$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: QiSUl5lbQcufifKICYgewMOC4V+N2kYXk3Mt95Qt8fk= Subject key identifier: 76:04:B2:49:50:3A:3D:DC:3C:78:BC:32:DE:3D:D0:6E:37:15:4B:BA Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 1731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 1724 Signing time: Sun 02 Nov 2025 16:37:48 +0000 Manifest this update: Sun 02 Nov 2025 16:37:48 +0000 Manifest next update: Sun 09 Nov 2025 16:37:48 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: WmdGyjUk58P7IXaFCpDqJqVp5URr3AgKyvBNwuE4Hw8=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5937 (0x1731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Nov 2 16:37:48 2025 GMT Not After : Nov 9 16:37:48 2025 GMT Subject: CN=690788dc-c61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:a3:9b:a5:78:7a:03:a7:7f:8f:48:4e:68: 04:2d:46:32:33:26:d3:49:10:a3:81:e9:f6:3a:b6: 4a:fc:c4:97:00:68:e6:36:92:c2:cd:2f:90:3e:f1: 78:9b:44:7b:1e:b1:b9:04:f4:4d:d7:f3:87:a4:09: 63:fd:30:49:06:9a:a4:d4:68:8b:f1:a5:95:ff:97: 6e:f6:6f:d1:0b:e0:1f:ef:b8:f2:4e:25:7c:b8:c6: 6b:72:90:84:1b:79:82:ff:13:c3:26:11:f0:f2:fa: ab:45:4b:fd:a6:45:db:d0:8d:58:59:80:58:7f:9b: 73:d5:a4:96:dc:10:61:af:57:2d:ac:43:fe:98:09: fe:8f:e1:c9:49:38:74:82:d0:f8:2c:6e:4b:dd:ac: 8d:f9:a4:dd:f1:d5:a4:c5:08:8f:95:82:d9:1f:4a: 07:02:a1:5c:98:8e:29:7e:97:a9:7d:a4:14:8c:54: 24:cc:08:73:11:82:a1:cc:30:c0:68:ef:f8:99:72: cb:6e:24:74:41:0e:71:33:17:b3:60:53:68:dc:c7: ae:42:9f:a7:d8:b7:8e:81:c4:3d:ae:2b:09:9d:6d: f5:0a:db:f9:f2:66:6a:89:f5:fc:4b:be:e8:d9:10: 6e:e9:87:ee:1d:e5:4f:21:22:7a:ad:23:cc:8e:2a: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:04:B2:49:50:3A:3D:DC:3C:78:BC:32:DE:3D:D0:6E:37:15:4B:BA X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8c:8f:36:85:94:87:83:1e:70:be:e6:23:b8:0a:81:cd:4f: cb:69:98:30:39:9b:77:51:ae:54:65:db:aa:a9:ee:52:0c:c3: a3:4f:d5:41:ed:30:e3:e1:d6:bc:36:a7:fc:5b:7c:3e:d5:8d: e0:34:34:06:f3:b1:6b:c0:67:59:33:60:bb:f9:b7:a8:3e:d4: 4f:d1:96:15:bc:9a:60:06:68:e5:e2:ec:34:4c:1b:bc:a5:ab: de:90:d2:92:97:a5:6e:22:9d:12:f9:b4:c3:66:e1:9c:e5:25: bb:57:ec:77:78:64:f0:a4:cb:43:a8:d2:00:16:4e:c7:27:e0: 7b:6c:c2:2d:39:d2:bf:f0:89:74:39:1b:b2:da:53:bb:5f:db: e9:09:81:28:52:23:89:46:39:48:e2:30:7b:1a:0e:d7:04:5e: 23:19:a1:47:95:b4:97:71:61:0e:dc:ba:c1:e2:3b:8e:77:56: d8:3d:10:c6:10:f8:b3:73:56:0a:48:0c:c4:ed:d7:a0:f7:1d: 53:cd:4f:10:f9:e5:53:30:4f:20:f4:7d:f1:74:8e:08:61:e6: 9b:f5:08:82:84:0c:43:36:aa:76:e9:df:e5:57:f5:ce:9f:88: 3f:45:43:ef:09:15:91:24:33:fa:0b:0a:2e:4a:af:20:df:01: e9:03:9e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUxMTAyMTYzNzQ4WhcNMjUxMTA5MTYzNzQ4WjAYMRYwFAYD VQQDEw02OTA3ODhkYy1jNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcyjm6V4egOnf49ITmgELUYyMybTSRCjgen2OrZK/MSXAGjmNpLCzS+QPvF4 m0R7HrG5BPRN1/OHpAlj/TBJBpqk1GiL8aWV/5du9m/RC+Af77jyTiV8uMZrcpCE G3mC/xPDJhHw8vqrRUv9pkXb0I1YWYBYf5tz1aSW3BBhr1ctrEP+mAn+j+HJSTh0 gtD4LG5L3ayN+aTd8dWkxQiPlYLZH0oHAqFcmI4pfpepfaQUjFQkzAhzEYKhzDDA aO/4mXLLbiR0QQ5xMxezYFNo3MeuQp+n2LeOgcQ9risJnW31Ctv58mZqifX8S77o 2RBu6YfuHeVPISJ6rSPMjiqnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYEsklQ Oj3cPHi8Mt490G43FUu6MB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpjI82hZSHgx5wvuYjuAqBzU/LaZgwOZt3Ua5UZduqqe5SDMOjT9VB 7TDj4da8Nqf8W3w+1Y3gNDQG87FrwGdZM2C7+beoPtRP0ZYVvJpgBmjl4uw0TBu8 pavekNKSl6VuIp0S+bTDZuGc5SW7V+x3eGTwpMtDqNIAFk7HJ+B7bMItOdK/8Il0 ORuy2lO7X9vpCYEoUiOJRjlI4jB7Gg7XBF4jGaFHlbSXcWEO3LrB4juOd1bYPRDG EPizc1YKSAzE7deg9x1TzU8Q+eVTME8g9H3xdI4IYeab9QiChAxDNqp26d/lV/XO n4g/RUPvCRWRJDP6CwouSq8g3wHpA57I -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:23 2025 by rpki-client