AE02.roa (hash: YSreEArv7A+NuKlgpYkqh41Hl5YPxnEtL6X4nDbC/aY=) 17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: Y+qs2z3P8V9uaGhh4nh1gvjcG2+gtCdiPwz3sWEVZh0=) 18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: HbDcVIalem/Ny0QC+Yf0XnevG+XaltaoTg2FrWFfKG8=) 19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: ullzKPL3x0725kipkj6fcVE+JrOCoQ1xkkGVkrIADK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3778 (0xec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Nov 4 18:02:01 2025 GMT Not After : Nov 11 18:02:01 2025 GMT Subject: CN=690a3f9a-35ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:41:3b:9f:7c:4e:43:1d:08:73:32:26:83: 1d:87:04:a6:7e:36:ba:90:c9:5b:5b:e7:79:f4:c1: c2:6c:28:3e:97:27:6b:83:67:01:41:f2:3f:e4:6a: 50:b1:d7:78:5a:c7:53:96:05:15:4c:7d:6b:7c:63: 56:9d:f0:d6:a6:88:f8:62:b8:a1:fd:9a:cc:c9:0e: ac:9e:9f:d0:e5:4f:a6:7b:a8:bc:df:d6:2d:5b:d1: 98:b7:05:b1:f6:e4:6e:bf:c7:ca:22:df:1a:3e:61: e5:11:78:e6:9a:f2:0c:48:ce:01:4a:d8:f0:c4:b7: 2b:b8:76:4f:81:4e:ce:ec:3d:60:3e:25:b2:8d:c0: 7e:61:44:de:31:4d:9a:e7:ca:99:54:51:82:ac:0a: 59:aa:29:f0:6e:4e:37:88:b6:d8:00:96:26:38:9f: 79:69:d7:47:8a:2b:f9:0c:8c:41:ee:80:1b:a3:1f: b2:aa:ff:12:26:cf:59:98:fa:f0:c4:c5:e9:8f:88: 68:53:aa:4f:aa:3c:b9:67:83:df:03:d3:64:7c:3a: 5c:4b:64:e9:49:26:de:56:5f:e9:2b:24:69:83:4b: 71:f5:5d:6f:7c:f6:6c:9b:3a:e5:96:46:ca:9e:78: 1c:7b:36:45:f8:f0:61:99:40:d2:f6:74:9b:a6:aa: 99:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:00:95:DE:7A:D7:7C:E0:1B:D8:AF:C8:C7:EE:21:04:D2:F9:E6:A5 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9a:46:f0:63:97:92:09:5a:aa:39:3b:c5:18:dd:57:fc:5d: e0:ea:25:ee:42:c3:ce:22:1d:1f:65:8a:3d:2a:a8:a4:32:65: 18:16:27:55:93:94:12:06:1f:df:3b:b7:96:7c:01:c0:3f:2d: a2:6e:bd:df:45:7d:96:54:20:3a:87:5a:b4:cd:3d:55:02:a4: 41:61:80:4f:37:a7:ad:15:9d:d0:bb:3c:71:31:52:32:0f:db: e6:ee:21:e8:f5:4d:2d:54:d2:c2:2e:95:8a:7f:af:49:60:3e: c6:b6:d6:b0:d4:11:9b:a5:13:f3:70:96:cf:71:68:a0:b7:ad: 86:cd:6a:a9:ea:1a:6c:58:35:8a:6d:72:36:7e:9b:f1:1c:7d: e3:0e:6f:5a:57:a3:82:61:65:b6:fa:17:03:6c:4c:cf:fb:f6: ac:6a:a1:05:cc:ce:7b:55:ab:9f:c7:d9:6c:09:df:ba:79:3d: 85:54:85:74:50:09:bf:50:d2:17:c0:83:df:91:b7:53:41:af: c7:81:b5:b1:d8:69:3c:e1:54:7f:fc:87:5f:1f:71:98:8a:c9: 10:e4:97:49:9d:22:16:92:86:c8:46:4a:19:38:77:b8:bd:76: 99:ec:6a:4e:ca:1b:ad:36:e5:e0:8f:fa:55:72:5e:13:25:cf: b8:bb:16:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUxMTA0MTgwMjAxWhcNMjUxMTExMTgwMjAxWjAYMRYwFAYD VQQDEw02OTBhM2Y5YS0zNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLhBO598TkMdCHMyJoMdhwSmfja6kMlbW+d59MHCbCg+lydrg2cBQfI/5GpQ sdd4WsdTlgUVTH1rfGNWnfDWpoj4Yrih/ZrMyQ6snp/Q5U+me6i839YtW9GYtwWx 9uRuv8fKIt8aPmHlEXjmmvIMSM4BStjwxLcruHZPgU7O7D1gPiWyjcB+YUTeMU2a 58qZVFGCrApZqinwbk43iLbYAJYmOJ95addHiiv5DIxB7oAbox+yqv8SJs9ZmPrw xMXpj4hoU6pPqjy5Z4PfA9NkfDpcS2TpSSbeVl/pKyRpg0tx9V1vfPZsmzrllkbK nngcezZF+PBhmUDS9nSbpqqZpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsAld56 13zgG9ivyMfuIQTS+ealMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEM2MC9CNTI2RkY3NEQ4NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpU SjF4NVkxbU5hMFczQ3ZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAmkbwY5eSCVqqOTvFGN1X/F3g6iXuQsPOIh0fZYo9KqikMmUYFidV k5QSBh/fO7eWfAHAPy2ibr3fRX2WVCA6h1q0zT1VAqRBYYBPN6etFZ3QuzxxMVIy D9vm7iHo9U0tVNLCLpWKf69JYD7Gttaw1BGbpRPzcJbPcWigt62GzWqp6hpsWDWK bXI2fpvxHH3jDm9aV6OCYWW2+hcDbEzP+/asaqEFzM57Vaufx9lsCd+6eT2FVIV0 UAm/UNIXwIPfkbdTQa/HgbWx2Gk84VR//IdfH3GYiskQ5JdJnSIWkobIRkoZOHe4 vXaZ7GpOyhutNuXgj/pVcl4TJc+4uxYw -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:19 2025 by rpki-client