$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: Bzj9BZTsiznyyyyko054SnB8/aorY7UqWcweLdTUKw0= Subject key identifier: AA:4C:E1:D3:BD:D7:47:E7:00:1C:18:89:61:32:BE:1A:1C:B4:08:C0 Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 059A Signing time: Tue 04 Nov 2025 23:17:03 +0000 Manifest this update: Tue 04 Nov 2025 23:17:03 +0000 Manifest next update: Tue 11 Nov 2025 23:17:03 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: /erZTkRUzTvFFfdDfc60tXadA36OhdyGGATMhRFjNVk=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: YaJuN/RbQ16mCRlQ6uaYQckU6ARLSth70ryswPVSLNI=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: TsA8sZCq2fj3T+1DdYOMp3tDHwls5Yd56F+yj6fbzmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Nov 4 23:17:03 2025 GMT Not After : Nov 11 23:17:03 2025 GMT Subject: CN=690a896f-7eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:03:e1:93:f5:32:e7:c2:a3:c3:31:bb:7b: 3e:79:cd:1e:0c:5c:2a:78:06:1f:95:e5:01:a7:1b: d2:56:d0:5e:00:4c:4e:4b:ef:09:a2:8c:a3:dc:41: c9:c9:f8:35:10:b8:dc:ca:b2:46:b2:29:51:3e:bf: 19:8e:16:3f:e6:98:d4:d9:36:e9:2d:89:16:fc:d9: 6b:ce:d4:4b:3c:6e:be:58:5d:ba:fe:f3:ec:6f:98: a3:b2:7f:38:44:d0:dd:98:49:3d:03:5b:8a:9c:65: cb:19:4c:87:a1:42:f8:28:da:4a:aa:f9:2d:80:36: ed:76:48:ff:4b:ac:82:b2:c5:58:90:f1:f6:62:40: 82:1b:7a:d7:da:18:e9:0e:87:88:39:27:5b:c9:c9: 5a:bf:ca:4d:13:d0:8a:a5:3a:bf:eb:15:65:bc:50: 7f:c5:a1:29:48:3f:34:32:8a:3a:12:79:47:c6:61: b2:48:6a:2b:11:19:cf:d0:06:7e:04:32:b6:db:e7: 6d:bf:97:4e:2f:d3:c8:52:4b:ce:ab:d3:97:63:0c: b6:f2:04:00:0e:c5:ee:53:4c:65:93:ad:b7:73:0e: ff:be:72:dd:7e:26:39:48:a5:93:d2:a5:da:b3:00: 04:1e:2e:6c:a2:05:f8:b9:b4:92:01:f6:83:ed:7f: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:E1:D3:BD:D7:47:E7:00:1C:18:89:61:32:BE:1A:1C:B4:08:C0 X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f9:4e:1d:cb:94:51:0f:c1:f8:12:e6:c9:2c:79:6e:e7:42: 6f:40:4f:a3:fa:80:b6:be:cf:69:8f:ce:e7:b9:a2:19:9b:a0: 6a:0a:21:ff:92:95:0e:1d:9a:e3:7e:f8:40:a1:af:26:3f:60: c3:c2:e0:d3:bc:6d:bc:12:d2:d1:58:c9:55:49:86:1b:f3:47: d0:aa:9d:a1:22:1d:59:8c:2f:ea:fc:b3:7c:54:80:58:ea:0f: 1b:e5:0a:90:11:18:97:d9:ee:c2:01:96:bd:d3:15:15:94:2a: a4:84:a3:71:eb:5c:9d:c3:54:51:98:64:83:e2:8d:5f:e1:83: e3:e1:3e:d8:7a:5b:5c:38:64:8f:3c:bf:de:b6:cc:2b:78:59: 44:19:b1:92:12:02:68:98:3e:01:b0:77:89:66:79:f5:02:33: ba:f5:17:c8:30:c5:a6:a7:33:28:74:f4:32:90:d3:f6:83:dd: 4c:bd:ef:39:95:1c:6d:47:b4:2c:81:5d:8e:cc:44:eb:28:e1: b1:66:5e:51:3e:cf:39:18:33:8d:5b:7b:97:48:4b:8b:af:27: 11:b7:0e:51:d5:e0:c3:64:d4:d9:e3:00:76:18:73:2f:d1:2e: 08:6f:8a:9b:38:b2:ea:89:0d:37:42:65:92:25:21:a1:f9:b2: a6:38:f3:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjUxMTA0MjMxNzAzWhcNMjUxMTExMjMxNzAzWjAYMRYwFAYD VQQDEw02OTBhODk2Zi03ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOUD4ZP1MufCo8Mxu3s+ec0eDFwqeAYfleUBpxvSVtBeAExOS+8Jooyj3EHJ yfg1ELjcyrJGsilRPr8ZjhY/5pjU2TbpLYkW/NlrztRLPG6+WF26/vPsb5ijsn84 RNDdmEk9A1uKnGXLGUyHoUL4KNpKqvktgDbtdkj/S6yCssVYkPH2YkCCG3rX2hjp DoeIOSdbyclav8pNE9CKpTq/6xVlvFB/xaEpSD80Moo6EnlHxmGySGorERnP0AZ+ BDK22+dtv5dOL9PIUkvOq9OXYwy28gQADsXuU0xlk623cw7/vnLdfiY5SKWT0qXa swAEHi5sogX4ubSSAfaD7X+9GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpM4dO9 10fnABwYiWEyvhoctAjAMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1+U4dy5RRD8H4EubJLHlu50JvQE+j+oC2vs9pj87nuaIZm6BqCiH/ kpUOHZrjfvhAoa8mP2DDwuDTvG28EtLRWMlVSYYb80fQqp2hIh1ZjC/q/LN8VIBY 6g8b5QqQERiX2e7CAZa90xUVlCqkhKNx61ydw1RRmGSD4o1f4YPj4T7YeltcOGSP PL/etswreFlEGbGSEgJomD4BsHeJZnn1AjO69RfIMMWmpzModPQykNP2g91Mve85 lRxtR7QsgV2OzETrKOGxZl5RPs85GDONW3uXSEuLrycRtw5R1eDDZNTZ4wB2GHMv 0S4Ib4qbOLLqiQ03QmWSJSGh+bKmOPMZ -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:58 2025 by rpki-client