$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: Pt1gFQQbSFytEeW/V8xMyoc2wYru264Qr7Tg6TnfEo4= Subject key identifier: E2:D4:F0:8E:D7:B8:D6:78:D3:58:2A:1A:A4:D9:8F:D2:83:D5:B7:83 Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 66 Signing time: Sun 19 Oct 2025 10:23:09 +0000 Manifest this update: Sun 19 Oct 2025 10:23:07 +0000 Manifest next update: Sun 26 Oct 2025 10:23:07 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: dpcfQhLO+4J1jYv9blJG2OyUH4fS1byMqm0mfED5xJQ=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: ZDuunhoBLIFxkgffUJp6fhz6W2Ysr7yM0HyGKDGLaSU=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: EvMFCkIZLxU/4T9yDv4rTrnplB41rjMOAziWwMgP5hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Oct 19 10:23:07 2025 GMT Not After : Oct 26 10:23:07 2025 GMT Subject: CN=68f4bc0c-35f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2e:06:64:cf:52:8c:0e:73:8a:31:0a:9b:8b: 9f:c0:0d:42:62:fa:09:44:82:00:2f:9a:6e:26:c8: 65:8c:db:16:12:f6:18:a1:3c:83:7f:96:0a:bb:83: 55:fd:ab:60:bc:e4:42:e4:77:e7:d1:65:11:7f:2a: 4e:d5:6d:8f:fd:69:69:dd:e5:7d:35:7f:9c:b3:61: e8:dd:60:30:25:93:93:24:c8:24:fc:5c:7d:be:16: 0c:c3:e2:27:0f:cc:28:50:aa:5e:0b:bd:73:82:5b: 1b:92:3c:f1:ba:2a:72:26:39:22:5e:fc:f0:4c:c9: 40:ea:8e:82:30:d4:ef:c2:2f:0f:fb:c0:7b:82:58: 2e:31:79:91:e6:29:bd:74:8d:b9:b3:9a:c6:a4:66: 66:45:6f:f8:62:b7:c9:4d:e6:9b:ae:74:36:ca:db: 26:3e:62:cd:5b:bb:27:4e:af:f9:03:54:3e:b3:ad: 5d:90:fa:07:08:40:fa:60:66:95:9d:0e:54:a9:b1: 57:75:2a:45:96:9a:7b:c2:bf:11:59:21:4d:fc:e9: 3f:83:6d:4b:10:8e:ed:3e:d4:6a:f6:13:f3:5b:d6: 04:d4:b9:83:5b:43:6d:7b:57:44:c9:42:37:40:ef: b2:29:46:08:f1:ee:75:0e:97:b3:b1:47:ae:47:b9: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D4:F0:8E:D7:B8:D6:78:D3:58:2A:1A:A4:D9:8F:D2:83:D5:B7:83 X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:42:18:0f:c9:92:c9:b1:16:6d:90:c6:8b:a6:22:76:e6:ba: f2:f0:a1:c4:ae:ec:f3:56:57:41:83:44:fa:4b:e8:f4:65:f1: fc:28:41:6f:2e:80:34:26:c5:3c:2a:31:6c:b8:0e:9f:a9:71: 19:00:7e:63:00:c7:6f:be:c9:65:1a:f7:90:b9:2d:8d:94:46: 32:1b:60:08:89:9f:1f:ec:a4:d8:d7:15:71:ce:5b:93:2f:14: 57:5c:96:7f:ce:18:7a:4c:21:f2:17:c0:88:60:21:11:23:d2: e1:27:76:43:ea:2f:cd:3f:f9:2c:67:bb:fa:e0:a9:bc:cc:a7: d9:ac:62:5b:fa:3a:48:99:e1:7b:76:6b:02:c2:98:35:83:2f: 8b:f8:f2:51:94:4d:35:46:00:df:1e:b9:06:8d:0b:9e:4b:bc: 9d:ce:47:2f:83:86:fc:d4:0f:8b:b4:38:76:17:e2:af:48:68: 4e:a7:4e:f8:89:a1:2b:88:75:3d:84:c4:93:5e:90:b3:3c:dc: 26:27:77:02:ab:0a:54:5d:aa:f5:79:14:f3:fa:7c:2a:ac:0d: 4d:c1:df:43:95:fa:31:d9:6d:6f:f6:49:34:6e:cc:b6:f4:1d: 0b:71:b9:38:df:df:7d:ef:8f:70:97:20:c8:5c:f1:b2:af:a0: 48:57:59:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUYzRTExMC8GA1UEBRMoOUNFOTE3REMzQUUwQzVCQTJFNzdDQjc3NUEzQUQ5OUM2 ODVDNDA2QjAeFw0yNTEwMTkxMDIzMDdaFw0yNTEwMjYxMDIzMDdaMBgxFjAUBgNV BAMTDTY4ZjRiYzBjLTM1ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsLgZkz1KMDnOKMQqbi5/ADUJi+glEggAvmm4myGWM2xYS9hihPIN/lgq7g1X9 q2C85ELkd+fRZRF/Kk7VbY/9aWnd5X01f5yzYejdYDAlk5MkyCT8XH2+FgzD4icP zChQql4LvXOCWxuSPPG6KnImOSJe/PBMyUDqjoIw1O/CLw/7wHuCWC4xeZHmKb10 jbmzmsakZmZFb/hit8lN5puudDbK2yY+Ys1buydOr/kDVD6zrV2Q+gcIQPpgZpWd DlSpsVd1KkWWmnvCvxFZIU386T+DbUsQju0+1Gr2E/Nb1gTUuYNbQ217V0TJQjdA 77IpRgjx7nUOl7OxR65HucMjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4tTwjte4 1njTWCoapNmP0oPVt4MwHwYDVR0jBBgwFoAUnOkX3Drgxboud8t3WjrZnGhcQGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxRjNFLzMzOUVERTY4MTBF NDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk9rWDNEcmd4Ym91ZDh0M1dqclpuR2hjUUdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx RjNFLzMzOUVERTY4MTBFNDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJv dWQ4dDNXanJabkdoY1FHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdCGA/JksmxFm2QxoumInbmuvLwocSu7PNWV0GDRPpL6PRl8fwoQW8u gDQmxTwqMWy4Dp+pcRkAfmMAx2++yWUa95C5LY2URjIbYAiJnx/spNjXFXHOW5Mv FFdcln/OGHpMIfIXwIhgIREj0uEndkPqL80/+Sxnu/rgqbzMp9msYlv6OkiZ4Xt2 awLCmDWDL4v48lGUTTVGAN8euQaNC55LvJ3ORy+DhvzUD4u0OHYX4q9IaE6nTviJ oSuIdT2ExJNekLM83CYndwKrClRdqvV5FPP6fCqsDU3B30OV+jHZbW/2STRuzLb0 HQtxuTjf333vj3CXIMhc8bKvoEhXWfo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:47:12 2025 by rpki-client