$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: YpzZ5/x15o/ZQCaGWkpdXrhJ0zS+F/IwSXw9XXHFn2k= Subject key identifier: B8:0F:99:55:74:BB:A8:1D:CE:D8:F6:F6:3E:70:04:45:5F:58:2D:D5 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: FF Signing time: Mon 03 Nov 2025 05:05:23 +0000 Manifest this update: Mon 03 Nov 2025 05:05:22 +0000 Manifest next update: Mon 10 Nov 2025 05:05:22 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: 78lL+2WCjbvaS7ihHfwJEsOoY9crH8gleejcQfltyEE=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Nov 3 05:05:22 2025 GMT Not After : Nov 10 05:05:22 2025 GMT Subject: CN=69083812-11d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:1d:01:0f:42:f1:25:13:cf:d3:d3:7a:be: 65:ca:00:84:9d:b4:7c:19:0c:2e:78:a2:f0:dc:ee: 2f:b0:3c:a7:8b:bc:90:eb:69:02:4a:f7:20:82:f4: 5b:cb:6d:92:09:6d:11:ab:0f:ca:54:fd:10:3b:b6: 0d:37:54:40:07:21:2a:88:6f:8f:2d:7b:1b:be:d4: 59:54:fa:9a:0b:71:c7:f0:f8:06:fe:69:38:b4:2d: 2e:a9:16:8a:c4:14:75:46:dc:d8:f9:4d:b7:21:db: a0:bc:33:1d:1a:63:ae:c4:64:70:1b:87:5f:6f:4a: 1e:1e:92:08:94:15:c9:a8:fd:59:30:3a:6d:1d:60: f7:eb:7e:46:72:f2:9e:42:39:13:5c:47:dc:95:f0: c8:de:b4:a5:57:dd:28:24:ef:3c:f4:72:ed:e8:ca: 6f:9a:d1:43:d5:70:54:91:48:de:cd:be:92:76:8e: 77:02:51:cb:bb:1b:07:b4:88:d0:0d:e1:38:d8:ae: 9c:01:62:6d:d5:71:61:73:13:b7:12:28:e6:7e:6d: 37:bb:cc:a9:37:21:0c:35:1c:38:ae:10:f6:6d:ea: ee:ee:48:2d:1d:47:57:a5:66:eb:30:fb:e7:1d:10: 4b:9e:58:ca:29:51:82:b2:0d:89:36:62:c8:93:67: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0F:99:55:74:BB:A8:1D:CE:D8:F6:F6:3E:70:04:45:5F:58:2D:D5 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:b6:ae:96:e6:02:ef:f6:94:1a:40:50:8d:59:ae:00:52:b8: 3f:f8:45:d3:27:82:46:2f:81:99:76:7a:9f:21:64:b9:86:a8: 65:05:36:73:a1:67:a4:60:ff:6c:88:97:a0:72:e5:83:f6:d4: c6:54:6c:9a:e8:70:bc:2a:44:22:3a:9d:f0:0c:6b:1e:4c:37: a3:53:ee:4c:da:0c:f2:70:23:77:71:e1:9f:16:d2:1a:49:b8: 27:1c:c2:64:f4:bb:b3:aa:f6:be:3b:b2:5a:80:3e:a5:ea:44: 2b:eb:04:b9:91:7d:39:04:c4:8d:af:c3:9e:aa:e8:34:bf:f3: 99:41:49:b1:9f:29:91:8c:ea:ea:15:89:45:03:1e:cb:55:0e: 20:52:f0:64:0f:d9:55:a4:3e:cc:c8:bf:9a:cc:33:49:d3:01: 74:8d:0b:a2:b5:70:f2:c7:75:28:78:67:19:c1:1c:82:6d:70: 2a:36:9c:6b:a3:4b:b1:58:27:d1:9e:03:57:88:f7:3e:76:2e: 33:6d:cf:bc:36:27:58:78:93:2e:91:18:db:d1:94:96:b7:0e: d4:f6:0c:55:99:7a:3f:a3:e0:41:b3:0b:b1:50:8a:84:fc:03: 81:4a:2c:17:15:dc:9b:66:52:b9:26:a6:ed:10:f4:6e:65:8d: e2:79:ad:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjUxMTAzMDUwNTIyWhcNMjUxMTEwMDUwNTIyWjAYMRYwFAYD VQQDEw02OTA4MzgxMi0xMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F4dAQ9C8SUTz9PTer5lygCEnbR8GQwueKLw3O4vsDyni7yQ62kCSvcggvRb y22SCW0Rqw/KVP0QO7YNN1RAByEqiG+PLXsbvtRZVPqaC3HH8PgG/mk4tC0uqRaK xBR1RtzY+U23IdugvDMdGmOuxGRwG4dfb0oeHpIIlBXJqP1ZMDptHWD3635GcvKe QjkTXEfclfDI3rSlV90oJO889HLt6MpvmtFD1XBUkUjezb6Sdo53AlHLuxsHtIjQ DeE42K6cAWJt1XFhcxO3Eijmfm03u8ypNyEMNRw4rhD2beru7kgtHUdXpWbrMPvn HRBLnljKKVGCsg2JNmLIk2dyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgPmVV0 u6gdztj29j5wBEVfWC3VMB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAtq6W5gLv9pQaQFCNWa4AUrg/+EXTJ4JGL4GZdnqfIWS5hqhlBTZz oWekYP9siJegcuWD9tTGVGya6HC8KkQiOp3wDGseTDejU+5M2gzycCN3ceGfFtIa SbgnHMJk9Luzqva+O7JagD6l6kQr6wS5kX05BMSNr8Oequg0v/OZQUmxnymRjOrq FYlFAx7LVQ4gUvBkD9lVpD7MyL+azDNJ0wF0jQuitXDyx3UoeGcZwRyCbXAqNpxr o0uxWCfRngNXiPc+di4zbc+8NidYeJMukRjb0ZSWtw7U9gxVmXo/o+BBswuxUIqE /AOBSiwXFdybZlK5JqbtEPRuZY3iea3g -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:32 2025 by rpki-client