$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: MNb/N0nKuoCZ7jkY7JNQLXe9ljTX0YMOmhyGlbrdRJ0= Subject key identifier: 21:F2:9E:0A:2D:72:CD:BC:A1:21:CB:1F:37:A8:0C:03:79:62:60:B7 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C51 Signing time: Tue 04 Nov 2025 18:42:07 +0000 Manifest this update: Tue 04 Nov 2025 18:42:06 +0000 Manifest next update: Tue 11 Nov 2025 18:42:06 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: KurO1rnR3uRrWmwLP6dmiCnqmtDKX0zmQ/zS5kVqkpo=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Nov 4 18:42:06 2025 GMT Not After : Nov 11 18:42:06 2025 GMT Subject: CN=690a48fe-26ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:90:e3:e3:23:40:91:3f:59:32:99:78:d5: 3a:a5:1f:94:54:5b:65:52:25:d8:1c:1e:aa:01:5b: d4:e9:ae:23:6e:88:86:99:0c:4c:93:cc:1f:ec:91: 54:09:73:b5:ed:3d:13:22:86:2e:91:d8:d4:31:d3: 6d:d3:14:1a:72:a0:65:c6:c8:d7:06:51:cb:76:86: 20:9e:1d:7c:ed:e8:b2:4f:d7:9a:0f:fc:75:6f:64: 34:18:20:f0:9b:5f:8c:c0:59:fb:34:39:8b:fd:e5: a9:ed:bf:24:3a:35:13:cb:0b:93:16:4f:76:fa:86: 19:c9:b5:1c:34:53:bc:7b:22:d4:07:58:1f:14:26: 72:79:fe:cc:ce:60:33:27:93:ae:5b:7f:71:ef:c5: d9:80:19:df:6a:dd:0d:ad:30:af:2e:1d:e5:12:e7: 87:8d:32:ce:ea:9e:0c:67:33:26:fb:b9:d0:74:8b: 48:5d:5f:a1:7b:06:62:ba:e8:fc:ce:df:c5:fb:42: dc:88:3d:ed:54:8b:f0:dd:c7:11:ac:84:a3:51:9f: ca:db:1d:cb:c1:e6:aa:41:af:7d:f7:af:8d:5e:03: 35:74:70:6c:b2:65:fc:64:fd:32:e8:20:1b:d5:7b: 02:3c:92:7d:c4:65:ef:3a:59:98:56:24:e1:44:5f: ea:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F2:9E:0A:2D:72:CD:BC:A1:21:CB:1F:37:A8:0C:03:79:62:60:B7 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:23:72:0a:5b:ad:0b:c3:34:36:12:52:71:3e:12:d9:d7:f8: ae:ab:f4:23:18:e1:6d:77:8f:78:b9:5d:70:ee:04:08:e8:07: db:59:cb:92:68:a0:d3:a0:0f:a6:50:f5:d7:04:3a:00:4b:9d: 8f:dc:86:3c:35:21:f9:58:69:17:56:64:cc:aa:e1:f9:3c:3d: 64:ad:d3:b2:c5:56:cf:bb:1c:cc:82:40:82:f8:37:01:af:c2: fb:eb:2f:2b:23:42:68:2a:28:df:fa:ac:3b:c5:28:2c:d7:00: 0b:2a:cd:70:05:84:38:3f:0f:63:46:9c:42:88:5f:4a:c7:fb: f8:68:c7:0d:1f:7b:22:66:e1:4b:46:ff:df:bf:de:65:e5:ee: 88:41:f5:19:d2:87:bb:19:6a:39:2d:32:cd:8e:ef:ec:9b:3e: 5e:16:af:79:27:f3:c9:fe:7b:0a:62:44:8a:57:da:ca:3e:21: 2e:62:21:f2:a6:9e:fe:82:df:2e:e7:ee:63:fd:1d:64:76:87: 82:f0:c2:c6:0a:84:e4:05:98:60:70:92:40:e7:4f:29:1b:94: 11:0b:be:c8:91:43:4f:60:3f:71:a3:24:f3:49:33:7a:08:4d: 87:2f:53:ae:ec:ff:45:2a:1f:d9:df:8d:ac:a4:26:dd:db:90: fe:7c:75:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjUxMTA0MTg0MjA2WhcNMjUxMTExMTg0MjA2WjAYMRYwFAYD VQQDEw02OTBhNDhmZS0yNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw66Q4+MjQJE/WTKZeNU6pR+UVFtlUiXYHB6qAVvU6a4jboiGmQxMk8wf7JFU CXO17T0TIoYukdjUMdNt0xQacqBlxsjXBlHLdoYgnh187eiyT9eaD/x1b2Q0GCDw m1+MwFn7NDmL/eWp7b8kOjUTywuTFk92+oYZybUcNFO8eyLUB1gfFCZyef7MzmAz J5OuW39x78XZgBnfat0NrTCvLh3lEueHjTLO6p4MZzMm+7nQdItIXV+hewZiuuj8 zt/F+0LciD3tVIvw3ccRrISjUZ/K2x3LweaqQa9996+NXgM1dHBssmX8ZP0y6CAb 1XsCPJJ9xGXvOlmYViThRF/qcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHyngot cs28oSHLHzeoDAN5YmC3MB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByI3IKW60LwzQ2ElJxPhLZ1/iuq/QjGOFtd494uV1w7gQI6AfbWcuS aKDToA+mUPXXBDoAS52P3IY8NSH5WGkXVmTMquH5PD1krdOyxVbPuxzMgkCC+DcB r8L76y8rI0JoKijf+qw7xSgs1wALKs1wBYQ4Pw9jRpxCiF9Kx/v4aMcNH3siZuFL Rv/fv95l5e6IQfUZ0oe7GWo5LTLNju/smz5eFq95J/PJ/nsKYkSKV9rKPiEuYiHy pp7+gt8u5+5j/R1kdoeC8MLGCoTkBZhgcJJA508pG5QRC77IkUNPYD9xoyTzSTN6 CE2HL1Ou7P9FKh/Z342spCbd25D+fHUH -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:21 2025 by rpki-client