$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: KhcG9liZ42a2SmJw1F8py0lew7Hk+UmjlatYfSEcTl4= Subject key identifier: AB:7D:BE:06:30:AE:4D:19:91:2B:B4:CD:50:CC:EB:52:23:8B:AE:98 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1E1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1E0E Signing time: Sat 18 Oct 2025 16:23:56 +0000 Manifest this update: Sat 18 Oct 2025 16:23:56 +0000 Manifest next update: Sat 25 Oct 2025 16:23:56 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: NOSPvqw51c6NeeF4fH76xRluRTTMV/yeo3CsLFm+Vgo=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7708 (0x1e1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Oct 18 16:23:56 2025 GMT Not After : Oct 25 16:23:56 2025 GMT Subject: CN=68f3bf1c-7de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:77:c3:99:4f:ba:d9:1e:c2:d1:b2:19:46: 6e:ee:1e:fd:a2:58:b2:81:9b:1b:19:6d:70:cb:b1: 83:1d:b6:59:a0:6a:f9:d8:6d:37:3d:f2:1a:74:de: 12:32:c6:ca:ac:b0:78:12:8d:22:ae:09:e1:aa:c9: 29:bc:7e:bc:f7:f4:aa:2f:a0:bc:64:0b:c7:47:a9: d8:86:95:2e:fb:e6:da:2b:fa:93:57:32:e0:d1:1b: 67:01:07:d6:5b:b5:72:49:9a:41:f5:af:96:ad:53: f6:2a:6f:b9:ca:9d:7a:cb:c0:8f:82:64:6f:51:25: db:2b:6f:fb:b1:54:93:f4:21:3c:a0:b9:0c:6a:94: a9:0d:b9:1d:65:2b:b7:80:bc:f7:23:b2:58:bd:91: 5e:ba:ae:41:b2:50:4e:e9:4e:ff:17:97:6b:b5:40: b8:48:38:63:49:27:53:c8:9d:65:10:85:38:ff:1d: 45:17:58:61:9d:c8:89:2e:1d:d6:fd:8a:0d:6f:bc: 52:ca:58:eb:00:83:f2:4c:35:79:f9:8b:17:de:9a: 50:47:3a:bb:64:b2:96:b3:2c:20:99:d0:8c:a5:00: 1a:94:37:7b:ff:22:dc:cd:70:48:fe:54:21:16:39: 70:f2:51:77:01:7f:5d:17:43:04:79:8d:42:70:3e: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:BE:06:30:AE:4D:19:91:2B:B4:CD:50:CC:EB:52:23:8B:AE:98 X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:14:fe:fe:4b:c1:b2:6e:22:90:f2:7e:fc:4a:b0:fa:e3:f1: c7:46:ce:77:77:2d:ad:dd:71:b7:72:30:00:0a:36:a9:95:a4: a4:19:91:53:88:a7:da:1b:e0:fb:10:27:8e:42:b9:5c:09:0c: d3:47:28:a4:10:d3:d0:3f:7f:c5:01:72:07:61:e2:31:35:dc: 28:33:6c:a2:b0:7e:4a:74:ae:f6:92:f5:36:f7:b9:e2:d5:4f: 21:b8:07:d1:b3:aa:66:62:64:cf:58:45:3e:f9:f2:f6:8b:b1: 4b:cb:98:27:71:6b:8b:56:67:7e:96:e5:9d:b3:59:ea:b9:cf: 02:84:73:7c:63:64:71:71:68:02:a3:53:74:71:17:ed:20:d2: 03:9d:00:4d:e2:c8:62:ce:02:e0:53:a5:b7:6a:5a:1e:60:38: 2a:04:12:ba:12:55:70:89:c9:c1:66:f7:14:5a:87:9c:2c:4f: 25:29:7a:6a:d3:46:03:ca:db:e0:ba:82:a0:55:69:74:09:f7: a6:12:26:03:6d:87:5b:03:e3:f7:32:05:87:72:c0:ec:16:ba: 86:82:ad:39:6a:87:8f:c7:0c:e3:4e:79:62:93:28:a6:89:df: 83:4d:c6:e4:0d:6a:e1:fd:9f:58:e0:2e:ed:ec:13:ea:9a:09: b4:e1:ac:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUxMDE4MTYyMzU2WhcNMjUxMDI1MTYyMzU2WjAYMRYwFAYD VQQDEw02OGYzYmYxYy03ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcp3w5lPutkewtGyGUZu7h79oliygZsbGW1wy7GDHbZZoGr52G03PfIadN4S MsbKrLB4Eo0irgnhqskpvH689/SqL6C8ZAvHR6nYhpUu++baK/qTVzLg0RtnAQfW W7VySZpB9a+WrVP2Km+5yp16y8CPgmRvUSXbK2/7sVST9CE8oLkMapSpDbkdZSu3 gLz3I7JYvZFeuq5BslBO6U7/F5drtUC4SDhjSSdTyJ1lEIU4/x1FF1hhnciJLh3W /YoNb7xSyljrAIPyTDV5+YsX3ppQRzq7ZLKWsywgmdCMpQAalDd7/yLczXBI/lQh Fjlw8lF3AX9dF0MEeY1CcD5ekwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt9vgYw rk0ZkSu0zVDM61Iji66YMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8FP7+S8GybiKQ8n78SrD64/HHRs53dy2t3XG3cjAACjaplaSkGZFT iKfaG+D7ECeOQrlcCQzTRyikENPQP3/FAXIHYeIxNdwoM2yisH5KdK72kvU297ni 1U8huAfRs6pmYmTPWEU++fL2i7FLy5gncWuLVmd+luWds1nquc8ChHN8Y2RxcWgC o1N0cRftINIDnQBN4shizgLgU6W3aloeYDgqBBK6ElVwicnBZvcUWoecLE8lKXpq 00YDytvguoKgVWl0CfemEiYDbYdbA+P3MgWHcsDsFrqGgq05aoePxwzjTnlikyim id+DTcbkDWrh/Z9Y4C7t7BPqmgm04ax4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:16 2025 by rpki-client