$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: +NOK8XDgaTd5H48PgP/TZgXKpvTPy9MixGFU2W3uGY4= Subject key identifier: B7:94:BF:ED:D7:F4:39:35:45:3B:91:AE:8E:D1:90:25:7E:C0:AC:0E Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0190 Signing time: Wed 05 Nov 2025 03:43:45 +0000 Manifest this update: Wed 05 Nov 2025 03:43:44 +0000 Manifest next update: Wed 12 Nov 2025 03:43:44 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: aRcVEdAeV0ZI8XLOAlNuff69hoPVnFAgZER0f+mH10o=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: Yi/JWAwchMRWPqpLJdHipgAcW0bADt8JjtD1zk/5zPg=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: 6zc+rZhJnF4vpcd6GmjdYSDq7wBWKRzyhnCBcHAGEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Nov 5 03:43:44 2025 GMT Not After : Nov 12 03:43:44 2025 GMT Subject: CN=690ac7f0-cee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:bc:42:4a:3e:26:29:da:9b:eb:15:37:ed: 5d:ba:cb:c3:ca:b2:5a:68:7f:6b:ec:6f:0b:b8:cf: e0:86:52:07:ff:54:af:6c:3d:44:97:6a:f4:d1:5c: ed:3c:0b:18:48:fe:71:4b:77:d7:1c:86:e1:78:59: 9f:d4:01:9e:25:d7:c4:92:f3:fe:8d:0c:75:3e:5d: 8c:2a:c5:31:e2:fe:07:13:08:b1:17:7d:96:86:96: d0:5e:97:5b:34:8f:ea:ed:7a:69:c3:88:fa:d0:d8: 6e:15:88:ac:dd:db:a5:30:a7:11:f2:c0:d3:83:dc: 32:e1:f8:e9:12:05:7b:03:23:74:46:5d:26:8d:fa: 1a:ef:63:bf:75:94:d8:27:4c:10:70:29:ea:55:bc: c4:e4:51:e8:94:02:d9:24:81:0b:63:87:86:bd:5d: fa:01:d8:2a:53:a7:75:45:ec:3b:3b:37:b9:df:2f: ae:52:61:3c:e4:dd:66:31:bd:86:73:83:89:33:cf: 9d:fe:09:3e:9a:1e:65:73:b8:38:28:4b:f3:33:95: 83:15:e7:a1:3f:f3:18:8f:fa:51:ba:de:06:7d:ac: 31:18:f5:f2:09:01:b7:c0:96:75:6c:7f:58:ce:2e: ad:41:27:96:61:53:c7:ab:75:c4:98:ea:e8:12:51: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:94:BF:ED:D7:F4:39:35:45:3B:91:AE:8E:D1:90:25:7E:C0:AC:0E X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:71:d3:f4:7b:a4:0a:8a:21:fa:73:ad:f7:39:12:6b:5e:6b: 0b:3e:e9:b5:9c:8e:ad:64:b4:3a:46:0b:c2:3f:52:cb:61:8b: 7a:d9:ac:52:86:77:47:7f:99:00:00:ec:05:09:01:d4:64:b5: 0f:47:97:45:82:09:fa:0b:e5:0e:9f:58:05:c8:89:06:58:a9: a8:98:ef:93:17:c0:c5:98:50:2a:e1:da:ab:b4:23:07:1b:fc: a9:13:fb:23:eb:d3:3d:b4:f6:22:63:1e:48:0b:fe:a9:bf:1d: 8f:51:74:96:65:b6:0b:25:f4:d6:a1:3c:39:ef:e8:14:f4:11: c9:0e:c3:d0:83:77:a4:5e:af:2b:b3:0e:20:2d:a6:a6:7f:f1: 7c:de:de:21:6c:05:70:80:95:ea:1e:5b:a8:5c:cb:7b:a8:f2: 3a:b6:0d:d6:0d:2f:0e:59:f8:29:3b:61:75:51:9f:34:36:19: 50:cc:3f:5e:9f:81:4a:38:fe:79:80:3d:92:51:24:50:68:28: d2:01:54:06:a0:60:9d:60:59:35:c6:24:68:be:f3:b3:ff:e2: 99:62:98:de:ea:a3:a2:a8:65:ea:be:12:f4:0a:1c:12:e4:b7: cf:84:dd:05:f2:9a:19:f1:ee:21:d1:2e:f7:7b:8a:e4:e6:1c: 9b:0e:3f:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUxMTA1MDM0MzQ0WhcNMjUxMTEyMDM0MzQ0WjAYMRYwFAYD VQQDEw02OTBhYzdmMC1jZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOW8Qko+Jinam+sVN+1dusvDyrJaaH9r7G8LuM/ghlIH/1SvbD1El2r00Vzt PAsYSP5xS3fXHIbheFmf1AGeJdfEkvP+jQx1Pl2MKsUx4v4HEwixF32WhpbQXpdb NI/q7Xppw4j60NhuFYis3dulMKcR8sDTg9wy4fjpEgV7AyN0Rl0mjfoa72O/dZTY J0wQcCnqVbzE5FHolALZJIELY4eGvV36AdgqU6d1Rew7Oze53y+uUmE85N1mMb2G c4OJM8+d/gk+mh5lc7g4KEvzM5WDFeehP/MYj/pRut4GfawxGPXyCQG3wJZ1bH9Y zi6tQSeWYVPHq3XEmOroElEJfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeUv+3X 9Dk1RTuRro7RkCV+wKwOMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLcdP0e6QKiiH6c633ORJrXmsLPum1nI6tZLQ6RgvCP1LLYYt62axS hndHf5kAAOwFCQHUZLUPR5dFggn6C+UOn1gFyIkGWKmomO+TF8DFmFAq4dqrtCMH G/ypE/sj69M9tPYiYx5IC/6pvx2PUXSWZbYLJfTWoTw57+gU9BHJDsPQg3ekXq8r sw4gLaamf/F83t4hbAVwgJXqHluoXMt7qPI6tg3WDS8OWfgpO2F1UZ80NhlQzD9e n4FKOP55gD2SUSRQaCjSAVQGoGCdYFk1xiRovvOz/+KZYpje6qOiqGXqvhL0ChwS 5LfPhN0F8poZ8e4h0S73e4rk5hybDj9Q -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:15 2025 by rpki-client