$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: z8QaJk1t22nLUKR0WpKvZv+W8MI97wEUL70hxxC00TY= Subject key identifier: BB:F4:E3:D2:E7:8C:20:23:89:D8:0D:CC:78:44:16:93:B5:7E:AC:55 Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1E82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1E45 Signing time: Tue 04 Nov 2025 16:11:25 +0000 Manifest this update: Tue 04 Nov 2025 16:11:25 +0000 Manifest next update: Tue 11 Nov 2025 16:11:25 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: rra6x3bpQCvdsE1Xyi59L+cZtK4rOGb4Tw6CurCXcCM=) 2: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: zuUsKZCcjPOj5pM09o9z0mAoFhewcmu+fcIGUoGJ1jw=) 3: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: G/Ubv3z+VEdcNFiGQpNHf2mTf7Lsh6KdDEju5wCmKbw=) 4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: lSszTQ1c+gMLFVw7Gk7VDvJy/TEZ74hKfBC2kdiByE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7810 (0x1e82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: Nov 4 16:11:25 2025 GMT Not After : Nov 11 16:11:25 2025 GMT Subject: CN=690a25ad-91b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:28:b5:bd:08:62:e4:07:8f:7e:eb:4f:62: 63:a9:8e:1d:2f:59:85:4e:f6:12:5a:6e:37:5c:40: 8f:f5:29:69:36:c3:62:df:63:30:57:b5:6b:69:df: 49:4c:e7:af:dd:63:3d:4e:9f:16:aa:60:21:96:da: 58:e9:68:6c:2c:43:bf:72:20:b9:de:44:d4:41:3b: 6a:d9:49:a1:90:58:cc:3b:46:fe:04:30:11:e1:ee: f9:de:1d:bc:9e:52:0c:3f:bd:89:2b:50:22:6d:a6: ce:3e:d7:7a:2f:92:0c:ed:cf:9f:2d:6c:5a:d7:50: 28:99:f5:87:cc:9b:8e:1c:a9:5e:81:fc:57:78:79: c1:d1:7a:14:06:e0:6d:d1:c9:2b:d4:96:1c:df:e6: 02:5d:56:93:bf:07:17:72:0f:3c:58:06:b5:97:e7: 66:43:c1:ca:2d:06:80:56:74:ae:56:ec:81:c5:cc: 9a:c3:e9:5c:c5:67:99:77:c8:08:2c:28:9d:8e:0b: 26:3b:c0:c1:38:b7:df:14:1d:8f:f4:af:49:d2:f8: 7d:e1:55:9b:dd:b2:ab:82:64:82:47:6e:23:50:7e: 56:2c:d4:b8:65:4f:71:b8:8d:9d:c6:5e:2a:10:97: 46:b6:bd:d6:a5:15:40:36:2b:94:13:c0:1a:22:e5: d4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:E3:D2:E7:8C:20:23:89:D8:0D:CC:78:44:16:93:B5:7E:AC:55 X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:07:a1:5d:b5:c1:49:62:ef:92:0d:b5:15:19:4f:10:af:7b: ce:2f:55:71:4d:cb:bb:84:d1:ab:38:78:2f:5d:ed:35:ff:28: 99:2c:21:cb:21:42:47:44:3c:6a:0a:c2:9d:b6:5d:fd:bf:56: 49:32:c0:7a:f4:02:c5:d9:53:08:50:1c:3b:d1:70:32:b6:55: 68:09:59:2b:58:e5:b3:6c:9c:48:4d:ea:94:df:25:e2:3f:22: db:68:77:3f:2b:1e:fc:3b:1e:06:60:31:4f:29:37:a6:d2:ab: c8:31:f7:6a:bb:2d:14:41:7e:c7:7c:c9:16:c0:5a:6e:8a:19: 66:14:7d:ce:9e:6e:59:03:74:81:ad:7a:26:1b:25:25:a6:3a: 7b:4c:f7:99:60:3c:14:28:cf:9c:a1:b8:c3:bb:cd:e8:71:59: f1:d1:55:3b:d1:17:61:d0:68:b1:67:d8:d5:42:a5:96:ad:5d: 41:0e:00:f0:0a:76:05:16:14:4e:63:66:41:cc:de:f9:08:91: 42:87:0e:07:95:33:c5:01:c0:97:80:f5:8a:4c:ed:b4:51:79: f1:e6:ec:be:52:25:00:62:5e:bf:33:c0:7c:3b:59:fd:b4:f7: bf:11:b0:4b:ec:ee:35:4c:02:a5:03:c6:c4:cb:76:94:8f:2e: ba:c3:0f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjUxMTA0MTYxMTI1WhcNMjUxMTExMTYxMTI1WjAYMRYwFAYD VQQDEw02OTBhMjVhZC05MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN8otb0IYuQHj37rT2JjqY4dL1mFTvYSWm43XECP9SlpNsNi32MwV7Vrad9J TOev3WM9Tp8WqmAhltpY6WhsLEO/ciC53kTUQTtq2UmhkFjMO0b+BDAR4e753h28 nlIMP72JK1AibabOPtd6L5IM7c+fLWxa11AomfWHzJuOHKlegfxXeHnB0XoUBuBt 0ckr1JYc3+YCXVaTvwcXcg88WAa1l+dmQ8HKLQaAVnSuVuyBxcyaw+lcxWeZd8gI LCidjgsmO8DBOLffFB2P9K9J0vh94VWb3bKrgmSCR24jUH5WLNS4ZU9xuI2dxl4q EJdGtr3WpRVANiuUE8AaIuXUfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv049Ln jCAjidgNzHhEFpO1fqxVMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuB6FdtcFJYu+SDbUVGU8Qr3vOL1VxTcu7hNGrOHgvXe01/yiZLCHL IUJHRDxqCsKdtl39v1ZJMsB69ALF2VMIUBw70XAytlVoCVkrWOWzbJxITeqU3yXi PyLbaHc/Kx78Ox4GYDFPKTem0qvIMfdquy0UQX7HfMkWwFpuihlmFH3Onm5ZA3SB rXomGyUlpjp7TPeZYDwUKM+cobjDu83ocVnx0VU70Rdh0GixZ9jVQqWWrV1BDgDw CnYFFhROY2ZBzN75CJFChw4HlTPFAcCXgPWKTO20UXnx5uy+UiUAYl6/M8B8O1n9 tPe/EbBL7O41TAKlA8bEy3aUjy66ww9T -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:33 2025 by rpki-client