$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: fdS+hBHcyfCfVUkmHdeTJT/0Y/Pq3f2nHWd3NvG4O1A= Subject key identifier: B3:C0:56:DD:57:88:EE:E2:B2:E5:80:C2:6A:21:25:CE:DF:5D:70:E7 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0796 Signing time: Tue 04 Nov 2025 21:33:37 +0000 Manifest this update: Tue 04 Nov 2025 21:33:37 +0000 Manifest next update: Tue 11 Nov 2025 21:33:37 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: R97zN9lwrnJbQTn3ortnfgxGJ59Fz+UX4xN4w9ev3ag=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: QxeWRQMKmf7TJD4WLtGbHv118KvpecTV8OOHHwq8cdw=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: YwH6tW2wnqbHDFkrMa51ak141hU9452AG57RT759KqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Nov 4 21:33:37 2025 GMT Not After : Nov 11 21:33:37 2025 GMT Subject: CN=690a7131-1691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:e8:ab:55:ad:2f:0c:f5:14:06:fd:34:2a: 3b:00:19:9e:0c:6e:eb:42:b4:82:89:1f:fd:9f:c0: 17:2f:44:24:b6:2c:93:73:ce:bf:29:7d:86:01:a8: 48:49:43:2a:09:14:bf:78:08:49:a8:bd:0b:79:fa: c8:88:df:ae:bb:aa:0c:63:8c:0e:91:25:d2:e9:52: d6:99:b3:b4:30:f5:cc:df:ab:fb:35:41:12:73:22: b4:2b:e7:40:3d:18:ef:dc:72:31:af:e5:c4:43:11: 7b:58:08:3a:17:6e:22:10:70:8c:a8:01:79:40:89: 25:82:89:36:0c:82:6c:18:6e:3f:91:3e:1c:23:ab: 2b:bc:bb:dc:17:f2:c0:7e:af:3e:a5:f1:4b:c6:70: 77:0f:54:c3:fd:29:56:e2:3a:3e:38:7e:8f:82:06: ff:19:2b:0a:30:2c:4c:19:4b:59:9c:bc:73:21:8f: 01:d4:aa:f7:b8:22:c7:7e:16:9a:1c:a6:59:13:70: da:a5:6e:dc:12:d4:ae:34:90:fc:72:36:25:17:88: 24:84:0c:61:3c:00:c4:26:f7:6d:bc:74:2c:38:eb: 5f:73:cf:90:b2:e6:9b:01:64:78:79:fe:e7:d1:ba: 25:bd:19:6c:61:5d:ae:37:29:3d:58:73:3b:d5:fe: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C0:56:DD:57:88:EE:E2:B2:E5:80:C2:6A:21:25:CE:DF:5D:70:E7 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:6c:f4:ab:7f:2a:68:ad:25:ea:9a:09:1a:c0:26:7b:f9:ca: 79:90:45:86:84:7d:73:50:09:9d:ed:1c:d5:26:6e:65:12:a9: b1:e4:ae:ff:71:88:a8:cd:04:b0:98:30:df:6a:3e:fc:a0:e4: 87:85:d0:d5:31:39:da:2f:b5:6f:f6:2b:12:40:80:58:c7:81: 29:d3:2f:bf:5b:bd:de:6d:6a:d1:bc:22:42:95:d1:43:97:ee: 3b:60:e0:b8:20:17:d5:ba:3a:72:80:9b:ef:e4:62:df:ac:f6: d5:6c:bc:22:83:64:39:21:57:09:94:f2:72:1b:83:59:81:d3: 35:4c:47:47:1f:61:fc:90:31:61:25:a0:68:c2:b0:b0:81:21: 9a:ce:12:35:6b:2f:a4:46:46:7f:81:40:77:03:2d:eb:4c:ab: fa:bf:53:40:97:af:0b:7a:32:a9:dd:f1:a6:74:8b:53:bf:8f: 12:2f:a3:ec:8c:e4:95:9d:7c:89:61:a0:21:a7:48:78:38:03: f7:b5:5b:16:ee:af:b6:b8:51:f8:ac:38:5c:05:a2:91:ea:33: 43:3d:6f:99:5c:50:e1:5a:a7:d7:de:2d:cf:cf:db:45:f3:b7: 7d:bc:2d:15:d6:3b:3f:7c:e9:42:f9:51:05:76:be:fd:52:e3: 84:aa:62:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUxMTA0MjEzMzM3WhcNMjUxMTExMjEzMzM3WjAYMRYwFAYD VQQDEw02OTBhNzEzMS0xNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws/oq1WtLwz1FAb9NCo7ABmeDG7rQrSCiR/9n8AXL0QktiyTc86/KX2GAahI SUMqCRS/eAhJqL0LefrIiN+uu6oMY4wOkSXS6VLWmbO0MPXM36v7NUEScyK0K+dA PRjv3HIxr+XEQxF7WAg6F24iEHCMqAF5QIklgok2DIJsGG4/kT4cI6srvLvcF/LA fq8+pfFLxnB3D1TD/SlW4jo+OH6Pggb/GSsKMCxMGUtZnLxzIY8B1Kr3uCLHfhaa HKZZE3DapW7cEtSuNJD8cjYlF4gkhAxhPADEJvdtvHQsOOtfc8+QsuabAWR4ef7n 0bolvRlsYV2uNyk9WHM71f7XvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPAVt1X iO7isuWAwmohJc7fXXDnMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVbPSrfyporSXqmgkawCZ7+cp5kEWGhH1zUAmd7RzVJm5lEqmx5K7/ cYiozQSwmDDfaj78oOSHhdDVMTnaL7Vv9isSQIBYx4Ep0y+/W73ebWrRvCJCldFD l+47YOC4IBfVujpygJvv5GLfrPbVbLwig2Q5IVcJlPJyG4NZgdM1TEdHH2H8kDFh JaBowrCwgSGazhI1ay+kRkZ/gUB3Ay3rTKv6v1NAl68LejKp3fGmdItTv48SL6Ps jOSVnXyJYaAhp0h4OAP3tVsW7q+2uFH4rDhcBaKR6jNDPW+ZXFDhWqfX3i3Pz9tF 87d9vC0V1js/fOlC+VEFdr79UuOEqmIk -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:14 2025 by rpki-client