$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: h2eWM6h8Zp6YdyRreQjW6x6IFDRGBTljh76/fs6cozQ= Subject key identifier: 58:F5:C1:52:7C:5E:13:83:49:29:11:5D:2F:3F:EC:BC:02:7C:6A:81 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 05D4 Signing time: Sun 19 Oct 2025 00:40:10 +0000 Manifest this update: Sun 19 Oct 2025 00:40:09 +0000 Manifest next update: Sun 26 Oct 2025 00:40:09 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: uzYaiRVEUinCXDWNM36XoBPBH7BQojBYwGKTuCBXH5U=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 91y/zfPKe4toYeLlym6g8YBWRWa9in1N6/DuRedfMc4=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: OIkPyY1gexI0QB7Mc75F4AkfEDtSi4kbvtIlfRRk1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Oct 19 00:40:09 2025 GMT Not After : Oct 26 00:40:09 2025 GMT Subject: CN=68f4336a-fa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:b1:10:1d:77:60:c0:1e:ab:3f:21:4c:8f: 21:4f:2d:0a:d8:35:0b:82:52:c8:53:77:f9:f5:9a: fd:58:8b:21:1f:22:0b:a1:0d:b7:e6:9d:52:f7:b9: 70:ba:d9:ab:a4:8a:62:b0:5f:9d:d7:55:d1:6d:b2: f5:78:5f:46:06:b8:26:aa:39:1a:14:93:b9:d5:73: 9b:e0:cc:f8:6d:68:02:87:ee:a2:fa:42:be:0f:fc: 6d:b4:98:fe:69:62:b7:9f:43:b4:14:8a:c5:a5:1c: 31:bf:20:8a:30:f4:d3:6b:1f:fd:67:30:d5:99:56: c0:a4:3b:51:7c:67:19:9e:8f:44:26:bf:74:e8:5e: 85:95:0f:17:47:7b:6b:e9:d1:69:7a:1d:cb:a5:ff: a6:ac:88:d6:a5:11:14:e9:e3:60:f0:67:0c:e8:46: e8:b1:2d:19:2d:fa:27:3b:ee:15:d7:f3:11:3c:aa: 1d:ef:e7:26:a7:c6:4c:ba:03:a1:3e:ee:30:eb:76: fe:c5:5c:d9:32:67:dc:15:a1:46:8e:a4:03:d4:e4: 5d:2f:b7:d8:8e:a6:67:96:30:e3:43:46:6a:ce:d6: 5f:f2:24:aa:4b:9c:dd:9d:ef:0a:f2:5d:d5:21:81: a5:a6:c4:72:ca:91:82:20:09:37:f9:4a:3c:d3:93: 63:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F5:C1:52:7C:5E:13:83:49:29:11:5D:2F:3F:EC:BC:02:7C:6A:81 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b1:0a:92:dd:44:ad:fd:3d:4d:63:76:fc:b4:f1:45:49:07: a8:a8:26:86:56:7b:a1:80:a6:94:a0:7c:83:80:b6:b7:e1:3d: 9d:94:15:da:0c:1a:90:27:ca:28:40:67:97:5d:28:e2:21:a1: 1e:1b:8f:e3:50:7a:2c:89:ee:20:22:7d:ef:a1:ba:5f:38:b7: 53:e0:47:90:de:25:44:90:06:d9:50:6a:ff:52:7b:04:91:9f: 9c:d3:56:1f:41:d9:6a:04:0f:84:b8:f1:d1:cc:a8:7f:6e:09: 8f:e4:cc:48:c2:de:8d:02:3f:da:4f:6c:6d:3f:fa:7f:62:da: f7:12:f8:c0:94:8a:0b:e0:12:94:50:b2:bd:7d:40:aa:6e:29: d3:e3:a6:bc:9a:2b:c1:bd:3a:4d:ec:62:c3:b6:d3:53:d4:fb: 6c:09:55:c0:65:63:6a:14:3f:e5:fe:6c:a7:20:fb:14:dd:e6: a0:49:52:b8:f5:99:06:a5:0a:ad:1f:6c:73:85:e4:74:38:a6: e3:77:40:ec:fd:fc:87:c4:a2:c8:c4:7b:57:ac:1a:b7:f3:05: 38:4d:e8:0d:5c:8e:ad:ab:87:87:c4:70:8b:ee:c3:9a:dc:92: be:7a:ad:68:98:1b:0b:6c:dd:60:e9:94:d6:fa:fb:71:21:94: 92:f2:f1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUxMDE5MDA0MDA5WhcNMjUxMDI2MDA0MDA5WjAYMRYwFAYD VQQDEw02OGY0MzM2YS1mYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukCxEB13YMAeqz8hTI8hTy0K2DULglLIU3f59Zr9WIshHyILoQ235p1S97lw utmrpIpisF+d11XRbbL1eF9GBrgmqjkaFJO51XOb4Mz4bWgCh+6i+kK+D/xttJj+ aWK3n0O0FIrFpRwxvyCKMPTTax/9ZzDVmVbApDtRfGcZno9EJr906F6FlQ8XR3tr 6dFpeh3Lpf+mrIjWpREU6eNg8GcM6EbosS0ZLfonO+4V1/MRPKod7+cmp8ZMugOh Pu4w63b+xVzZMmfcFaFGjqQD1ORdL7fYjqZnljDjQ0ZqztZf8iSqS5zdne8K8l3V IYGlpsRyypGCIAk3+Uo805NjpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj1wVJ8 XhODSSkRXS8/7LwCfGqBMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvsQqS3USt/T1NY3b8tPFFSQeoqCaGVnuhgKaUoHyDgLa34T2dlBXa DBqQJ8ooQGeXXSjiIaEeG4/jUHosie4gIn3vobpfOLdT4EeQ3iVEkAbZUGr/UnsE kZ+c01YfQdlqBA+EuPHRzKh/bgmP5MxIwt6NAj/aT2xtP/p/Ytr3EvjAlIoL4BKU ULK9fUCqbinT46a8mivBvTpN7GLDttNT1PtsCVXAZWNqFD/l/mynIPsU3eagSVK4 9ZkGpQqtH2xzheR0OKbjd0Ds/fyHxKLIxHtXrBq38wU4TegNXI6tq4eHxHCL7sOa 3JK+eq1omBsLbN1g6ZTW+vtxIZSS8vH2 -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:46 2025 by rpki-client