$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft File: m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json) Hash identifier: bHsP5gCQtJcFs+hLJ8SEwaymzWHrTyYw/ZCvuJKTTQU= Subject key identifier: DF:D7:3F:C7:CD:3F:F0:DB:52:62:CD:56:D3:DC:D6:EC:94:9A:2B:5B Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 Certificate issuer: /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft Manifest number: 3D Signing time: Sun 19 Oct 2025 10:56:37 +0000 Manifest this update: Sun 19 Oct 2025 10:56:36 +0000 Manifest next update: Sun 26 Oct 2025 10:56:36 +0000 Files and hashes: 1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: /kE514GLY4Zy5Z4hePJ7GA4bZgA5/cUG8RnsG4R2hLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Validity Not Before: Oct 19 10:56:36 2025 GMT Not After : Oct 26 10:56:36 2025 GMT Subject: CN=68f4c3e5-e705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:99:6c:10:96:d7:83:a5:b8:2c:b1:0b:4f: 5b:78:84:8d:54:81:92:df:c8:c5:61:f4:49:dd:9d: f0:18:77:0f:fe:2c:f0:7a:72:36:0b:1a:56:d6:08: b8:de:ca:28:65:02:26:22:17:17:90:da:55:fb:85: 1d:36:51:4a:18:66:eb:e4:2a:34:1c:8e:4f:74:ba: ae:63:17:5a:1d:d0:a4:69:e2:c5:0f:71:c8:1c:ff: 07:b0:ff:9c:13:b5:f4:c0:85:df:a6:cf:fc:54:45: 42:b1:d0:c2:70:f4:21:b3:c6:5a:39:b9:b1:14:d6: 7f:e8:c7:4d:ce:68:85:2b:0b:7c:c7:74:59:b3:e6: e4:80:05:84:ad:90:01:4a:5f:b1:f4:6f:83:1d:74: 2c:fa:56:e9:e3:e7:6e:2f:cb:32:14:9c:ad:4e:c5: a1:5b:53:98:d4:07:35:7a:11:ae:27:27:6b:64:01: e8:7a:a2:06:05:43:69:e1:1a:67:fa:95:a2:64:a3: 4d:d1:2b:0d:cc:d2:60:5d:ea:3f:76:f5:d2:8b:ea: fa:4e:38:31:2a:28:69:84:b2:67:c5:5b:d0:08:93: fa:b7:7c:fd:87:2b:40:03:2a:77:20:a0:f0:a2:b4: 19:1a:a1:b1:4b:a4:b9:f0:13:e9:d3:48:ae:78:b1: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D7:3F:C7:CD:3F:F0:DB:52:62:CD:56:D3:DC:D6:EC:94:9A:2B:5B X509v3 Authority Key Identifier: keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:06:1b:ae:fe:fe:35:02:95:ad:e5:a3:4d:69:6f:e5:3c: cf:99:f4:49:78:f6:51:82:4d:36:60:51:3c:7f:05:91:f2:4e: 36:bc:02:9f:63:f8:0e:42:f9:95:ac:0e:e8:f8:df:1b:16:de: 22:04:8a:bc:b1:d9:ba:c9:41:c7:e9:f9:2a:37:a5:d7:79:76: c8:87:bf:b8:bf:3c:3e:c3:35:8b:e5:41:f7:39:a4:1a:b2:a7: 03:ee:36:5e:f5:6e:32:46:9d:d2:9a:51:5a:6e:57:5f:2b:d0: 34:c6:b8:b5:d4:23:fe:bb:9a:e7:c4:f4:fd:6c:c3:a9:63:82: 52:f9:d8:93:5c:ab:2f:40:88:6c:b6:dd:59:3a:ed:c5:ea:5b: a1:b1:81:30:e3:14:79:1c:2c:ce:0b:0f:32:bc:d1:06:21:8d: 1e:f4:b7:84:aa:49:b2:60:fc:b9:4c:51:8b:05:94:46:9b:f8: 6a:7d:fe:cc:ac:97:39:b7:1d:a1:84:aa:ac:a7:10:32:e4:e0: 94:fa:70:9e:c1:d3:0b:3f:76:2c:7d:7e:80:36:29:fb:6a:e2: 54:6e:31:13:35:0a:1f:52:9d:b7:d0:a6:9c:16:bb:a3:bf:e3: 24:e1:40:5e:cb:05:53:91:80:a2:dd:81:8b:80:1f:b1:86:ee: a2:8d:f8:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUI0RkNEMUVEMDZBMUU0QkExQzRCRTlGMUQxMEIyOTQ1 RTkyOEMxOTAeFw0yNTEwMTkxMDU2MzZaFw0yNTEwMjYxMDU2MzZaMBgxFjAUBgNV BAMTDTY4ZjRjM2U1LWU3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYJJlsEJbXg6W4LLELT1t4hI1UgZLfyMVh9EndnfAYdw/+LPB6cjYLGlbWCLje yihlAiYiFxeQ2lX7hR02UUoYZuvkKjQcjk90uq5jF1od0KRp4sUPccgc/wew/5wT tfTAhd+mz/xURUKx0MJw9CGzxlo5ubEU1n/ox03OaIUrC3zHdFmz5uSABYStkAFK X7H0b4MddCz6Vunj524vyzIUnK1OxaFbU5jUBzV6Ea4nJ2tkAeh6ogYFQ2nhGmf6 laJko03RKw3M0mBd6j929dKL6vpOODEqKGmEsmfFW9AIk/q3fP2HK0ADKncgoPCi tBkaobFLpLnwE+nTSK54sWjNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU39c/x80/ 8NtSYs1W09zW7JSaK1swHwYDVR0jBBgwFoAUm0/NHtBqHkuhxL6fHRCylF6SjBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0VGMTdDM0Q2NTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1aHhMNmZIUkN5bEY2U2pC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTBfTkh0QnFIa3VoeEw2ZkhSQ3lsRjZTakJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0VGMTdDM0Q2NTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1 aHhMNmZIUkN5bEY2U2pCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHW6Bhuu/v41ApWt5aNNaW/lPM+Z9El49lGCTTZgUTx/BZHyTja8Ap9j +A5C+ZWsDuj43xsW3iIEiryx2brJQcfp+So3pdd5dsiHv7i/PD7DNYvlQfc5pBqy pwPuNl71bjJGndKaUVpuV18r0DTGuLXUI/67mufE9P1sw6ljglL52JNcqy9AiGy2 3Vk67cXqW6GxgTDjFHkcLM4LDzK80QYhjR70t4SqSbJg/LlMUYsFlEab+Gp9/sys lzm3HaGEqqynEDLk4JT6cJ7B0ws/dix9foA2Kftq4lRuMRM1Ch9SnbfQppwWu6O/ 4yThQF7LBVORgKLdgYuAH7GG7qKN+Gc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:07 2025 by rpki-client