$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: 2vHzjdaxL0SgY09bPGOz9OlEPvONU2+LGpAph4ucdLs= Subject key identifier: 25:41:5D:9D:F3:44:59:F2:73:89:6B:1C:BC:07:D8:0A:2D:1B:72:0F Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 04D6 Signing time: Sun 19 Oct 2025 01:36:48 +0000 Manifest this update: Sun 19 Oct 2025 01:36:48 +0000 Manifest next update: Sun 26 Oct 2025 01:36:48 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: 9GtntZLGGXGYFwiaAwuPVMyi271NVZAYcLZ3VTZJYOM=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: nj3zL8oObjV8NLXqj4IbNKya+FtBjMvRptjlINscrUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Oct 19 01:36:48 2025 GMT Not After : Oct 26 01:36:48 2025 GMT Subject: CN=68f440b0-4d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:63:5d:18:54:ce:fd:a9:cd:9d:0a:a1:41: 1d:62:a2:30:50:0e:44:7a:a2:f6:c5:17:53:b9:7b: 78:da:fd:88:cf:1a:0a:45:81:1c:a2:f4:f8:bd:b4: a6:35:e3:a9:48:82:89:5e:f2:85:52:a4:f6:15:aa: 48:4d:09:f5:f5:0d:4d:8b:4d:e5:37:6c:8f:56:27: 99:e4:11:83:b6:83:40:49:4b:d0:8d:96:05:d5:1d: 43:af:fb:2d:d3:88:68:90:6b:4c:06:80:35:11:33: b8:0b:03:af:08:84:83:5c:ca:2f:cd:64:b6:c1:47: 4c:24:4b:e1:f3:52:e0:0d:6a:a0:04:17:7a:08:15: 2f:a2:26:60:5a:9e:38:54:55:ef:c3:4a:5f:48:ee: 40:16:6e:82:9b:70:c0:31:75:15:de:a8:ab:d1:0a: 48:f1:3b:97:65:82:0f:37:26:aa:3d:77:d5:31:f6: 7d:6f:9a:72:c5:c8:e9:a4:75:67:ea:a5:16:57:76: d0:6f:ad:e5:38:9f:fb:ca:2e:4e:42:90:b7:c1:5c: 13:72:59:5c:d6:c3:89:7c:fd:36:ca:54:c5:35:8c: f1:95:6c:64:b4:f7:df:da:fe:cb:97:09:03:7c:51: 7f:19:4e:94:27:64:24:4b:17:d9:8e:60:6e:fa:ae: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:41:5D:9D:F3:44:59:F2:73:89:6B:1C:BC:07:D8:0A:2D:1B:72:0F X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a7:9b:e9:56:d4:31:cc:09:2e:ee:b1:06:8a:8c:5c:76:d7: e5:62:aa:95:c4:1e:e1:f9:01:35:3e:fb:9b:df:13:b8:ff:d3: cc:f0:1c:03:d1:cc:ad:19:cd:b2:3e:d0:44:b1:9e:6c:6a:00: 8d:17:db:b0:50:82:89:c0:68:7a:c7:d3:f2:44:61:d2:77:e9: 4e:4f:06:4c:23:c9:22:0b:6c:bd:c9:57:8b:27:6d:dd:fc:00: c6:0f:fa:17:17:86:c1:0e:9f:34:30:26:7b:61:ea:1f:66:41: bc:bd:ff:fc:6f:44:c4:28:4e:a8:d8:78:7e:10:40:24:c1:ff: 64:5e:4b:cc:9f:24:58:ab:5f:09:58:44:9f:ac:c4:1c:11:c6: ca:ce:e0:c6:0c:7c:03:a7:ab:c7:0a:32:08:c3:6a:cf:f3:5d: 6a:8f:a4:4b:81:0b:c9:0e:db:d2:72:93:8f:22:65:6a:8d:29: f9:97:b6:c3:f8:14:39:0e:fa:28:e6:d5:a8:e0:f9:05:70:7c: 37:93:3e:5a:5b:ca:0e:08:28:a7:fd:af:ac:c4:ec:7e:66:29: df:d9:fa:60:11:54:b5:78:d5:cf:3d:e5:65:48:49:34:cd:07: 37:29:5d:a4:f0:dd:f1:a6:00:f4:35:7e:dd:d2:19:19:ef:3a: 94:0b:41:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjUxMDE5MDEzNjQ4WhcNMjUxMDI2MDEzNjQ4WjAYMRYwFAYD VQQDEw02OGY0NDBiMC00ZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtatjXRhUzv2pzZ0KoUEdYqIwUA5EeqL2xRdTuXt42v2IzxoKRYEcovT4vbSm NeOpSIKJXvKFUqT2FapITQn19Q1Ni03lN2yPVieZ5BGDtoNASUvQjZYF1R1Dr/st 04hokGtMBoA1ETO4CwOvCISDXMovzWS2wUdMJEvh81LgDWqgBBd6CBUvoiZgWp44 VFXvw0pfSO5AFm6Cm3DAMXUV3qir0QpI8TuXZYIPNyaqPXfVMfZ9b5pyxcjppHVn 6qUWV3bQb63lOJ/7yi5OQpC3wVwTcllc1sOJfP02ylTFNYzxlWxktPff2v7LlwkD fFF/GU6UJ2QkSxfZjmBu+q4X9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVBXZ3z RFnyc4lrHLwH2AotG3IPMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJp5vpVtQxzAku7rEGioxcdtflYqqVxB7h+QE1Pvub3xO4/9PM8BwD 0cytGc2yPtBEsZ5sagCNF9uwUIKJwGh6x9PyRGHSd+lOTwZMI8kiC2y9yVeLJ23d /ADGD/oXF4bBDp80MCZ7YeofZkG8vf/8b0TEKE6o2Hh+EEAkwf9kXkvMnyRYq18J WESfrMQcEcbKzuDGDHwDp6vHCjIIw2rP811qj6RLgQvJDtvScpOPImVqjSn5l7bD +BQ5Dvoo5tWo4PkFcHw3kz5aW8oOCCin/a+sxOx+Zinf2fpgEVS1eNXPPeVlSEk0 zQc3KV2k8N3xpgD0NX7d0hkZ7zqUC0H9 -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:17 2025 by rpki-client