$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: Yp/45pekjfyy+l6yxdVMdTlRCgqO3CtU5s8cMlXLU0A= Subject key identifier: BB:3D:7D:B2:FA:9D:A4:AE:86:47:02:2A:A3:95:09:F5:AD:02:3B:4F Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 013B Signing time: Wed 05 Nov 2025 04:55:28 +0000 Manifest this update: Wed 05 Nov 2025 04:55:27 +0000 Manifest next update: Wed 12 Nov 2025 04:55:27 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: DlZCeoLrL3rRiG8jfrFv6ZCpB2sZtbsgxfQNlKNMMDA=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: TiDsN2FNPwgHeiELsvw5/2Nk6unCe1gkLq5nmI7beNI=) 4: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Nov 5 04:55:27 2025 GMT Not After : Nov 12 04:55:27 2025 GMT Subject: CN=690ad8c0-663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:0b:e7:6f:0e:e9:a6:a6:a0:7c:1e:8c:fc: 78:c3:2b:a1:96:9d:14:73:87:89:39:b9:27:de:86: d3:b5:3d:eb:fa:c7:43:da:09:83:d9:f6:37:50:09: 54:10:89:42:f5:00:d2:61:86:1d:1f:98:0e:e1:92: da:01:79:05:26:e3:a7:61:37:4d:c5:fb:3b:e9:00: 07:27:18:8f:d1:41:e4:d9:d8:e9:6f:27:bd:a7:11: 94:f7:a2:2b:d5:01:c6:88:4f:72:56:d2:19:f2:1b: 32:92:9c:ac:29:5c:d0:12:6b:1d:4c:57:90:83:ea: 33:0d:c2:fd:25:f8:87:91:17:b2:42:e4:7d:3f:38: 71:f9:fd:3f:ef:9b:c0:26:e1:64:09:9e:1d:94:83: 26:03:ef:b6:a8:8e:fb:1e:7f:7a:00:b7:91:07:d7: b0:21:4f:92:e0:ef:33:d3:60:46:3f:7e:53:b3:59: e2:92:ee:c8:c1:6b:2c:8b:5c:1c:67:1e:c5:66:bc: 54:26:a8:03:0e:bf:67:32:0e:a9:a9:d2:d7:1a:ed: d7:d8:d0:16:9e:12:63:ef:6b:1e:ec:1f:1b:db:4a: 37:3c:45:08:f1:3b:51:3b:eb:3a:97:f8:8e:ce:c2: 0b:48:a2:4d:63:91:93:69:ac:1e:cd:99:b8:cc:68: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3D:7D:B2:FA:9D:A4:AE:86:47:02:2A:A3:95:09:F5:AD:02:3B:4F X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:36:ae:51:c3:09:ce:67:a9:ef:dd:f6:b8:0a:93:61:fe:06: 07:2a:65:3f:32:84:94:51:0a:e6:cc:18:e3:b6:54:bb:d3:35: 86:ba:0b:fa:ee:4e:9a:79:7e:7f:a2:af:68:72:bf:a9:b8:cf: c1:e6:2a:10:72:10:5d:f1:6e:1e:f9:32:6c:85:df:62:48:51: d4:62:a1:fc:c7:7f:d1:1a:07:34:ef:79:21:a9:6d:9e:62:df: b4:48:99:1b:56:22:35:82:a0:45:65:3e:23:48:25:10:54:56: 0b:f6:3a:f3:78:f7:72:6c:ae:98:fd:5e:c4:fe:6e:ab:1e:3c: 17:7f:49:7d:f2:27:9b:17:65:4a:2c:c3:3c:41:05:b3:f3:dd: c4:11:78:f0:ff:ff:f8:1d:c7:d7:7f:95:3f:e6:52:3b:a3:0e: cb:7c:57:b8:b5:09:50:3f:cd:57:76:61:f5:8e:b1:ca:94:66: eb:22:13:59:61:6e:7d:f4:d1:49:7a:89:31:18:91:4b:1d:83: 31:c4:d6:84:3a:b5:f3:27:a5:2c:e6:b3:e3:08:dc:bb:e5:2e: 18:de:91:da:94:8f:d2:4d:35:77:a7:8c:42:eb:c4:a4:64:9f: b7:3b:3b:13:c7:69:15:bf:37:67:02:78:1b:8d:45:5c:62:44: 5c:b9:0c:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUxMTA1MDQ1NTI3WhcNMjUxMTEyMDQ1NTI3WjAYMRYwFAYD VQQDEw02OTBhZDhjMC02NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDsL528O6aamoHwejPx4wyuhlp0Uc4eJObkn3obTtT3r+sdD2gmD2fY3UAlU EIlC9QDSYYYdH5gO4ZLaAXkFJuOnYTdNxfs76QAHJxiP0UHk2djpbye9pxGU96Ir 1QHGiE9yVtIZ8hsykpysKVzQEmsdTFeQg+ozDcL9JfiHkReyQuR9Pzhx+f0/75vA JuFkCZ4dlIMmA++2qI77Hn96ALeRB9ewIU+S4O8z02BGP35Ts1niku7IwWssi1wc Zx7FZrxUJqgDDr9nMg6pqdLXGu3X2NAWnhJj72se7B8b20o3PEUI8TtRO+s6l/iO zsILSKJNY5GTaawezZm4zGiWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLs9fbL6 naSuhkcCKqOVCfWtAjtPMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNq5RwwnOZ6nv3fa4CpNh/gYHKmU/MoSUUQrmzBjjtlS70zWGugv6 7k6aeX5/oq9ocr+puM/B5ioQchBd8W4e+TJshd9iSFHUYqH8x3/RGgc073khqW2e Yt+0SJkbViI1gqBFZT4jSCUQVFYL9jrzePdybK6Y/V7E/m6rHjwXf0l98iebF2VK LMM8QQWz893EEXjw///4HcfXf5U/5lI7ow7LfFe4tQlQP81XdmH1jrHKlGbrIhNZ YW599NFJeokxGJFLHYMxxNaEOrXzJ6Us5rPjCNy75S4Y3pHalI/STTV3p4xC68Sk ZJ+3OzsTx2kVvzdnAngbjUVcYkRcuQzU -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:12 2025 by rpki-client