$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: lMCwwl9vf1dZqmlSss0tzJ6FziXQpTU0Ajw7StHOoqI= Subject key identifier: 7F:19:A4:25:5E:6D:CA:6B:9C:79:56:54:99:37:8E:5F:3D:CC:B0:E4 Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 02C4 Signing time: Sun 19 Oct 2025 03:40:43 +0000 Manifest this update: Sun 19 Oct 2025 03:40:42 +0000 Manifest next update: Sun 26 Oct 2025 03:40:42 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: 2TLUgUi3NMSd6KVULasvC8xSqUwr3KvOx6M0YEV3qQQ=) 2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: mbByEgB1AFGJL7BjsQzaSgyj1ogxzeMRReV2aZF6lPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Oct 19 03:40:42 2025 GMT Not After : Oct 26 03:40:42 2025 GMT Subject: CN=68f45dbb-6f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:99:21:ed:90:0c:fb:99:e7:12:5e:05:dd: e6:e4:3f:3b:71:7b:09:ae:00:c5:72:f7:28:28:f8: e6:f9:42:d7:20:d4:ac:a1:76:80:9f:74:ae:de:51: 76:75:44:39:46:ae:46:d9:c6:96:3d:92:80:2b:9b: e5:74:ba:83:27:ce:0a:d0:9f:08:9d:34:0a:40:05: 90:44:f4:e2:3e:98:13:2d:56:2c:ca:ff:81:94:49: 51:ee:91:19:9f:19:30:ab:19:95:5a:83:94:3a:07: 37:9e:60:ef:9a:0d:1a:cd:30:81:3c:80:4d:4b:b7: 29:c6:94:76:07:1a:b1:ce:4f:b3:d9:b7:17:d7:98: ee:69:0a:09:26:26:2f:80:1e:04:06:da:ce:61:6e: 40:07:04:14:17:57:95:95:b8:ed:77:bb:d2:97:3f: 59:16:b2:56:d0:3d:93:85:80:2a:8d:19:43:32:fa: 54:af:05:05:55:4a:f2:69:17:1a:c2:24:25:70:89: 8d:22:87:66:49:89:67:32:f1:f4:b4:5a:19:70:4b: 6d:eb:8c:f5:94:cf:f7:82:e4:23:6a:15:ff:56:46: c5:b4:0a:b6:90:c9:25:fb:43:d2:0e:b4:f4:7a:91: f8:8f:e1:60:c3:1e:d1:9a:00:08:b5:e2:9e:ea:8e: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:19:A4:25:5E:6D:CA:6B:9C:79:56:54:99:37:8E:5F:3D:CC:B0:E4 X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:02:3b:c8:27:7c:bc:cd:17:93:d2:67:0e:dd:40:05:e6:dd: 53:ce:4e:f1:43:ae:09:04:a4:87:b5:ea:d1:53:47:c2:60:04: de:16:8c:05:12:28:97:d8:20:24:1e:00:27:9c:0a:c8:6b:b4: bd:67:34:8f:79:b7:79:26:91:76:fb:01:c7:01:f5:6b:08:61: 9a:b8:e6:15:86:aa:3f:14:a8:4e:c3:d2:10:52:fc:c2:ce:8c: 96:84:f4:17:7d:dd:39:b5:4c:4c:39:68:fd:eb:f5:f9:6e:47: 48:c5:53:13:69:6a:14:b9:04:9b:80:1d:8f:5f:81:cd:c4:19: 2d:1a:ef:6f:82:f1:cd:4a:4b:cd:e9:98:a2:16:ee:f8:b9:61: 25:2e:07:34:83:2f:57:c7:07:61:4c:53:e0:83:51:b5:1c:c1: 64:34:bd:a8:89:8f:4f:35:d9:20:0d:e8:a7:53:42:a2:d2:cd: c4:d2:da:07:68:13:8b:22:72:96:8c:38:ef:12:88:19:c7:1d: 36:3b:92:9f:9b:48:29:df:70:36:ac:ca:ea:54:45:6b:d3:4d: da:a8:eb:9a:8f:46:c5:f4:ec:e1:6d:5f:27:a2:59:ef:30:43: d6:c8:3b:c0:c2:2b:5e:e7:38:a0:0d:8a:f8:c3:29:5c:20:44: c4:f5:65:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUxMDE5MDM0MDQyWhcNMjUxMDI2MDM0MDQyWjAYMRYwFAYD VQQDEw02OGY0NWRiYi02ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQqZIe2QDPuZ5xJeBd3m5D87cXsJrgDFcvcoKPjm+ULXINSsoXaAn3Su3lF2 dUQ5Rq5G2caWPZKAK5vldLqDJ84K0J8InTQKQAWQRPTiPpgTLVYsyv+BlElR7pEZ nxkwqxmVWoOUOgc3nmDvmg0azTCBPIBNS7cpxpR2Bxqxzk+z2bcX15juaQoJJiYv gB4EBtrOYW5ABwQUF1eVlbjtd7vSlz9ZFrJW0D2ThYAqjRlDMvpUrwUFVUryaRca wiQlcImNIodmSYlnMvH0tFoZcEtt64z1lM/3guQjahX/VkbFtAq2kMkl+0PSDrT0 epH4j+Fgwx7RmgAIteKe6o5GtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8ZpCVe bcprnHlWVJk3jl89zLDkMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3AjvIJ3y8zReT0mcO3UAF5t1Tzk7xQ64JBKSHterRU0fCYATeFowF EiiX2CAkHgAnnArIa7S9ZzSPebd5JpF2+wHHAfVrCGGauOYVhqo/FKhOw9IQUvzC zoyWhPQXfd05tUxMOWj96/X5bkdIxVMTaWoUuQSbgB2PX4HNxBktGu9vgvHNSkvN 6ZiiFu74uWElLgc0gy9XxwdhTFPgg1G1HMFkNL2oiY9PNdkgDeinU0Ki0s3E0toH aBOLInKWjDjvEogZxx02O5Kfm0gp33A2rMrqVEVr003aqOuaj0bF9OzhbV8nolnv MEPWyDvAwite5zigDYr4wylcIETE9WWG -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:18 2025 by rpki-client