$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: AfwYvMs9abP4ZSk5MVC9sOw4aYJabISC8n+nV0m5IQQ= Subject key identifier: 7B:1F:47:6B:53:A3:40:6F:45:E4:F1:2E:5E:F8:AC:CE:6C:DA:46:5D Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 0846 Signing time: Tue 04 Nov 2025 20:48:31 +0000 Manifest this update: Tue 04 Nov 2025 20:48:31 +0000 Manifest next update: Tue 11 Nov 2025 20:48:31 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: C/E5ihh2Tf+Excue1TvzayHAqDC1aMXFXhaJkivxxak=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6X9DRIYN2JCL/kdvqE4XHDfEtLiRnlrwHj3YHZE4kgg=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 6lqehcAyCNVs7/NRnq82eztxUGH8XbnYMN7Uvtot0JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Nov 4 20:48:31 2025 GMT Not After : Nov 11 20:48:31 2025 GMT Subject: CN=690a669f-7d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:38:b8:7e:5c:70:9c:58:cb:b4:4b:2b:5c: 53:6d:3b:b4:6b:21:95:22:e1:d5:9c:39:f1:c1:ef: 0c:30:de:fc:49:16:29:7c:bc:5d:e3:1c:29:f1:48: 10:75:93:a9:07:6c:f9:6e:72:d3:49:d6:90:93:4f: 68:70:2b:68:06:9f:c9:30:b2:a0:8b:5b:0f:68:fc: 4b:b3:e7:e9:eb:e8:9a:2d:4d:ec:5f:fc:98:e2:0c: d9:eb:7a:08:b1:e0:ac:3b:b6:b9:e1:db:ac:e8:d2: b5:a5:85:70:aa:8b:bc:e1:2f:34:fc:80:01:17:83: 80:c6:53:1c:78:53:38:dd:51:de:f5:92:88:fd:a7: 18:7a:1e:0e:fd:eb:91:46:f8:96:92:2d:8d:4e:51: 3a:a2:32:23:df:a1:a2:99:29:c0:d1:14:8d:9f:0b: 5a:2b:05:f8:35:d8:f2:db:7f:9c:4b:21:7f:56:d9: 34:a3:01:85:f9:0c:46:38:a3:c3:39:9d:8f:43:c0: a1:5d:0e:8f:29:86:f7:60:60:18:00:36:aa:fd:04: ae:6b:fc:b6:23:b3:39:8e:45:95:5c:34:ad:95:08: 18:61:1a:22:72:44:36:41:d9:23:7d:1f:3e:ab:6a: 13:93:84:cc:fd:f7:48:78:e5:ed:3d:02:75:42:22: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:47:6B:53:A3:40:6F:45:E4:F1:2E:5E:F8:AC:CE:6C:DA:46:5D X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:48:0a:7b:44:47:d1:6a:f0:b5:e3:32:a1:4f:04:74:a6:be: fb:70:60:da:18:f9:99:20:27:e6:21:eb:f5:95:c0:94:3f:8f: be:c9:d4:7b:11:87:62:6d:27:41:d1:3c:93:f6:d5:12:b1:04: d2:11:0a:c6:4a:47:d2:f7:9e:69:51:a1:ea:64:41:ef:07:46: d1:bb:d7:c2:46:65:c1:eb:dc:70:66:dc:34:a3:54:0f:14:f6: a1:bd:67:14:9e:26:59:4b:79:63:ce:41:62:b8:5e:2c:01:01: 16:ff:1a:33:1f:60:0e:c6:41:57:15:74:99:67:81:2d:00:7c: 3e:ce:40:74:0a:d2:16:c3:80:98:f3:08:0d:4f:b4:dc:b0:98: c3:28:07:cf:10:81:29:d9:7f:31:ca:fd:23:bf:03:da:16:f6: a8:38:3e:1b:a6:96:de:30:c4:b3:21:91:bc:97:27:78:e9:e4: 3b:6e:0d:e0:ed:f9:8e:77:20:bf:3f:6d:24:d6:78:60:b6:2b: 23:e2:4e:08:e7:f7:e7:d5:92:e5:44:58:d9:80:55:d2:6c:c5: ea:c5:46:19:d1:c1:37:47:61:01:4f:6a:9b:0c:d4:65:ab:a8: 2d:a9:81:d2:36:31:9d:fb:c8:92:c5:4c:2b:b0:96:d9:0f:36: b5:fc:3a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUxMTA0MjA0ODMxWhcNMjUxMTExMjA0ODMxWjAYMRYwFAYD VQQDEw02OTBhNjY5Zi03ZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i44uH5ccJxYy7RLK1xTbTu0ayGVIuHVnDnxwe8MMN78SRYpfLxd4xwp8UgQ dZOpB2z5bnLTSdaQk09ocCtoBp/JMLKgi1sPaPxLs+fp6+iaLU3sX/yY4gzZ63oI seCsO7a54dus6NK1pYVwqou84S80/IABF4OAxlMceFM43VHe9ZKI/acYeh4O/euR RviWki2NTlE6ojIj36GimSnA0RSNnwtaKwX4Ndjy23+cSyF/Vtk0owGF+QxGOKPD OZ2PQ8ChXQ6PKYb3YGAYADaq/QSua/y2I7M5jkWVXDStlQgYYRoickQ2QdkjfR8+ q2oTk4TM/fdIeOXtPQJ1QiIdtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsfR2tT o0BvReTxLl74rM5s2kZdMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNSAp7REfRavC14zKhTwR0pr77cGDaGPmZICfmIev1lcCUP4++ydR7 EYdibSdB0TyT9tUSsQTSEQrGSkfS955pUaHqZEHvB0bRu9fCRmXB69xwZtw0o1QP FPahvWcUniZZS3ljzkFiuF4sAQEW/xozH2AOxkFXFXSZZ4EtAHw+zkB0CtIWw4CY 8wgNT7TcsJjDKAfPEIEp2X8xyv0jvwPaFvaoOD4bppbeMMSzIZG8lyd46eQ7bg3g 7fmOdyC/P20k1nhgtisj4k4I5/fn1ZLlRFjZgFXSbMXqxUYZ0cE3R2EBT2qbDNRl q6gtqYHSNjGd+8iSxUwrsJbZDza1/Dqa -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:42 2025 by rpki-client