$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft File: npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json) Hash identifier: ObXiFcSv1wOs+r8OL1rI7lkw/mFJcXUDLH22xqed4NI= Subject key identifier: 11:C1:7A:DD:18:27:74:4C:A2:2B:05:B9:04:AF:4D:E4:00:79:11:F9 Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF Certificate issuer: /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 07:58:08 +0000 Manifest this update: Mon 03 Nov 2025 07:58:07 +0000 Manifest next update: Mon 10 Nov 2025 07:58:07 +0000 Files and hashes: 1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: eNsE70RHokG7+MzHHaIBmjTFuywFZhJJZZH8vf+7Jps=) 2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: UIqdJutuJDlhfZ5sjZNc55vuXujNjCHWgG438Kpp1wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Validity Not Before: Nov 3 07:58:07 2025 GMT Not After : Nov 10 07:58:07 2025 GMT Subject: CN=69086090-9041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:d3:03:27:fa:97:66:7c:b9:38:38:f1:63: fd:ec:08:61:77:5f:b9:81:a1:89:bd:f5:c9:4c:58: 02:75:49:d1:8c:87:11:c0:39:34:c6:20:84:b8:44: a1:70:d9:8c:50:86:5c:93:20:ad:4e:a8:1f:6b:79: 26:df:03:d0:a6:be:cf:e0:89:aa:1e:0a:81:1c:81: 90:d3:d6:ff:d7:ec:21:0a:96:25:1c:ea:af:63:bf: 95:4e:54:08:8e:d4:94:8c:0b:50:ba:7a:f7:3a:2f: 98:4e:c1:43:04:f9:e7:fa:3d:a1:1f:9e:b9:f9:48: 74:82:0f:e6:4f:00:76:dd:de:17:f4:4c:cc:fe:23: 76:a8:19:f1:85:45:06:9b:7d:80:67:28:13:6a:c5: 5c:7a:f1:e9:43:2b:e2:30:de:fc:77:7c:8e:87:f7: e3:ea:55:7a:8d:5c:d5:d9:f8:58:bd:86:03:fb:20: 55:17:53:5a:72:dc:c4:30:78:cf:b2:08:5f:20:61: fa:e9:2a:db:02:e5:0e:1d:e4:a8:c1:bf:6e:bb:24: cf:6f:74:56:e2:90:92:28:c2:7c:dc:3f:ee:c2:7c: 0e:84:a2:40:77:f4:07:da:bd:45:6f:49:40:dd:43: 5f:f8:21:7e:4f:36:6d:7a:76:9e:e8:b0:94:45:f0: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C1:7A:DD:18:27:74:4C:A2:2B:05:B9:04:AF:4D:E4:00:79:11:F9 X509v3 Authority Key Identifier: keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:95:be:36:d8:46:ea:12:e1:55:d0:78:31:30:5f:77:95:08: 41:de:0d:3b:ab:79:0d:ea:65:49:c6:ee:c7:45:27:f5:f6:11: 00:89:d9:a0:b7:88:ac:74:87:52:07:21:4e:d5:cf:88:0c:3a: 93:eb:bd:d6:ca:0f:85:95:ce:5b:34:1e:e6:d9:95:05:67:5d: ef:09:c4:5a:0b:99:af:3c:2d:3e:ba:ec:fa:7f:b1:79:d7:74: a3:19:9a:42:f5:c0:a3:6c:66:bc:da:b8:d7:70:1e:ab:99:62: 81:59:01:a0:9e:df:0d:6c:1e:df:08:8a:51:d1:94:8e:fd:e3: ed:6b:e6:e6:c3:5c:16:a7:16:f0:60:c4:c6:37:a7:72:7d:d5: 81:4b:df:43:7e:06:3f:7d:66:b9:06:5f:50:64:ad:2f:91:48: 86:bc:27:90:13:f8:ad:7d:80:0c:8f:d0:29:07:e3:65:c1:cb: 5e:75:0f:82:2f:a8:77:bc:ae:cd:73:0c:00:80:82:59:ad:de: b8:17:7a:96:77:10:f9:98:e1:3d:81:08:6a:88:13:74:78:31: f6:41:64:d9:5f:11:68:76:ad:23:7d:6d:4f:34:58:0a:ae:94: 34:50:25:5e:56:cc:cf:13:37:d0:41:c5:5a:59:00:a5:be:b7: bf:2d:a0:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJBOTExMC8GA1UEBRMoOUU5Q0M4MEU1QTk4NEMxQTFGRDQxQTFEMzE0NjkyNjBB MjEyREFERjAeFw0yNTExMDMwNzU4MDdaFw0yNTExMTAwNzU4MDdaMBgxFjAUBgNV BAMTDTY5MDg2MDkwLTkwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNLtMDJ/qXZny5ODjxY/3sCGF3X7mBoYm99clMWAJ1SdGMhxHAOTTGIIS4RKFw 2YxQhlyTIK1OqB9reSbfA9Cmvs/giaoeCoEcgZDT1v/X7CEKliUc6q9jv5VOVAiO 1JSMC1C6evc6L5hOwUME+ef6PaEfnrn5SHSCD+ZPAHbd3hf0TMz+I3aoGfGFRQab fYBnKBNqxVx68elDK+Iw3vx3fI6H9+PqVXqNXNXZ+Fi9hgP7IFUXU1py3MQweM+y CF8gYfrpKtsC5Q4d5KjBv267JM9vdFbikJIownzcP+7CfA6EokB39AfavUVvSUDd Q1/4IX5PNm16dp7osJRF8HFjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEcF63Rgn dEyiKwW5BK9N5AB5EfkwHwYDVR0jBBgwFoAUnpzIDlqYTBof1BodMUaSYKIS2t8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzYyMDk3RTg0QTc3 NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJvZjFCb2RNVWFTWUtJUzJ0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnB6SURscVlUQm9mMUJvZE1VYVNZS0lTMnQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkE5LzYyMDk3RTg0QTc3NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJv ZjFCb2RNVWFTWUtJUzJ0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuVvjbYRuoS4VXQeDEwX3eVCEHeDTureQ3qZUnG7sdFJ/X2EQCJ2aC3 iKx0h1IHIU7Vz4gMOpPrvdbKD4WVzls0HubZlQVnXe8JxFoLma88LT667Pp/sXnX dKMZmkL1wKNsZrzauNdwHquZYoFZAaCe3w1sHt8IilHRlI794+1r5ubDXBanFvBg xMY3p3J91YFL30N+Bj99ZrkGX1BkrS+RSIa8J5AT+K19gAyP0CkH42XBy151D4Iv qHe8rs1zDACAglmt3rgXepZ3EPmY4T2BCGqIE3R4MfZBZNlfEWh2rSN9bU80WAqu lDRQJV5WzM8TN9BBxVpZAKW+t78toOU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:37 2025 by rpki-client