$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: BBnj7crCF8tA+MK5a4LEVRGdBXTRdKVvHCIDuwwE8BY= Subject key identifier: 33:4A:02:16:F5:4A:25:C3:2B:EA:A9:3E:1E:0D:02:88:1F:24:8D:0D Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 0590 Signing time: Sun 19 Oct 2025 00:53:24 +0000 Manifest this update: Sun 19 Oct 2025 00:53:24 +0000 Manifest next update: Sun 26 Oct 2025 00:53:24 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: EacwT/dxoMAvfOX3Bci42hrglekvEsvhC1PhBUEpZgI=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CdrfPMZy52he8bpwd/sQIj17yAvkU7L0EqcCRVjCrHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: Oct 19 00:53:24 2025 GMT Not After : Oct 26 00:53:24 2025 GMT Subject: CN=68f43684-c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:b8:1d:be:69:99:4c:f7:e2:45:36:e6:9e: 1c:45:e2:8c:08:c1:9f:61:f0:22:4e:7f:a9:8e:bb: af:cc:e4:2d:79:f7:c7:4e:b0:99:db:63:d9:af:88: a9:88:cb:7b:c7:a8:bb:c8:68:40:c5:42:97:e8:6d: 9f:e8:e3:bd:29:e8:3c:d2:18:dd:c3:d1:49:71:32: e9:91:15:87:1c:47:cb:f4:3d:34:c7:a1:7c:c9:11: 2b:7d:d3:04:7c:39:af:50:3d:4a:61:57:45:bc:6d: ad:36:da:73:56:10:0e:55:1b:b7:f5:c1:9f:8b:6b: 50:f6:a6:b0:78:13:58:2a:e9:4b:62:fe:e7:ce:e3: 25:cb:4a:d5:4a:73:99:0c:47:0f:d2:cf:fb:f5:c8: b2:9e:81:a5:1b:70:dd:38:da:d9:53:fe:c6:ed:b2: 49:47:0b:16:db:6c:3c:12:6a:69:26:5e:55:92:4c: ca:52:23:29:ee:48:c1:9c:e7:2f:e0:c6:aa:db:03: be:7c:1b:d2:68:c3:00:bd:80:05:94:0c:04:7f:4a: 42:40:94:66:ea:db:ac:cb:5a:74:36:e7:20:04:0c: 13:47:2c:aa:14:fc:1f:05:d0:63:73:ff:01:8c:b4: 5b:e3:f5:51:b1:d1:72:46:7a:63:c8:ac:17:79:a7: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:02:16:F5:4A:25:C3:2B:EA:A9:3E:1E:0D:02:88:1F:24:8D:0D X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c2:05:7d:1e:26:d3:27:47:86:59:6e:97:c3:1e:00:11:fc: da:da:b9:28:c6:fe:17:94:5d:f2:cb:20:a9:fb:40:ec:61:47: 47:07:a3:de:0e:10:f2:4f:e5:8e:33:b5:18:68:d5:f7:33:64: 5c:bd:a2:bd:0b:be:ba:6a:99:4f:54:7e:fb:77:f1:d7:e2:ff: 0a:d5:6e:6d:42:18:96:db:c6:49:12:73:a4:02:ce:e5:b6:6e: f3:5f:09:95:0f:9d:4d:f8:d9:51:5e:9c:7e:61:46:1c:be:fc: 73:e4:89:85:37:36:1c:28:1a:56:78:1f:5e:b6:b7:25:6f:bc: 49:ff:40:69:e2:22:6e:db:58:68:a7:49:ff:df:6d:a5:60:00: f4:eb:c5:c5:f7:ff:f3:d7:7e:71:80:c9:94:a7:91:82:69:0a: 41:49:02:2b:26:fb:02:80:07:2a:d9:c1:3a:29:65:76:69:e1: a5:4c:a4:10:e8:fd:3f:fd:7a:82:f8:9b:66:19:34:54:08:81: 47:36:6e:bc:b6:13:ab:f2:82:1d:80:6c:ea:9c:fe:75:d0:0b: 77:c1:2a:95:e2:84:79:02:5e:46:42:40:1d:d6:a0:60:e9:7b: 5f:f9:8f:30:61:0a:55:4e:38:cf:be:fd:86:2d:8b:38:0a:20: e6:56:89:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUxMDE5MDA1MzI0WhcNMjUxMDI2MDA1MzI0WjAYMRYwFAYD VQQDEw02OGY0MzY4NC1jNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjW4Hb5pmUz34kU25p4cReKMCMGfYfAiTn+pjruvzOQteffHTrCZ22PZr4ip iMt7x6i7yGhAxUKX6G2f6OO9Keg80hjdw9FJcTLpkRWHHEfL9D00x6F8yRErfdME fDmvUD1KYVdFvG2tNtpzVhAOVRu39cGfi2tQ9qaweBNYKulLYv7nzuMly0rVSnOZ DEcP0s/79ciynoGlG3DdONrZU/7G7bJJRwsW22w8EmppJl5VkkzKUiMp7kjBnOcv 4Maq2wO+fBvSaMMAvYAFlAwEf0pCQJRm6tusy1p0NucgBAwTRyyqFPwfBdBjc/8B jLRb4/VRsdFyRnpjyKwXeafvhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNKAhb1 SiXDK+qpPh4NAogfJI0NMB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmwgV9HibTJ0eGWW6Xwx4AEfza2rkoxv4XlF3yyyCp+0DsYUdHB6Pe DhDyT+WOM7UYaNX3M2RcvaK9C766aplPVH77d/HX4v8K1W5tQhiW28ZJEnOkAs7l tm7zXwmVD51N+NlRXpx+YUYcvvxz5ImFNzYcKBpWeB9etrclb7xJ/0Bp4iJu21ho p0n/322lYAD068XF9//z135xgMmUp5GCaQpBSQIrJvsCgAcq2cE6KWV2aeGlTKQQ 6P0//XqC+JtmGTRUCIFHNm68thOr8oIdgGzqnP510At3wSqV4oR5Al5GQkAd1qBg 6Xtf+Y8wYQpVTjjPvv2GLYs4CiDmVolV -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:18 2025 by rpki-client