$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: cCQaw3J9B8bcCrOa23fFGJ+LMAR86vAw6izVfWRTHr8= Subject key identifier: A1:2A:51:FF:90:8A:76:2D:94:B8:F0:6A:BD:E7:37:34:05:BE:CE:B5 Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 05CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 05C9 Signing time: Sun 19 Oct 2025 00:42:21 +0000 Manifest this update: Sun 19 Oct 2025 00:42:21 +0000 Manifest next update: Sun 26 Oct 2025 00:42:21 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: AEB7qheXhNw4SBfAAbXgDtXJi5P0Mcm/wD00kBTAM3A=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1486 (0x5ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Oct 19 00:42:21 2025 GMT Not After : Oct 26 00:42:21 2025 GMT Subject: CN=68f433ed-7ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:ae:7f:27:ee:eb:55:95:fb:ad:c0:ea:f2: 6f:26:9a:4d:44:64:df:6c:38:8d:b0:03:40:4b:e8: af:9c:da:be:76:5a:c3:3d:b2:35:a2:3d:22:bf:25: ce:0d:a7:e1:8c:ce:13:52:03:1a:6c:30:da:95:3d: 4b:84:b2:66:f0:32:57:e6:5c:b0:74:21:9f:d4:d8: cb:de:98:7f:3c:aa:83:32:3e:26:df:f6:41:99:72: 6f:5b:13:29:0f:43:fa:0a:8c:e6:c1:85:f4:6d:35: de:ec:90:3c:97:62:6f:af:db:dc:e7:8d:36:2f:bc: 6b:41:be:53:85:60:a4:89:21:9d:78:f1:e5:fa:d0: 6f:31:4b:d1:5c:3a:60:e4:c7:90:4f:c1:88:94:ea: 6c:2a:2d:df:e1:35:4b:61:f7:59:c2:2f:08:49:e2: ee:73:5b:69:62:51:ab:54:a0:36:1c:b4:53:91:bb: d5:97:6f:78:da:a6:80:fc:e9:22:a2:4b:a3:de:30: 9f:d7:a2:02:39:f4:2f:9c:6d:ba:ac:f6:63:c1:50: af:44:94:f3:8f:78:0c:de:4f:41:80:59:cc:fb:d9: bc:94:3a:80:dd:50:9d:dc:30:b2:76:69:22:10:c4: b7:a7:70:f0:4d:2a:0b:78:d7:a7:ca:f1:c8:0b:ba: d2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:51:FF:90:8A:76:2D:94:B8:F0:6A:BD:E7:37:34:05:BE:CE:B5 X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5b:be:a0:39:ea:96:2d:b1:3a:79:ab:5e:26:38:1b:a3:37: 3e:8c:a4:0e:07:5d:38:0d:a6:e5:fe:ff:6e:a8:61:c7:c3:4f: 16:04:c3:58:6d:aa:af:b7:f1:35:0a:76:15:1a:a9:4f:5d:f9: cc:59:f2:3c:ca:03:10:a1:24:a1:61:9d:94:55:19:b1:b2:5a: cc:4c:51:68:bc:5a:05:b3:e3:4e:80:1c:a0:67:12:7f:28:37: e7:60:e5:7e:65:ce:80:f4:64:2f:75:56:33:cc:31:df:a4:0c: 1f:2e:13:39:31:75:e6:bf:f9:c3:61:bd:2e:c4:55:51:f5:7c: ab:1e:e2:5a:12:ec:c2:e0:12:22:d6:ff:77:10:74:61:4d:b9: a9:4e:d6:a9:7e:e1:bc:88:76:22:c8:fa:ad:82:7d:97:dc:80: 23:88:65:6d:65:0f:51:e8:50:38:f8:8e:28:dd:7e:a5:3d:ab: 83:06:fb:83:52:a8:ab:d4:71:60:4d:03:25:02:67:9a:bc:ab: de:2c:47:71:9f:eb:c4:d7:bf:a4:44:23:ed:ec:cb:b8:ff:6d: 96:ef:2e:57:46:37:54:ff:00:a4:57:a1:d6:91:94:f3:e5:8f: c5:73:e0:87:a2:cc:63:af:46:b1:9b:ea:d0:18:fa:76:f0:7c: 20:90:86:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUxMDE5MDA0MjIxWhcNMjUxMDI2MDA0MjIxWjAYMRYwFAYD VQQDEw02OGY0MzNlZC03YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tSufyfu61WV+63A6vJvJppNRGTfbDiNsANAS+ivnNq+dlrDPbI1oj0ivyXO DafhjM4TUgMabDDalT1LhLJm8DJX5lywdCGf1NjL3ph/PKqDMj4m3/ZBmXJvWxMp D0P6CozmwYX0bTXe7JA8l2Jvr9vc5402L7xrQb5ThWCkiSGdePHl+tBvMUvRXDpg 5MeQT8GIlOpsKi3f4TVLYfdZwi8ISeLuc1tpYlGrVKA2HLRTkbvVl2942qaA/Oki okuj3jCf16ICOfQvnG26rPZjwVCvRJTzj3gM3k9BgFnM+9m8lDqA3VCd3DCydmki EMS3p3DwTSoLeNenyvHIC7rSrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEqUf+Q inYtlLjwar3nNzQFvs61MB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGW76gOeqWLbE6eateJjgbozc+jKQOB104Dabl/v9uqGHHw08WBMNY baqvt/E1CnYVGqlPXfnMWfI8ygMQoSShYZ2UVRmxslrMTFFovFoFs+NOgBygZxJ/ KDfnYOV+Zc6A9GQvdVYzzDHfpAwfLhM5MXXmv/nDYb0uxFVR9XyrHuJaEuzC4BIi 1v93EHRhTbmpTtapfuG8iHYiyPqtgn2X3IAjiGVtZQ9R6FA4+I4o3X6lPauDBvuD Uqir1HFgTQMlAmeavKveLEdxn+vE17+kRCPt7Mu4/22W7y5XRjdU/wCkV6HWkZTz 5Y/Fc+CHosxjr0axm+rQGPp28HwgkIac -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:24 2025 by rpki-client