$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: 0MqeM5RrTOHtRuMLkqMKF9cQ07lTdaW2F/bCmtVw2+o= Subject key identifier: FB:2E:04:58:A9:E8:50:B4:E9:20:58:96:86:45:28:BE:8F:D8:6F:39 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0E1A Signing time: Sat 18 Oct 2025 18:29:44 +0000 Manifest this update: Sat 18 Oct 2025 18:29:43 +0000 Manifest next update: Sat 25 Oct 2025 18:29:43 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: DVErd+yNNuGQXUaY9aTlVv5CIgtLT2hm9/uXxcB3Gng=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: wn9BYbDEeMgzZ+nvIIVHE03FH3j72pfXBWyBUiQ/bUc=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: fVV5tH5xnHJ5RPLy9jThqMkcctu4xGaw9Zeg+LUw1yQ=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: xh37AiJohCRfHSRUDjcvxE7B1+32xaC/K8WdUvsEnhs=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: 3DrTSsxaKfHNG5QI6Tt7BoAnrvxk6SFVvs/husXrnBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3649 (0xe41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Oct 18 18:29:43 2025 GMT Not After : Oct 25 18:29:43 2025 GMT Subject: CN=68f3dc97-8bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:35:53:00:1a:19:e1:7b:8b:52:d3:d9:30: f5:65:f2:8d:11:28:10:d4:16:bc:64:0a:d7:36:de: a9:26:0f:f9:f3:6f:f7:33:e8:df:d2:90:fb:80:42: 97:1a:9e:ae:f4:4c:99:73:a0:66:ee:c0:9e:0a:01: 72:0e:1d:a4:83:0e:a5:e8:2d:db:d2:08:14:0f:64: 1b:94:cb:a5:35:40:fd:0d:e6:f2:91:20:e4:05:13: 34:bb:79:98:f9:31:e6:81:d6:82:15:6a:4f:ca:16: d3:b9:7b:0d:57:40:f7:d7:44:f5:95:73:ba:db:c6: 68:2e:93:44:41:81:c8:ec:3a:3b:d0:51:e0:ec:a2: 4c:19:59:a1:a0:a8:45:59:03:a8:ef:40:d6:21:82: e4:96:ba:11:f3:3d:9a:6a:f0:15:47:77:cc:ca:b1: 9d:85:c1:f2:0c:ad:88:ca:5b:ab:99:40:d8:8a:47: cd:64:37:0e:48:0c:36:34:cb:be:8e:13:88:89:eb: 09:ca:47:d3:52:74:2b:28:26:84:be:72:33:f3:03: a6:a9:86:f7:fd:10:15:53:cb:5c:ba:e0:57:f4:6e: 6d:f3:d8:bb:1f:73:e5:4b:20:05:d4:18:3b:c0:10: 4b:09:41:18:fa:89:21:24:24:a1:45:c0:a3:7f:bd: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2E:04:58:A9:E8:50:B4:E9:20:58:96:86:45:28:BE:8F:D8:6F:39 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:89:d6:55:29:59:cc:46:fa:72:f1:7c:0c:bf:8f:fd:13:ee: 2a:1e:a3:ba:a6:1b:b9:70:40:ee:93:3f:b3:17:f9:85:56:9e: 5e:f6:5f:6e:85:d3:5c:14:ca:b9:8d:99:0d:e2:ba:df:92:28: 51:fb:bc:58:73:6d:6c:9b:ac:d4:71:49:d5:47:ac:00:47:b5: 51:23:c4:ae:0d:7f:cf:39:68:80:c2:b8:20:73:5a:2a:73:92: a5:c8:c7:4b:55:78:2d:64:fc:a4:75:5a:bf:12:cd:40:64:1e: 42:82:9e:38:ec:cc:d8:2a:da:fa:2d:42:3f:4f:d3:96:c6:c0: 11:ec:42:88:fe:25:ba:55:5c:db:72:2c:61:65:de:5b:51:a5: 84:98:74:c6:c2:ae:05:2f:03:96:20:67:be:fa:7c:89:ce:65: ef:87:5a:49:60:05:32:af:08:f6:72:7f:7e:15:46:60:ab:a9: 55:af:61:a3:91:8b:53:3b:26:55:93:44:e1:87:20:3f:c4:74: 10:88:ca:4d:1e:bb:b2:73:1f:2b:f5:df:42:f3:f1:6b:c0:3f: d9:fc:b1:2b:12:b6:2c:80:24:a7:15:ca:cd:99:98:f8:22:0d: c3:18:42:eb:55:49:93:a5:19:ea:af:9b:a5:ed:0c:8a:82:99: 83:e8:6b:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUxMDE4MTgyOTQzWhcNMjUxMDI1MTgyOTQzWjAYMRYwFAYD VQQDEw02OGYzZGM5Ny04YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA01UwAaGeF7i1LT2TD1ZfKNESgQ1Ba8ZArXNt6pJg/582/3M+jf0pD7gEKX Gp6u9EyZc6Bm7sCeCgFyDh2kgw6l6C3b0ggUD2QblMulNUD9DebykSDkBRM0u3mY +THmgdaCFWpPyhbTuXsNV0D310T1lXO628ZoLpNEQYHI7Do70FHg7KJMGVmhoKhF WQOo70DWIYLklroR8z2aavAVR3fMyrGdhcHyDK2IylurmUDYikfNZDcOSAw2NMu+ jhOIiesJykfTUnQrKCaEvnIz8wOmqYb3/RAVU8tcuuBX9G5t89i7H3PlSyAF1Bg7 wBBLCUEY+okhJCShRcCjf73DdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsuBFip 6FC06SBYloZFKL6P2G85MB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASidZVKVnMRvpy8XwMv4/9E+4qHqO6phu5cEDukz+zF/mFVp5e9l9u hdNcFMq5jZkN4rrfkihR+7xYc21sm6zUcUnVR6wAR7VRI8SuDX/POWiAwrggc1oq c5KlyMdLVXgtZPykdVq/Es1AZB5Cgp447MzYKtr6LUI/T9OWxsAR7EKI/iW6VVzb cixhZd5bUaWEmHTGwq4FLwOWIGe++nyJzmXvh1pJYAUyrwj2cn9+FUZgq6lVr2Gj kYtTOyZVk0ThhyA/xHQQiMpNHruycx8r9d9C8/FrwD/Z/LErErYsgCSnFcrNmZj4 Ig3DGELrVUmTpRnqr5ul7QyKgpmD6Gvr -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:24 2025 by rpki-client