$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json) Hash identifier: sh1qfoowwWnRJLzLuhXSBPdhaZeB0Btm+h+7kiFavy8= Subject key identifier: CA:54:2C:C4:84:A1:50:3B:FC:75:EF:69:C9:2D:AD:DC:E8:3B:46:B9 Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft Manifest number: 0B00 Signing time: Sat 18 Oct 2025 20:16:10 +0000 Manifest this update: Sat 18 Oct 2025 20:16:09 +0000 Manifest next update: Sat 25 Oct 2025 20:16:09 +0000 Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: fP/am2WAucUfJ3kUOJsR9ktI7RLx8M6KlqBwOl+1RuY=) 2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: PexI7Ux7URSg3e/gBgi7b1d+EMkFgIyBhb6944l9JRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB Validity Not Before: Oct 18 20:16:09 2025 GMT Not After : Oct 25 20:16:09 2025 GMT Subject: CN=68f3f58a-f03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:c8:b5:a5:ff:df:0e:14:bc:c1:15:fb:cc: 95:c9:3e:69:42:ca:3b:98:9a:58:71:fc:43:a5:4e: 33:99:76:05:db:b9:39:54:24:7b:38:5b:31:dc:3f: 9f:1a:ce:15:b6:b3:c0:68:18:de:25:45:04:51:96: 0b:34:96:42:37:21:b1:c6:eb:61:9f:6a:33:3a:3e: a4:45:80:0b:a5:97:fd:3c:e8:de:83:d0:b3:96:43: e8:1c:e0:84:90:15:a9:22:df:81:d5:61:da:89:d5: 96:ce:7a:6b:de:c5:97:52:8b:c9:e7:f6:68:d1:a5: 07:3b:fb:bd:07:8a:10:27:54:b4:0f:bc:8d:5c:bf: f6:80:94:4d:e0:f6:0d:6d:9d:00:12:b2:f8:ee:5c: 1e:4e:08:3a:47:ab:3a:9d:be:22:12:df:af:72:17: eb:c5:53:c6:a6:d4:f6:06:71:58:52:f3:3f:d4:fe: 14:b3:b8:69:35:b3:80:89:ed:e8:3b:f9:3d:a4:ee: ec:a8:54:f7:47:f8:8b:0e:47:7d:ae:83:78:49:7a: 9b:d1:24:cd:1f:fa:5c:c5:d7:47:a0:36:3c:61:d3: 2a:03:0b:00:2a:32:06:48:92:89:62:ea:75:7c:d2: 57:ef:6c:a9:d7:fa:23:b1:97:8f:87:fc:bd:43:d7: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:54:2C:C4:84:A1:50:3B:FC:75:EF:69:C9:2D:AD:DC:E8:3B:46:B9 X509v3 Authority Key Identifier: keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e1:8c:96:52:dd:2e:a3:ae:9e:28:fd:80:b5:51:10:37:fa: 4a:3b:30:5c:66:b2:01:6e:30:d7:ff:fa:2a:5c:d6:e8:fa:db: a9:4c:1b:24:8d:7f:cc:39:67:71:c2:7a:1b:a3:07:d6:3f:bb: 2c:b3:60:32:0c:fd:ba:bc:59:1c:36:0b:3e:8b:57:65:41:90: f4:1b:88:8d:97:c3:d2:6d:d8:8b:ed:5b:ce:a7:0c:6e:06:94: f0:69:38:22:89:67:eb:79:a9:dd:bb:5b:d4:00:2a:53:da:3f: 1d:85:ce:2c:26:bc:bb:7a:85:56:c5:89:89:cf:cc:0c:63:f8: a8:61:e8:1c:90:e4:c7:11:d8:bd:8d:6c:47:98:c7:a6:b5:e5: b0:e8:f9:b0:d0:58:e1:62:80:28:f9:5f:72:05:6f:9b:0e:6b: 71:3a:55:d2:ef:75:e3:b5:ad:4d:55:10:6c:84:aa:69:71:a6: 4b:af:a3:16:fd:71:f2:e0:67:3d:af:6d:2a:2f:82:82:8d:b8: aa:3d:2d:17:52:c3:e2:0b:bf:99:08:a4:56:27:39:86:f7:44: 7f:e7:c0:6c:7a:ff:91:13:7f:53:fa:f7:13:3f:a4:4d:99:fb: c1:1e:9f:3d:a2:87:0e:37:14:9c:3b:4f:14:59:1f:ec:f6:af: fb:ef:6a:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy ODcyMDczQkIwHhcNMjUxMDE4MjAxNjA5WhcNMjUxMDI1MjAxNjA5WjAYMRYwFAYD VQQDEw02OGYzZjU4YS1mMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R/ItaX/3w4UvMEV+8yVyT5pQso7mJpYcfxDpU4zmXYF27k5VCR7OFsx3D+f Gs4VtrPAaBjeJUUEUZYLNJZCNyGxxuthn2ozOj6kRYALpZf9POjeg9CzlkPoHOCE kBWpIt+B1WHaidWWznpr3sWXUovJ5/Zo0aUHO/u9B4oQJ1S0D7yNXL/2gJRN4PYN bZ0AErL47lweTgg6R6s6nb4iEt+vchfrxVPGptT2BnFYUvM/1P4Us7hpNbOAie3o O/k9pO7sqFT3R/iLDkd9roN4SXqb0STNH/pcxddHoDY8YdMqAwsAKjIGSJKJYup1 fNJX72yp1/ojsZePh/y9Q9cJhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpULMSE oVA7/HXvacktrdzoO0a5MB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs bGh0NV9oSkdsQmNvY2djN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU4YyWUt0uo66eKP2AtVEQN/pKOzBcZrIBbjDX//oqXNbo+tupTBsk jX/MOWdxwnobowfWP7sss2AyDP26vFkcNgs+i1dlQZD0G4iNl8PSbdiL7VvOpwxu BpTwaTgiiWfreandu1vUACpT2j8dhc4sJry7eoVWxYmJz8wMY/ioYegckOTHEdi9 jWxHmMemteWw6Pmw0FjhYoAo+V9yBW+bDmtxOlXS73Xjta1NVRBshKppcaZLr6MW /XHy4Gc9r20qL4KCjbiqPS0XUsPiC7+ZCKRWJzmG90R/58Bsev+RE39T+vcTP6RN mfvBHp89oocONxScO08UWR/s9q/772qN -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:45 2025 by rpki-client