$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: y/T/cZzXEFUBHRXfO9chyn7sDbPcwYJCu59WqIIIYTI= Subject key identifier: E5:EE:65:91:74:52:26:B2:FA:6E:EC:80:63:09:17:D9:78:E5:2F:9E Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E63 Signing time: Sun 02 Nov 2025 16:07:42 +0000 Manifest this update: Sun 02 Nov 2025 16:07:42 +0000 Manifest next update: Sun 09 Nov 2025 16:07:42 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: J4BHk+xlSEVF6KNZJiqqHDhb3jGbIk/lJqTojOOCLNk=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: ff+yRWpZGVwQu2/+ce6wo5vQ/4ykM8fNsCLeEkORRWk=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: XJKFjiP3tvsMhs6LmvK7B6XUUWrtRbubwh2zJ/jKEZ0=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: u7p+nz5w2jpHdQPlyKnwRdRnTG51oOxdLpI/jwgWuSM=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7986 (0x1f32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Nov 2 16:07:42 2025 GMT Not After : Nov 9 16:07:42 2025 GMT Subject: CN=690781ce-2d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:74:00:97:f2:03:84:ef:a1:eb:9f:51:53: c4:df:19:af:84:15:47:7e:4d:70:ef:6a:db:54:fb: f4:bf:07:58:bf:c4:c7:66:ac:bd:a5:c4:db:42:b8: 78:7b:7b:41:ca:80:74:8c:34:34:13:c3:e5:ae:57: 95:10:0c:af:88:78:8f:30:80:bc:2e:81:48:28:0a: 66:d2:52:ce:9f:86:d8:20:06:d2:3e:89:94:3b:fe: c2:77:3d:0e:cf:8b:21:5c:bf:14:19:e3:66:ce:53: fe:70:37:84:87:a2:ce:4d:bc:fb:ec:7c:11:54:d0: c9:95:03:78:e9:b1:f9:63:94:75:c2:fa:db:bf:c1: 33:25:f5:df:28:23:c7:0a:3b:1f:3c:e8:63:eb:67: 76:22:05:c9:f6:fb:6c:85:b2:fe:05:36:6c:46:9c: ca:df:38:33:15:7b:8a:73:cb:57:d0:f7:7a:00:49: 09:91:f8:df:fb:01:e0:a3:d9:96:d7:73:4c:7e:22: 3e:83:61:75:c9:b3:01:0d:72:99:5f:ef:09:93:3b: 6b:7f:c4:47:a7:af:02:32:ff:30:56:7e:36:83:79: e2:98:e7:eb:a9:1f:0d:70:ea:07:1d:d8:f5:cb:68: dc:2c:25:f1:6e:40:bb:41:17:8d:a5:1c:7d:81:23: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EE:65:91:74:52:26:B2:FA:6E:EC:80:63:09:17:D9:78:E5:2F:9E X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:7b:ea:7d:f0:62:a4:c4:5d:25:7b:63:6a:8a:3c:55:da:db: 16:a8:a6:be:02:ac:45:43:5d:74:25:12:fb:1c:39:63:65:bf: 64:48:c0:6f:4d:a4:8d:62:16:12:b9:d8:88:5a:fd:45:3e:ae: 1b:88:02:fe:4b:6c:2a:a6:bb:84:b4:c9:9d:25:30:21:f4:d2: 23:28:9b:d5:e4:ad:ae:8d:f0:5e:3d:d1:96:73:ef:69:d4:a5: ea:6e:56:40:28:c0:74:0e:08:ef:6e:6f:7b:b0:51:af:fa:e8: 5c:23:91:7d:6c:93:e1:72:8a:72:5a:23:e6:49:02:4f:ca:ab: 1e:a2:7f:f6:08:00:94:7f:7c:42:f3:15:19:99:30:f4:8c:cb: ed:1f:b8:5e:78:eb:38:f6:ca:ae:c0:24:c6:91:4a:17:b3:fd: 95:79:e0:cf:ac:ea:fc:da:c0:a8:dd:35:d0:54:96:1c:1c:00: 5e:0c:dd:ee:af:e4:23:e1:2c:c5:7f:d4:cd:86:73:e9:9b:a2: a7:ab:05:72:8c:11:10:f3:d2:5d:fd:59:8e:51:7c:22:96:ff: d2:f0:39:79:63:07:04:26:7c:72:45:7c:4a:e2:60:46:67:cb: 58:10:95:8a:07:1d:4b:07:6f:73:5a:29:03:b7:64:d2:41:f3: d4:07:5e:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMTAyMTYwNzQyWhcNMjUxMTA5MTYwNzQyWjAYMRYwFAYD VQQDEw02OTA3ODFjZS0yZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IF0AJfyA4TvoeufUVPE3xmvhBVHfk1w72rbVPv0vwdYv8THZqy9pcTbQrh4 e3tByoB0jDQ0E8PlrleVEAyviHiPMIC8LoFIKApm0lLOn4bYIAbSPomUO/7Cdz0O z4shXL8UGeNmzlP+cDeEh6LOTbz77HwRVNDJlQN46bH5Y5R1wvrbv8EzJfXfKCPH CjsfPOhj62d2IgXJ9vtshbL+BTZsRpzK3zgzFXuKc8tX0Pd6AEkJkfjf+wHgo9mW 13NMfiI+g2F1ybMBDXKZX+8Jkztrf8RHp68CMv8wVn42g3nimOfrqR8NcOoHHdj1 y2jcLCXxbkC7QReNpRx9gSOnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXuZZF0 Uiay+m7sgGMJF9l45S+eMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTe+p98GKkxF0le2NqijxV2tsWqKa+AqxFQ110JRL7HDljZb9kSMBv TaSNYhYSudiIWv1FPq4biAL+S2wqpruEtMmdJTAh9NIjKJvV5K2ujfBePdGWc+9p 1KXqblZAKMB0Dgjvbm97sFGv+uhcI5F9bJPhcopyWiPmSQJPyqseon/2CACUf3xC 8xUZmTD0jMvtH7heeOs49squwCTGkUoXs/2VeeDPrOr82sCo3TXQVJYcHABeDN3u r+Qj4SzFf9TNhnPpm6KnqwVyjBEQ89Jd/VmOUXwilv/S8Dl5YwcEJnxyRXxK4mBG Z8tYEJWKBx1LB29zWikDt2TSQfPUB17e -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:23 2025 by rpki-client