$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: ZACQmDyFf8cI80f8vppD8LBtbrzCQjj6AEpSs6YQcxs= Subject key identifier: 63:E0:43:DE:19:74:C3:88:59:C7:D6:9E:20:47:25:20:67:86:5C:BF Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 0376 Signing time: Sun 19 Oct 2025 02:52:23 +0000 Manifest this update: Sun 19 Oct 2025 02:52:22 +0000 Manifest next update: Sun 26 Oct 2025 02:52:22 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: yFND5UHkSZeG3WonMwLpjTQBgxMF/VXKFCEjPyyqZvw=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Oct 19 02:52:22 2025 GMT Not After : Oct 26 02:52:22 2025 GMT Subject: CN=68f45266-0b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:a2:59:89:00:ae:0f:c7:40:ba:7e:e8:de: aa:9c:5b:76:37:7d:d8:d3:76:e0:04:21:c6:f8:15: d5:ed:e6:07:b9:56:ee:cb:42:88:c1:f5:d1:ba:73: ed:9f:af:83:e3:b8:e2:f6:76:3a:3d:42:97:25:a8: 16:13:eb:c6:37:23:5b:84:78:60:17:73:27:de:a3: 5e:43:7d:59:cf:4f:f8:16:30:50:74:20:ef:9f:d2: 02:4a:c8:9b:7c:f7:cd:5c:62:d5:b8:e6:c5:f7:dd: a7:2d:ec:64:ce:d1:32:af:e7:65:a3:99:55:fd:3b: 7e:19:71:d9:4e:c6:84:71:ef:73:df:ca:6c:2a:b5: 20:33:df:9d:0a:2a:77:9a:76:7a:a3:c4:3b:d5:94: 78:76:66:76:6d:7b:55:96:11:a8:a4:e7:00:b2:03: 51:ce:69:76:21:62:de:07:19:4a:02:46:bc:7b:24: 8d:55:c0:07:84:51:fe:60:e4:92:d6:13:b6:12:db: 36:24:16:d8:39:e3:8d:12:c0:e1:26:cb:53:22:bc: bc:a7:4c:2f:4a:81:92:87:f5:17:48:e5:db:45:b8: 8b:85:25:d4:08:4b:63:cd:67:db:af:91:94:b5:a7: 79:06:35:06:e6:da:22:aa:50:1c:ce:70:89:e3:b3: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:43:DE:19:74:C3:88:59:C7:D6:9E:20:47:25:20:67:86:5C:BF X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:d8:c4:bd:db:0c:49:ca:4c:71:85:62:bf:1d:52:fe:ae:f2: 16:51:7a:ab:30:b3:91:21:c0:30:ea:2f:e5:b8:ba:7f:cf:2b: 04:bc:5c:a5:0b:29:6f:e9:7f:37:e6:dd:94:28:6d:94:cc:38: 60:df:3e:e1:85:02:9c:ce:a9:7e:ee:cd:7d:21:ea:4d:aa:2d: e0:dc:53:e9:49:fd:14:d5:20:e4:56:41:b6:33:f9:12:d9:ab: 50:04:1e:4a:77:f9:db:af:ec:ac:87:d1:13:30:ee:62:1c:71: 20:6a:ad:35:ce:7d:03:f1:a4:ce:d1:0f:65:2e:89:fa:5b:f2: 6b:69:b6:c0:c5:fd:b4:b7:26:b8:63:55:a4:9e:58:0b:7e:f8: 53:f3:74:1d:ad:98:57:01:3b:20:f0:52:25:eb:0b:d7:61:86: 45:aa:74:37:29:ba:ed:e6:d4:bc:05:64:c4:f9:3d:b0:11:95: e3:dd:55:c2:b3:57:01:a3:61:49:99:4b:51:95:81:12:92:a7: d2:12:b8:d7:47:54:5a:f2:1c:ea:7f:e7:c7:65:36:fa:f8:e5: 00:57:48:f9:92:0a:70:c6:e2:0f:35:06:61:78:26:5c:1c:50: a0:fc:2a:47:b5:4d:d0:39:7e:26:64:77:71:7e:f7:42:91:b8: 74:c4:79:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUxMDE5MDI1MjIyWhcNMjUxMDI2MDI1MjIyWjAYMRYwFAYD VQQDEw02OGY0NTI2Ni0wYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovKiWYkArg/HQLp+6N6qnFt2N33Y03bgBCHG+BXV7eYHuVbuy0KIwfXRunPt n6+D47ji9nY6PUKXJagWE+vGNyNbhHhgF3Mn3qNeQ31Zz0/4FjBQdCDvn9ICSsib fPfNXGLVuObF992nLexkztEyr+dlo5lV/Tt+GXHZTsaEce9z38psKrUgM9+dCip3 mnZ6o8Q71ZR4dmZ2bXtVlhGopOcAsgNRzml2IWLeBxlKAka8eySNVcAHhFH+YOSS 1hO2Ets2JBbYOeONEsDhJstTIry8p0wvSoGSh/UXSOXbRbiLhSXUCEtjzWfbr5GU tad5BjUG5toiqlAcznCJ47OpXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPgQ94Z dMOIWcfWniBHJSBnhly/MB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ2MS92wxJykxxhWK/HVL+rvIWUXqrMLORIcAw6i/luLp/zysEvFyl Cylv6X835t2UKG2UzDhg3z7hhQKczql+7s19IepNqi3g3FPpSf0U1SDkVkG2M/kS 2atQBB5Kd/nbr+ysh9ETMO5iHHEgaq01zn0D8aTO0Q9lLon6W/JrabbAxf20tya4 Y1WknlgLfvhT83QdrZhXATsg8FIl6wvXYYZFqnQ3Kbrt5tS8BWTE+T2wEZXj3VXC s1cBo2FJmUtRlYESkqfSErjXR1Ra8hzqf+fHZTb6+OUAV0j5kgpwxuIPNQZheCZc HFCg/CpHtU3QOX4mZHdxfvdCkbh0xHnC -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:25 2025 by rpki-client