$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: Yfbdc8L2lKd0EFJp1EefDGk7K/GWNCBvVEWc91G24B0= Subject key identifier: 54:95:24:5A:8E:8A:1D:0E:5E:07:13:ED:20:99:6D:D3:F3:77:93:E5 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 26A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2695 Signing time: Mon 20 Oct 2025 15:52:28 +0000 Manifest this update: Mon 20 Oct 2025 15:52:27 +0000 Manifest next update: Mon 27 Oct 2025 15:52:27 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: H2I2SU2+WDKf4mc0auEwoI14WgqZJwbCIoOMnOHNLh0=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9896 (0x26a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Oct 20 15:52:27 2025 GMT Not After : Oct 27 15:52:27 2025 GMT Subject: CN=68f65abb-18bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:b2:f7:57:b5:ce:82:df:e2:37:87:34:37: 75:06:c9:24:b4:de:c6:5b:ea:cb:7a:56:6a:72:ad: 96:98:1a:d5:ce:d2:e0:15:71:56:14:42:9a:20:a9: 8c:b5:5b:b4:84:0d:c4:f7:80:67:d7:27:92:00:52: 45:9e:24:26:1b:d0:98:ec:d3:8b:27:c6:f2:b2:d1: f4:19:d3:b0:f3:6d:e5:dc:8f:2f:27:67:b5:88:1d: ed:d6:6e:5c:1a:95:ac:8a:cf:f8:75:14:42:79:d6: d4:4b:a6:43:9c:bc:f9:4c:2d:dd:64:3f:a6:ff:b6: 90:25:6e:64:24:65:e3:c6:26:93:fa:e1:a0:18:22: 93:d7:8c:e0:28:1d:54:97:2e:d7:2c:78:a9:85:07: 13:ac:75:6e:72:7b:7f:80:5e:b9:53:fd:fb:7e:02: 90:f5:3f:ad:2a:d4:d7:f5:d8:c2:aa:ce:8a:00:43: 3e:1e:d4:de:ad:58:44:de:9f:e8:ee:5c:01:9b:57: e4:17:b1:1b:9b:74:ad:e3:40:d0:39:d9:45:8b:66: 15:75:61:af:4c:71:8d:23:c1:29:f9:e4:f0:3c:b5: 71:d3:12:19:90:78:20:29:e3:27:78:1a:a2:c9:00: 89:c0:ac:51:77:10:a7:44:09:af:af:e5:cd:a0:57: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:95:24:5A:8E:8A:1D:0E:5E:07:13:ED:20:99:6D:D3:F3:77:93:E5 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:7c:be:3a:7d:ed:9a:04:5c:da:93:6e:44:ae:e8:a8:3a: b0:88:c1:90:28:cc:e6:a0:3c:65:3d:29:e1:ae:1c:b2:c8:4d: 32:ac:2f:1b:a0:04:91:34:47:d5:a9:78:7c:83:60:be:cf:77: 29:96:8e:0f:52:ca:bf:41:32:c1:c8:ab:0b:8b:36:15:bd:3e: fc:82:ad:9d:94:eb:e7:67:01:c4:8f:47:c9:c6:8e:86:85:88: 0a:58:29:4d:de:09:ee:ab:35:03:09:2f:aa:21:fc:24:ff:ad: f3:fd:38:97:29:67:0b:90:89:8f:d1:22:5d:77:33:62:11:7d: 52:73:d7:b3:0e:1b:d9:4d:6c:fc:1b:40:71:38:22:d7:8b:c8: 59:e6:3b:5f:9a:07:0a:4a:51:98:41:36:43:4d:f7:cb:fb:53: 21:03:39:8f:a3:67:a6:a8:2b:5f:b2:58:a8:70:71:fc:44:78: d1:a0:7c:54:5b:54:f6:bc:9c:86:a5:9b:e9:14:c1:13:cc:cd: 17:a2:c2:c0:d1:ab:c9:a7:d1:56:eb:7d:70:f4:c7:dd:47:2a: 21:fa:05:66:6c:63:bb:03:2f:67:c9:00:43:f8:01:00:43:c9: 5b:ae:85:e2:02:83:80:f7:16:72:5d:c1:6e:43:26:40:6c:77: 5f:70:03:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUxMDIwMTU1MjI3WhcNMjUxMDI3MTU1MjI3WjAYMRYwFAYD VQQDEw02OGY2NWFiYi0xOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkey91e1zoLf4jeHNDd1BskktN7GW+rLelZqcq2WmBrVztLgFXFWFEKaIKmM tVu0hA3E94Bn1yeSAFJFniQmG9CY7NOLJ8bystH0GdOw823l3I8vJ2e1iB3t1m5c GpWsis/4dRRCedbUS6ZDnLz5TC3dZD+m/7aQJW5kJGXjxiaT+uGgGCKT14zgKB1U ly7XLHiphQcTrHVucnt/gF65U/37fgKQ9T+tKtTX9djCqs6KAEM+HtTerVhE3p/o 7lwBm1fkF7Ebm3St40DQOdlFi2YVdWGvTHGNI8Ep+eTwPLVx0xIZkHggKeMneBqi yQCJwKxRdxCnRAmvr+XNoFexZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSVJFqO ih0OXgcT7SCZbdPzd5PlMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFPXy+On3tmgRc2pNuRK7oqDqwiMGQKMzmoDxlPSnhrhyyyE0yrC8b oASRNEfVqXh8g2C+z3cplo4PUsq/QTLByKsLizYVvT78gq2dlOvnZwHEj0fJxo6G hYgKWClN3gnuqzUDCS+qIfwk/63z/TiXKWcLkImP0SJddzNiEX1Sc9ezDhvZTWz8 G0BxOCLXi8hZ5jtfmgcKSlGYQTZDTffL+1MhAzmPo2emqCtfsliocHH8RHjRoHxU W1T2vJyGpZvpFMETzM0XosLA0avJp9FW631w9MfdRyoh+gVmbGO7Ay9nyQBD+AEA Q8lbroXiAoOA9xZyXcFuQyZAbHdfcAN1 -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:52 2025 by rpki-client