$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: 2LrhO4nmHRVpMMHce3cqz3zYWkyttxJdMSbjGI1WqAg= Subject key identifier: 77:8E:BF:45:06:8B:E1:1E:C6:EF:44:F4:F2:03:5F:7B:60:2F:C2:63 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 087A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 0843 Signing time: Sat 18 Oct 2025 22:10:27 +0000 Manifest this update: Sat 18 Oct 2025 22:10:27 +0000 Manifest next update: Sat 25 Oct 2025 22:10:27 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: kVZUQHeK5iQkCjn9K/BV+VTnW+FwQXocVzXq1lq4EXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Oct 18 22:10:27 2025 GMT Not After : Oct 25 22:10:27 2025 GMT Subject: CN=68f41053-de2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:c6:62:fb:d7:90:cd:d9:4c:af:c1:41:84: 03:13:d2:20:2a:68:70:97:17:c6:86:97:f0:09:04: 47:97:bd:c0:0d:02:20:21:ff:32:a2:d7:7c:6f:52: f0:41:e6:be:eb:df:1c:15:c5:50:45:09:8d:c7:c0: ad:66:ee:cb:dc:53:c6:b9:f4:a9:dc:90:fb:1f:c8: 1d:f3:bd:fd:c0:e7:4f:a4:cf:43:00:af:82:9e:7c: 05:95:3b:e1:59:e0:15:6c:03:d6:28:60:d8:0b:9c: 25:a9:b6:07:fe:a7:c2:a5:ac:a2:36:b7:b1:1c:bd: b4:6d:8d:ef:18:cb:73:ae:3a:a5:bb:45:b6:6a:53: 94:8a:59:38:ed:fe:b1:23:e1:d6:d1:c4:71:b4:03: 84:80:dc:cb:bf:1a:4d:07:3b:e6:1c:d1:19:60:f4: cc:00:74:76:f9:4e:95:10:87:15:ca:ed:3c:3d:ca: 12:fd:71:e3:ee:55:9a:c9:99:1d:f4:0a:65:41:34: c0:3c:41:8e:30:4b:b9:3e:c9:f0:cf:45:fa:5c:c1: 00:3f:50:6e:37:e0:3a:9f:25:05:56:d0:21:90:82: 17:15:0a:1a:22:8d:5d:0e:bd:b3:61:fa:9d:c9:d8: 31:97:92:39:aa:16:df:4f:88:dc:b2:1d:09:fa:e7: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8E:BF:45:06:8B:E1:1E:C6:EF:44:F4:F2:03:5F:7B:60:2F:C2:63 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:65:ca:eb:3a:00:7d:01:89:c2:56:44:0d:7e:28:b0:49:eb: 60:26:d8:2b:f7:e0:6f:90:b2:55:ec:66:a2:65:2c:4d:1f:8e: 57:75:98:8a:27:76:27:1c:1f:2d:1a:cb:4e:e4:00:06:34:32: 34:d2:b8:65:45:68:82:81:68:d4:ae:e2:1b:62:13:42:25:f7: d2:af:71:7c:da:b3:60:c7:7b:66:52:9e:01:5a:9d:f6:45:c1: 81:38:08:b3:4d:23:f4:9a:74:1f:22:a3:a0:73:cc:dd:93:69: 19:3b:19:ae:34:8c:56:39:3b:24:31:ac:ef:50:f5:28:a7:e9: 49:c4:08:e7:38:9c:97:a6:99:6d:77:97:d1:b4:3d:32:9c:7f: bd:1a:ed:53:59:e7:b4:00:93:3c:a0:93:b0:e8:96:d6:1d:fa: d0:51:f2:b7:a9:9d:e2:6d:7a:d6:59:af:d3:38:83:8e:b1:a3: 99:a4:05:d6:22:99:4b:3a:9d:df:24:92:3f:12:06:a9:ac:3f: 46:fe:a2:c1:bd:69:37:bf:2a:c9:73:e2:ee:79:98:55:dc:dc: 9a:6d:21:69:5d:f8:c4:17:9f:54:43:54:74:ef:de:3f:30:7a: 95:0b:3a:39:7a:58:52:49:4e:d0:b5:3b:c9:9d:ef:a6:3c:81: ff:e6:73:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUxMDE4MjIxMDI3WhcNMjUxMDI1MjIxMDI3WjAYMRYwFAYD VQQDEw02OGY0MTA1My1kZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfLGYvvXkM3ZTK/BQYQDE9IgKmhwlxfGhpfwCQRHl73ADQIgIf8yotd8b1Lw Qea+698cFcVQRQmNx8CtZu7L3FPGufSp3JD7H8gd8739wOdPpM9DAK+CnnwFlTvh WeAVbAPWKGDYC5wlqbYH/qfCpayiNrexHL20bY3vGMtzrjqlu0W2alOUilk47f6x I+HW0cRxtAOEgNzLvxpNBzvmHNEZYPTMAHR2+U6VEIcVyu08PcoS/XHj7lWayZkd 9AplQTTAPEGOMEu5Psnwz0X6XMEAP1BuN+A6nyUFVtAhkIIXFQoaIo1dDr2zYfqd ydgxl5I5qhbfT4jcsh0J+ueZIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeOv0UG i+Eexu9E9PIDX3tgL8JjMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIZcrrOgB9AYnCVkQNfiiwSetgJtgr9+BvkLJV7GaiZSxNH45XdZiK J3YnHB8tGstO5AAGNDI00rhlRWiCgWjUruIbYhNCJffSr3F82rNgx3tmUp4BWp32 RcGBOAizTSP0mnQfIqOgc8zdk2kZOxmuNIxWOTskMazvUPUop+lJxAjnOJyXpplt d5fRtD0ynH+9Gu1TWee0AJM8oJOw6JbWHfrQUfK3qZ3ibXrWWa/TOIOOsaOZpAXW IplLOp3fJJI/EgaprD9G/qLBvWk3vyrJc+LueZhV3NyabSFpXfjEF59UQ1R0794/ MHqVCzo5elhSSU7QtTvJne+mPIH/5nPo -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:20 2025 by rpki-client