$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: 7UAK0Jtq8GJoWzMmY7kMYKS/dOIF1eUU08mKhHCJDes= Subject key identifier: B9:3D:BB:E3:EB:AA:ED:83:23:BA:0F:A5:3B:A7:63:4A:58:DE:DD:8D Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E64 Signing time: Tue 04 Nov 2025 16:12:55 +0000 Manifest this update: Tue 04 Nov 2025 16:12:54 +0000 Manifest next update: Tue 11 Nov 2025 16:12:54 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: rvJXLdVvzgLD/vPpWf+LLg1RzS6DLHpWO5DawYcSQxc=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: ff+yRWpZGVwQu2/+ce6wo5vQ/4ykM8fNsCLeEkORRWk=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: XJKFjiP3tvsMhs6LmvK7B6XUUWrtRbubwh2zJ/jKEZ0=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: u7p+nz5w2jpHdQPlyKnwRdRnTG51oOxdLpI/jwgWuSM=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7987 (0x1f33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Nov 4 16:12:54 2025 GMT Not After : Nov 11 16:12:54 2025 GMT Subject: CN=690a2607-c396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:2d:64:66:f1:93:f8:3d:2f:4d:28:1b:83: 86:76:4f:64:1b:48:e3:01:6e:24:9f:0d:88:d8:81: 62:96:fe:b1:79:c3:64:9c:a2:62:c5:ed:ad:0b:bf: 6c:19:89:c8:3b:12:57:2b:db:ee:80:0d:fc:d2:f7: e8:89:03:02:3e:d7:5d:ec:af:6b:ce:34:b8:cb:59: 80:37:4a:a2:c8:34:56:4e:f2:05:fc:0b:9b:fe:cd: 24:d2:dd:d9:6e:92:9b:e3:5a:d9:f4:21:07:0e:5c: 98:ef:88:2a:f0:c9:a7:bf:19:29:ee:8e:d4:a5:32: 10:52:7b:80:5a:f7:b5:08:3d:aa:70:97:a0:78:37: 33:be:23:08:d5:5c:a3:af:cc:44:93:60:c2:1e:b1: 82:bb:05:6f:a9:38:f4:85:eb:7b:ca:41:b8:bd:e5: 71:42:9c:40:53:3a:4a:37:8e:c7:82:b2:41:d8:44: c8:7a:81:4c:f8:eb:64:59:3c:d4:69:2e:7c:54:7c: 95:a6:fd:9d:ff:34:4e:af:83:65:05:ce:34:d4:bb: 42:49:9e:dc:7e:6d:eb:45:c0:20:66:8e:11:16:6c: 5c:3d:78:6c:72:15:dc:9d:ea:11:9f:cf:76:b8:7e: e8:e2:07:ac:1d:e6:f5:52:8e:5d:b7:9b:86:62:fc: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3D:BB:E3:EB:AA:ED:83:23:BA:0F:A5:3B:A7:63:4A:58:DE:DD:8D X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b8:f8:93:f5:90:80:50:27:39:db:92:26:43:8d:04:6f:aa: e6:e0:a0:46:18:c6:73:e4:c1:76:aa:ab:23:36:b1:6e:ff:01: bc:78:b4:3a:fc:99:9a:c9:c9:ae:9d:3a:91:c6:9b:50:0f:01: 00:29:8d:c4:48:ff:7a:4b:4f:32:a9:ed:77:69:a0:d3:4b:cf: 5f:db:5a:cc:d6:ea:d7:da:dc:2b:2f:7b:0e:ea:83:f1:32:e9: ef:ab:72:6b:3d:3f:a3:37:8a:18:f7:7d:ff:db:a3:f7:a4:99: 4d:61:26:93:ba:22:f9:aa:2d:38:d0:17:a4:3f:3d:d2:e2:20: ab:cc:33:8b:5c:f0:3c:f7:63:c9:d0:db:b2:07:7c:d1:5c:70: b6:2d:33:dc:3d:dc:f1:0b:35:d7:39:78:55:b7:5c:cf:f7:db: 3f:b3:e1:85:3d:6b:9b:81:32:45:ff:d5:d8:e3:0b:58:ae:49: cc:be:75:67:18:68:3d:6e:e2:17:95:fd:76:63:74:0c:62:86: a3:fd:d2:51:1e:47:2a:70:3e:08:cb:2f:b7:80:7e:05:f1:89: b9:f1:b3:fa:c7:5c:f5:a7:8b:97:26:63:d4:61:ae:5d:a1:44: 4c:e3:12:76:95:f3:3e:ca:d3:8a:f7:68:8d:4a:25:b6:0e:9e: 64:fc:8d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMTA0MTYxMjU0WhcNMjUxMTExMTYxMjU0WjAYMRYwFAYD VQQDEw02OTBhMjYwNy1jMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T8tZGbxk/g9L00oG4OGdk9kG0jjAW4knw2I2IFilv6xecNknKJixe2tC79s GYnIOxJXK9vugA380vfoiQMCPtdd7K9rzjS4y1mAN0qiyDRWTvIF/Aub/s0k0t3Z bpKb41rZ9CEHDlyY74gq8Mmnvxkp7o7UpTIQUnuAWve1CD2qcJegeDczviMI1Vyj r8xEk2DCHrGCuwVvqTj0het7ykG4veVxQpxAUzpKN47HgrJB2ETIeoFM+OtkWTzU aS58VHyVpv2d/zROr4NlBc401LtCSZ7cfm3rRcAgZo4RFmxcPXhschXcneoRn892 uH7o4gesHeb1Uo5dt5uGYvy++wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLk9u+Pr qu2DI7oPpTunY0pY3t2NMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9uPiT9ZCAUCc525ImQ40Eb6rm4KBGGMZz5MF2qqsjNrFu/wG8eLQ6 /JmaycmunTqRxptQDwEAKY3ESP96S08yqe13aaDTS89f21rM1urX2twrL3sO6oPx Munvq3JrPT+jN4oY933/26P3pJlNYSaTuiL5qi040BekPz3S4iCrzDOLXPA892PJ 0NuyB3zRXHC2LTPcPdzxCzXXOXhVt1zP99s/s+GFPWubgTJF/9XY4wtYrknMvnVn GGg9buIXlf12Y3QMYoaj/dJRHkcqcD4Iyy+3gH4F8Ym58bP6x1z1p4uXJmPUYa5d oURM4xJ2lfM+ytOK92iNSiW2Dp5k/I2H -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:00 2025 by rpki-client