$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: GoKeBtAdYxI4YdAgZAEJK4cZIRNgVM7sko5e6VWE5bM= Subject key identifier: E1:9B:9E:76:8A:A6:AC:9D:2D:CE:38:7E:89:9E:82:14:FD:76:3C:52 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 038E Signing time: Wed 05 Nov 2025 00:51:53 +0000 Manifest this update: Wed 05 Nov 2025 00:51:53 +0000 Manifest next update: Wed 12 Nov 2025 00:51:53 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: tAmgto+iQ7Oh417VvUpGmSEhGz54VFypq8ulK7oqeu4=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: qjteS7+PGeJuHJ05/h7zgt/nxMTWY1LEwcp5FeqZxrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Nov 5 00:51:53 2025 GMT Not After : Nov 12 00:51:53 2025 GMT Subject: CN=690a9fa9-b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:23:10:83:a4:59:df:2b:a8:83:dc:94:ef: 12:14:32:fb:5b:fa:67:e1:5d:bf:09:41:c2:12:d7: 97:36:48:9f:86:2c:ab:7e:a6:75:11:bb:75:c4:74: 5b:2d:a1:ed:ab:5b:2e:c2:48:fd:d8:0a:98:a7:9d: 22:7c:92:4a:24:0a:34:a5:be:4a:78:a0:c9:f1:e0: 30:10:ca:a5:eb:7c:72:bf:10:93:12:7a:55:86:09: 4b:5c:d8:ca:d9:4a:59:47:8b:ab:47:28:cc:2e:04: 3d:37:cf:8a:bb:c7:3a:9b:6a:5a:df:68:e6:77:66: 54:a8:9e:e6:4c:12:d8:10:61:ce:21:dd:b1:f3:58: 3a:63:9e:d8:90:03:05:d1:cd:77:73:e7:d6:44:2d: fe:f0:50:3e:1a:96:a3:c5:e4:9f:39:23:54:75:a8: d0:ac:40:e2:5b:ed:99:6a:0c:a9:60:92:44:13:ed: 53:30:72:55:25:aa:4b:93:b2:b7:b0:ad:a8:00:aa: cf:58:e9:09:6b:02:4d:e2:87:e7:54:52:c2:be:a0: 66:6b:b9:11:b7:b5:55:41:9c:22:a0:ba:d4:54:d2: 82:23:01:9f:53:64:4c:4c:2e:97:60:98:39:99:9a: 80:0f:27:bc:b0:37:e9:f7:16:5d:ee:ba:81:a4:7c: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9B:9E:76:8A:A6:AC:9D:2D:CE:38:7E:89:9E:82:14:FD:76:3C:52 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:c5:b2:77:b0:c6:a0:37:b7:47:0a:6a:cb:05:d3:ff:10: f1:60:57:f7:d3:e6:f4:98:66:99:0b:ff:3a:b6:1e:22:96:db: 33:a6:48:a0:2f:d8:24:ca:fb:88:e9:a9:dc:79:19:dc:e4:16: b9:48:5f:f3:d4:c7:c9:5c:3a:a2:d4:00:c3:a8:c7:ca:0a:f7: 17:12:67:92:db:f1:ff:22:7e:3d:e5:4c:b1:76:f6:55:63:29: 77:ec:ec:dc:78:33:76:d9:bb:af:7f:af:f3:d7:b0:0d:a3:01: b5:44:94:62:14:65:72:45:d7:a6:44:b6:67:f4:13:13:f4:d5: 46:59:57:3a:68:db:d9:93:46:82:e0:5d:5e:f9:79:78:67:d3: e3:75:ed:bb:03:b8:0a:35:50:36:94:f3:8c:3f:21:a6:bc:4b: 1c:25:8e:4a:6c:80:21:32:b2:74:42:55:13:d6:60:bb:63:f7: 93:c4:90:09:a8:e0:7a:51:93:fa:55:63:df:b9:0e:63:ea:3a: 4c:ac:ad:ff:e9:4e:c9:bc:7c:f3:ac:c8:fd:e9:62:ad:91:2c: 32:5d:e7:9f:a2:fa:79:fd:45:c7:63:82:65:46:f9:c2:20:e5: 1d:fa:bb:ca:1c:39:0a:36:fa:ce:2e:39:93:5c:49:f7:ee:7d: 1c:00:1e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjUxMTA1MDA1MTUzWhcNMjUxMTEyMDA1MTUzWjAYMRYwFAYD VQQDEw02OTBhOWZhOS1iMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB4jEIOkWd8rqIPclO8SFDL7W/pn4V2/CUHCEteXNkifhiyrfqZ1Ebt1xHRb LaHtq1suwkj92AqYp50ifJJKJAo0pb5KeKDJ8eAwEMql63xyvxCTEnpVhglLXNjK 2UpZR4urRyjMLgQ9N8+Ku8c6m2pa32jmd2ZUqJ7mTBLYEGHOId2x81g6Y57YkAMF 0c13c+fWRC3+8FA+GpajxeSfOSNUdajQrEDiW+2ZagypYJJEE+1TMHJVJapLk7K3 sK2oAKrPWOkJawJN4ofnVFLCvqBma7kRt7VVQZwioLrUVNKCIwGfU2RMTC6XYJg5 mZqADye8sDfp9xZd7rqBpHxUbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGbnnaK pqydLc44fomeghT9djxSMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnfcWyd7DGoDe3RwpqywXT/xDxYFf30+b0mGaZC/86th4iltszpkig L9gkyvuI6anceRnc5Ba5SF/z1MfJXDqi1ADDqMfKCvcXEmeS2/H/In495UyxdvZV Yyl37OzceDN22buvf6/z17ANowG1RJRiFGVyRdemRLZn9BMT9NVGWVc6aNvZk0aC 4F1e+Xl4Z9Pjde27A7gKNVA2lPOMPyGmvEscJY5KbIAhMrJ0QlUT1mC7Y/eTxJAJ qOB6UZP6VWPfuQ5j6jpMrK3/6U7JvHzzrMj96WKtkSwyXeefovp5/UXHY4JlRvnC IOUd+rvKHDkKNvrOLjmTXEn37n0cAB4y -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:00 2025 by rpki-client