$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json) Hash identifier: FMVScwnMktRLrBKxaUBmuNMxrrDAuL9+70DcxXfm13E= Subject key identifier: D8:24:79:75:87:FA:1B:15:5C:E1:DB:01:FB:CB:EF:C9:22:C6:6A:46 Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft Manifest number: 06F1 Signing time: Sat 18 Oct 2025 23:24:06 +0000 Manifest this update: Sat 18 Oct 2025 23:24:06 +0000 Manifest next update: Sat 25 Oct 2025 23:24:06 +0000 Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: /ygSVl9mCdC7jA5YJql6WFo7XvZ+f2ICede4Asnfq64=) 2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Validity Not Before: Oct 18 23:24:06 2025 GMT Not After : Oct 25 23:24:06 2025 GMT Subject: CN=68f42196-1d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2d:d5:bc:51:e0:23:44:c3:d4:d6:da:c7:5e: 1c:02:55:ac:52:0d:2d:cc:76:68:48:eb:dc:3a:9a: 8f:47:c7:fe:c2:80:44:8c:0a:d0:e9:27:9b:6c:bc: be:3c:84:34:ff:a0:da:e6:64:85:54:e2:65:74:5c: 19:b9:b8:7d:4d:e4:d6:66:41:78:f6:e6:69:41:f2: 8f:9d:c6:c6:20:d1:f4:60:4d:d1:e1:23:53:8a:18: 46:0f:a3:79:cf:3b:7d:fa:24:7a:1f:e9:49:81:d8: 80:2b:a2:cf:b4:6e:e4:12:1a:63:54:fd:48:67:09: 74:64:73:06:4b:41:9b:53:e3:bb:49:fd:0e:6a:2e: 41:5e:7a:c1:1a:fd:fd:37:ca:ff:62:44:f3:c8:bb: 60:11:32:c8:f0:db:b7:16:91:da:f6:04:bd:77:ce: 04:a3:db:7f:84:e7:18:8c:06:be:ce:05:3b:97:df: bd:e8:54:73:32:a7:0b:0e:54:9c:3a:63:3a:08:af: 26:4b:f4:c2:0e:0a:e6:e1:de:26:01:2a:79:2a:a4: 06:b0:81:30:b9:b4:1c:f4:79:1d:3c:7d:af:7d:22: fe:95:4c:ab:7c:b6:89:c7:d8:4f:7c:3a:ea:5e:c7: 8d:03:8d:40:dc:7a:5b:2f:30:af:1c:a0:80:b5:b8: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:24:79:75:87:FA:1B:15:5C:E1:DB:01:FB:CB:EF:C9:22:C6:6A:46 X509v3 Authority Key Identifier: keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:67:cd:18:9e:42:ac:8b:8d:07:b0:4b:51:67:58:a9:18:fc: 5d:66:ba:e3:51:7b:b2:ed:24:a2:be:e6:18:90:1d:f6:eb:b0: 7e:42:ed:61:61:de:a3:63:4d:13:46:15:f3:ff:22:21:71:7e: 2b:ae:be:f8:55:01:ee:6f:71:83:39:a7:a4:88:0d:10:33:b1: 1a:8b:69:3d:6c:36:5e:f4:05:23:ff:31:76:e2:da:d8:94:2e: 82:79:0d:0c:a1:a6:b5:94:52:fa:06:e0:03:61:76:a9:78:e5: ea:ec:a6:25:82:72:53:f9:c8:f9:2d:fe:8a:35:fa:28:47:bc: df:f2:f0:9f:d0:43:45:35:08:59:63:f1:69:97:4e:80:04:e1: 66:33:60:fc:de:27:b4:4c:f8:4a:39:11:11:79:b7:42:e3:d7: 1b:50:41:d8:f8:36:9e:99:30:6e:32:c2:03:4b:2c:76:43:0e: 77:a3:19:8b:ec:19:e4:3b:65:8b:4e:26:e5:6f:24:f3:bc:5d: 32:21:76:ab:91:f8:00:5e:72:3a:ce:5c:b6:f4:f7:45:c7:c7: 36:5b:98:58:d9:04:13:25:07:1a:a4:76:cd:f2:c8:ad:d4:20: 92:b0:0a:2a:b1:fc:ae:dd:3c:77:89:03:7d:88:f1:8d:96:c6: a9:89:18:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF OTA5Rjk1NDQwHhcNMjUxMDE4MjMyNDA2WhcNMjUxMDI1MjMyNDA2WjAYMRYwFAYD VQQDEw02OGY0MjE5Ni0xZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7S3VvFHgI0TD1Nbax14cAlWsUg0tzHZoSOvcOpqPR8f+woBEjArQ6SebbLy+ PIQ0/6Da5mSFVOJldFwZubh9TeTWZkF49uZpQfKPncbGINH0YE3R4SNTihhGD6N5 zzt9+iR6H+lJgdiAK6LPtG7kEhpjVP1IZwl0ZHMGS0GbU+O7Sf0Oai5BXnrBGv39 N8r/YkTzyLtgETLI8Nu3FpHa9gS9d84Eo9t/hOcYjAa+zgU7l9+96FRzMqcLDlSc OmM6CK8mS/TCDgrm4d4mASp5KqQGsIEwubQc9HkdPH2vfSL+lUyrfLaJx9hPfDrq XseNA41A3HpbLzCvHKCAtbg9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgkeXWH +hsVXOHbAfvL78kixmpGMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2 MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Z80YnkKsi40HsEtRZ1ipGPxdZrrjUXuy7SSivuYYkB3267B+Qu1h Yd6jY00TRhXz/yIhcX4rrr74VQHub3GDOaekiA0QM7Eai2k9bDZe9AUj/zF24trY lC6CeQ0Moaa1lFL6BuADYXapeOXq7KYlgnJT+cj5Lf6KNfooR7zf8vCf0ENFNQhZ Y/Fpl06ABOFmM2D83ie0TPhKORERebdC49cbUEHY+DaemTBuMsIDSyx2Qw53oxmL 7BnkO2WLTiblbyTzvF0yIXarkfgAXnI6zly29PdFx8c2W5hY2QQTJQcapHbN8sit 1CCSsAoqsfyu3Tx3iQN9iPGNlsapiRgW -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:51 2025 by rpki-client