$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft File: nb0ycj1x0bhWzIRJBDf78NpVJWo.mft (raw, json) Hash identifier: uNn1cTS3bCJbb8OUS/F6oUwIHC6gp7DHc0hDcBI9gDo= Subject key identifier: C9:57:1A:97:DE:93:04:0A:4F:3E:B8:55:30:F8:9C:29:B6:83:D4:B2 Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A Certificate issuer: /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A Certificate serial: 0F86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft Manifest number: 0F7F Signing time: Sat 18 Oct 2025 18:08:53 +0000 Manifest this update: Sat 18 Oct 2025 18:08:52 +0000 Manifest next update: Sat 25 Oct 2025 18:08:52 +0000 Files and hashes: 1: nb0ycj1x0bhWzIRJBDf78NpVJWo.crl (hash: L1LywNpd8G2MX0E4A90VlFtQOM5ZFQNoFux1LUXjDGo=) 2: B0DA9FC46FDD11E9BC194664C4F9AE02.roa (hash: Hb9hkw/JGVDNL3WRZDBLo8Md0h4gCqoVhQUhIQUyimQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3974 (0xf86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B41, serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A Validity Not Before: Oct 18 18:08:52 2025 GMT Not After : Oct 25 18:08:52 2025 GMT Subject: CN=68f3d7b5-493d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:c1:16:19:0c:c8:8c:11:bf:db:c7:af:ae: 21:cc:a9:12:4c:d8:65:6a:31:2e:d8:d9:3e:ed:b6: f4:d0:cf:28:6f:10:ea:a9:bb:e5:94:87:a7:d7:a9: 39:12:3f:51:ed:32:21:ce:ad:f3:87:41:9d:02:b7: 00:6e:d2:8c:4e:11:3b:bc:4c:91:e7:22:b9:07:85: e7:ff:d3:93:15:7b:31:dc:d1:49:c7:78:09:d2:a6: cf:2c:6a:ef:8e:4e:b5:71:c7:9d:24:8f:9b:0e:4e: bd:4a:dc:c3:49:15:f4:40:68:8d:c5:8c:96:e5:e3: 6b:94:c9:dd:0a:93:c2:a2:73:0f:5a:a6:1b:d7:6c: 68:1e:a0:b9:e1:86:77:10:fd:a1:c7:be:ca:3f:30: cc:1a:7d:0a:ce:2f:52:e1:7c:fc:56:ff:99:14:b8: 52:75:aa:7f:57:f9:15:30:92:ca:45:0b:02:33:67: bc:ec:32:c4:1f:34:46:9f:88:b9:21:21:dc:a8:74: 9f:b7:23:e8:9c:39:a7:8f:fd:67:3f:05:96:fe:49: bc:65:fc:7f:77:a6:6f:be:68:7c:60:cb:c2:2f:45: e7:ba:3a:05:5a:26:0e:5d:21:0d:8b:3c:a2:62:6e: 85:e2:1b:0c:5a:8d:c9:52:57:56:0f:02:79:77:30: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:57:1A:97:DE:93:04:0A:4F:3E:B8:55:30:F8:9C:29:B6:83:D4:B2 X509v3 Authority Key Identifier: keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fc:ea:de:16:95:48:fe:9f:1d:85:2d:86:d9:55:bb:f5:e3: 20:a3:e8:b9:39:20:02:07:8c:44:5c:7d:39:0c:cf:35:66:86: d5:6b:75:46:9b:53:65:86:1e:45:64:5c:b9:1b:41:e5:ea:af: d0:fa:49:1d:51:60:af:c0:31:69:eb:25:ae:ae:3b:71:62:de: ff:6c:12:53:b9:99:74:96:3b:56:d2:fa:b3:a5:7a:56:85:b1: 59:eb:7c:73:11:87:e3:6b:b3:32:9a:2d:5f:b1:83:4f:b1:92: 2f:6b:ac:f2:75:75:c5:70:d3:a5:35:bb:2d:18:45:1d:9b:86: 85:27:e9:cb:ae:4e:57:a9:09:11:e4:5d:6a:5d:58:dd:b7:c0: ab:23:79:0f:96:d4:dd:8a:35:be:3b:26:9d:dd:73:8f:ab:6c: 2a:5e:b1:94:fe:19:a7:49:9e:73:77:7d:31:68:03:51:42:1e: 7a:2a:1e:6c:f3:37:98:c5:b9:3c:4a:ed:70:45:81:56:ef:83: f3:8a:bf:1c:ff:01:a0:ae:97:8c:c2:0e:86:5e:35:e9:d8:32: b8:26:3e:9d:04:d0:7a:df:51:4c:af:a4:ed:1a:34:d6:7a:3b: f0:df:58:41:23:f5:d4:a0:2e:89:7b:e8:2a:71:8b:88:87:1a: 2c:d7:f5:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCNDExMTAvBgNVBAUTKDlEQkQzMjcyM0Q3MUQxQjg1NkNDODQ0OTA0MzdGQkYw REE1NTI1NkEwHhcNMjUxMDE4MTgwODUyWhcNMjUxMDI1MTgwODUyWjAYMRYwFAYD VQQDEw02OGYzZDdiNS00OTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6HBFhkMyIwRv9vHr64hzKkSTNhlajEu2Nk+7bb00M8obxDqqbvllIen16k5 Ej9R7TIhzq3zh0GdArcAbtKMThE7vEyR5yK5B4Xn/9OTFXsx3NFJx3gJ0qbPLGrv jk61ccedJI+bDk69StzDSRX0QGiNxYyW5eNrlMndCpPConMPWqYb12xoHqC54YZ3 EP2hx77KPzDMGn0Kzi9S4Xz8Vv+ZFLhSdap/V/kVMJLKRQsCM2e87DLEHzRGn4i5 ISHcqHSftyPonDmnj/1nPwWW/km8Zfx/d6Zvvmh8YMvCL0XnujoFWiYOXSENizyi Ym6F4hsMWo3JUldWDwJ5dzAG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlXGpfe kwQKTz64VTD4nCm2g9SyMB8GA1UdIwQYMBaAFJ29MnI9cdG4VsyESQQ3+/DaVSVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUI0MS8zM0QyNTMxNjZG REIxMUU5QTZFNkJENURDNEY5QUUwMi9uYjB5Y2oxeDBiaFd6SVJKQkRmNzhOcFZK V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iMHljajF4MGJoV3pJUkpCRGY3OE5wVkpXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUI0MS8zM0QyNTMxNjZGREIxMUU5QTZFNkJENURDNEY5QUUwMi9uYjB5Y2oxeDBi aFd6SVJKQkRmNzhOcFZKV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX/OreFpVI/p8dhS2G2VW79eMgo+i5OSACB4xEXH05DM81ZobVa3VG m1Nlhh5FZFy5G0Hl6q/Q+kkdUWCvwDFp6yWurjtxYt7/bBJTuZl0ljtW0vqzpXpW hbFZ63xzEYfja7Mymi1fsYNPsZIva6zydXXFcNOlNbstGEUdm4aFJ+nLrk5XqQkR 5F1qXVjdt8CrI3kPltTdijW+Oyad3XOPq2wqXrGU/hmnSZ5zd30xaANRQh56Kh5s 8zeYxbk8Su1wRYFW74Pzir8c/wGgrpeMwg6GXjXp2DK4Jj6dBNB631FMr6TtGjTW ejvw31hBI/XUoC6Je+gqcYuIhxos1/X6 -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:19 2025 by rpki-client