$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: 71tvk1V68/HpzQg01E6kwVTFdDxQVyB+s8+rIZw96fs= Subject key identifier: 0C:8F:9F:B6:03:66:8A:01:D4:3A:60:D2:35:9E:E0:60:C3:3A:7A:6F Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 0159 Signing time: Mon 03 Nov 2025 04:13:26 +0000 Manifest this update: Mon 03 Nov 2025 04:13:26 +0000 Manifest next update: Mon 10 Nov 2025 04:13:26 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: bdGh6U6U6Oeu9AST9N14A679Q5VjXZx7LQCMGmn9O/g=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Nov 3 04:13:26 2025 GMT Not After : Nov 10 04:13:26 2025 GMT Subject: CN=69082be6-e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:65:13:cd:3a:31:44:85:46:08:0e:4d:ce: d5:2e:8e:41:a9:28:fb:7b:e2:49:f2:fc:a9:8e:49: 34:cc:2c:cf:8b:35:3d:3e:d5:f7:9d:25:5f:35:91: 3e:ad:cb:eb:18:b7:72:d2:04:28:f8:24:9e:f5:8b: 5d:5a:5a:9a:df:53:76:5e:56:d7:8a:9c:dc:05:f6: 25:27:ae:7d:65:67:bb:f9:37:dd:46:de:e9:24:75: 54:89:6d:f6:ed:7b:1c:ec:4b:b5:53:e7:5d:49:ec: 56:3e:13:4c:dd:e3:8f:c6:18:06:f8:0b:71:8c:bd: 20:a0:d1:6b:7f:4e:37:66:39:f9:32:71:fd:0e:3f: 7e:30:e2:13:a9:94:16:ae:11:e5:dc:60:e5:8f:ab: ac:9f:27:f4:16:c7:95:9f:48:51:92:3f:80:2a:90: 75:8a:b4:55:57:bb:57:d7:4f:08:ca:7e:6d:73:65: 60:82:d5:f7:75:19:60:24:98:0a:57:0f:85:0e:81: a5:3c:f1:11:f0:ba:a5:86:75:45:06:b1:51:6a:75: 15:53:2b:a0:91:7e:86:1a:e2:7f:34:c3:92:a6:f0: 0f:da:ba:4b:ad:84:19:64:1b:0c:ff:97:8a:68:85: 3a:41:e8:9b:4b:4b:d7:cf:c0:c7:fa:0c:36:6f:6a: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:9F:B6:03:66:8A:01:D4:3A:60:D2:35:9E:E0:60:C3:3A:7A:6F X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:72:d1:17:6c:f2:55:2a:5f:57:ca:fa:5d:4d:11:eb:a8:28: ec:d5:c3:8b:de:a6:b7:d0:d0:5e:e3:92:3d:38:ae:1e:2d:d9: 63:7d:4f:25:01:83:6d:16:e9:e3:45:7e:09:a4:51:dd:08:87: b0:cd:0a:a6:f0:b8:c1:3d:ea:a9:93:16:24:66:c8:3a:0c:6d: be:06:90:80:e8:71:98:93:b1:1c:4e:be:21:b9:d8:35:99:e6: d6:ba:f3:62:81:5e:70:0c:d5:0f:00:a6:6e:06:dc:68:32:1f: 6c:51:87:c2:78:d3:01:55:1c:02:45:bc:7d:ce:fc:57:49:2b: 72:42:f6:d1:bf:ef:fe:99:b2:fe:14:5c:25:82:b1:12:1e:81: 1d:77:5e:82:11:4a:bf:b8:e0:d9:23:f0:0f:d7:cc:f7:8b:9e: bc:a4:e0:a7:5b:86:a8:92:43:15:ed:9a:91:34:59:f2:72:2d: 6b:33:41:ed:4b:54:df:70:aa:75:48:9f:ce:99:ea:7e:88:eb: f6:bc:28:9c:54:2d:85:b2:9b:fc:ba:ef:dd:8c:c3:40:8b:14: 8d:ee:4b:74:d5:86:2b:18:0a:00:8c:81:8b:ff:54:4f:56:4e: a1:7e:36:51:7c:a8:96:4e:a7:bb:4a:39:7f:76:9e:3a:fa:4a: f9:7f:aa:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUxMTAzMDQxMzI2WhcNMjUxMTEwMDQxMzI2WjAYMRYwFAYD VQQDEw02OTA4MmJlNi1lODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymVlE806MUSFRggOTc7VLo5BqSj7e+JJ8vypjkk0zCzPizU9PtX3nSVfNZE+ rcvrGLdy0gQo+CSe9YtdWlqa31N2XlbXipzcBfYlJ659ZWe7+TfdRt7pJHVUiW32 7Xsc7Eu1U+ddSexWPhNM3eOPxhgG+AtxjL0goNFrf043Zjn5MnH9Dj9+MOITqZQW rhHl3GDlj6usnyf0FseVn0hRkj+AKpB1irRVV7tX108Iyn5tc2VggtX3dRlgJJgK Vw+FDoGlPPER8LqlhnVFBrFRanUVUyugkX6GGuJ/NMOSpvAP2rpLrYQZZBsM/5eK aIU6QeibS0vXz8DH+gw2b2pIqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyPn7YD ZooB1Dpg0jWe4GDDOnpvMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUctEXbPJVKl9XyvpdTRHrqCjs1cOL3qa30NBe45I9OK4eLdljfU8l AYNtFunjRX4JpFHdCIewzQqm8LjBPeqpkxYkZsg6DG2+BpCA6HGYk7EcTr4hudg1 mebWuvNigV5wDNUPAKZuBtxoMh9sUYfCeNMBVRwCRbx9zvxXSStyQvbRv+/+mbL+ FFwlgrESHoEdd16CEUq/uODZI/AP18z3i568pOCnW4aokkMV7ZqRNFnyci1rM0Ht S1TfcKp1SJ/Omep+iOv2vCicVC2Fspv8uu/djMNAixSN7kt01YYrGAoAjIGL/1RP Vk6hfjZRfKiWTqe7Sjl/dp46+kr5f6pG -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:54 2025 by rpki-client