$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json) Hash identifier: eE9rQ+O9D05A2f6nt1PVjITZTgYZ5yW60oIJQI22rag= Subject key identifier: 29:A9:84:42:4D:F4:77:C6:22:F6:84:72:53:14:B2:FC:CE:35:0C:D2 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft Manifest number: 0DFD Signing time: Sat 18 Oct 2025 18:38:21 +0000 Manifest this update: Sat 18 Oct 2025 18:38:20 +0000 Manifest next update: Sat 25 Oct 2025 18:38:20 +0000 Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: vLq3hdULP2ssnNXRqAiZ8awzOfBIWLgeJPzKXuS/XyY=) 2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 8HpuGDjJ1HaUnvbqwg2p0RqMWNKRPbkcusj7/8dGWQ0=) 3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: LJIpLV7qxEhrQ58WdLL8kVLFvZWp3hu8j4iGoCziiKk=) 4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: Y1hYPriqga57gQ3amB6r8RQVCp/OYrjfwjRFo7bzhN4=) 5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: a0zumIIFq60VnU+h+sczBC8nSfMUtNZJOT2cGQXHtFM=) 6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: 9Y1PvZbBWvXkxPJ/R9kxoHARtC3b9XEV8P94nkayA0Y=) 7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: fVAiyutcaUjImiI/+ZOO2PTga7QNJojrwSKqKhdWN0M=) 8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: eadxsvzaSxzw44MbzuzI+Oul4FdP5+6OIV0GTLKz4ko=) 9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: PAK/TxIr+dmrK+KiwHQ68OGXOTg91fc22TNBIvKrGx0=) 10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: yeuXVIZHgdbGSZuuSW+dQGW9Nla3e2FH/EFT8iqpLcQ=) 11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: 2I5f/ord7l4Z+1cz8mubA9ENQbHncDdSE1Z3NBiS6xA=) 12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: D96s3C0fz4gg+o7Ty1+9cwFV2PT+r04AXwT8/vXI9r8=) 13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: aOW8cu9Nc0zJXm+rBrdFnzfM1/G7gfurLbAv9VHmltc=) 14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: 6YL37qZcSHIsKWgAPwXyLHa/ujTtyBijwb8nN7Syf3U=) 15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 1H9jP4UG0MauS5NOFFxuSSAQmI9fS/xoBhEMmaqDQtc=) 16: 03774914696211EC8A05D115C4F9AE02.roa (hash: YSreEArv7A+NuKlgpYkqh41Hl5YPxnEtL6X4nDbC/aY=) 17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: Y+qs2z3P8V9uaGhh4nh1gvjcG2+gtCdiPwz3sWEVZh0=) 18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: HbDcVIalem/Ny0QC+Yf0XnevG+XaltaoTg2FrWFfKG8=) 19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: ullzKPL3x0725kipkj6fcVE+JrOCoQ1xkkGVkrIADK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Oct 18 18:38:20 2025 GMT Not After : Oct 25 18:38:20 2025 GMT Subject: CN=68f3de9c-bb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:10:fa:a1:34:65:fd:47:04:43:2b:ce:70: af:7c:f9:07:ae:bd:19:27:32:39:aa:37:55:10:76: f3:4c:e9:82:b0:c9:39:45:14:9a:82:42:81:10:df: 4e:df:26:2a:67:4b:a6:a9:30:c3:94:5d:fa:03:54: e6:c0:da:a9:e6:ea:29:06:7f:2d:b5:39:b1:1a:3a: f3:12:dd:8e:f6:bd:24:c3:2d:0b:90:47:ce:15:3a: 6c:f9:88:fe:6e:f8:c4:e5:59:8a:d1:64:f7:72:7e: 34:6f:70:e4:ee:6a:99:79:78:47:4c:d4:ea:2f:90: e7:a0:34:e3:aa:6a:87:60:6c:a3:fb:6d:1c:27:4d: a6:01:c4:fb:95:20:fb:8d:8d:13:da:8c:26:b5:a0: 25:d2:cf:e9:d6:ff:81:0f:c7:5c:8a:1a:44:9b:6e: 23:24:96:89:fc:d6:a9:92:07:52:6f:a8:b4:9d:28: ee:29:b4:fc:4a:e5:cf:04:0e:56:0a:24:15:90:55: 1b:21:36:08:e9:e5:69:08:6a:37:37:56:5a:92:1e: 89:48:e1:00:a0:4b:33:40:0d:02:c5:37:cf:7c:44: c4:e6:72:b4:d8:09:b8:1f:05:dd:46:7d:d7:68:b4: 47:f3:e4:84:5d:e2:47:07:ad:05:e2:b9:dd:ec:fb: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A9:84:42:4D:F4:77:C6:22:F6:84:72:53:14:B2:FC:CE:35:0C:D2 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:39:6e:dd:23:0d:8a:9e:c1:04:8b:92:ab:9f:09:fd:dc:75: 77:ee:de:41:4f:a8:2c:79:24:f7:5a:86:48:e5:87:ba:98:05: fd:33:b6:bc:b9:db:35:70:d7:ee:3f:46:c7:58:36:12:d0:2f: e3:2b:20:c2:b2:7f:1a:75:a5:51:87:5f:ff:df:09:4d:c6:81: 07:fc:67:0e:5f:0a:fe:21:ac:37:58:4b:ce:3e:fe:44:6d:7b: 28:c1:28:d8:69:62:56:ce:37:3a:b8:56:9a:5c:61:07:bd:ee: 78:b0:cd:81:0e:78:ef:90:8d:a0:fb:9c:12:a0:c3:77:9c:11: df:99:90:5e:79:6b:72:f9:d8:e0:eb:24:89:98:9f:65:3d:b7: be:6a:f0:74:49:37:04:4c:9f:42:51:b1:98:d0:1d:ab:cc:92: ef:48:83:ff:d5:22:a9:b7:e4:f9:8d:9a:dd:8c:3a:03:e3:e8: ff:a6:f6:52:49:df:a1:ec:37:f9:00:7b:e5:31:fb:30:f8:b2: 6f:d1:e8:a5:ad:f8:f3:d4:97:f8:5a:2c:78:2e:20:19:db:cf: 8c:f6:90:a1:69:00:7f:62:53:b2:2e:1f:5f:3f:1f:50:71:31: 38:5a:32:86:4f:9f:02:b5:98:25:f5:cb:7e:ef:59:8f:44:9e: 52:91:2c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUxMDE4MTgzODIwWhcNMjUxMDI1MTgzODIwWjAYMRYwFAYD VQQDEw02OGYzZGU5Yy1iYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24gQ+qE0Zf1HBEMrznCvfPkHrr0ZJzI5qjdVEHbzTOmCsMk5RRSagkKBEN9O 3yYqZ0umqTDDlF36A1TmwNqp5uopBn8ttTmxGjrzEt2O9r0kwy0LkEfOFTps+Yj+ bvjE5VmK0WT3cn40b3Dk7mqZeXhHTNTqL5DnoDTjqmqHYGyj+20cJ02mAcT7lSD7 jY0T2owmtaAl0s/p1v+BD8dcihpEm24jJJaJ/NapkgdSb6i0nSjuKbT8SuXPBA5W CiQVkFUbITYI6eVpCGo3N1Zakh6JSOEAoEszQA0CxTfPfETE5nK02Am4HwXdRn3X aLRH8+SEXeJHB60F4rnd7Pt65wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmphEJN 9HfGIvaEclMUsvzONQzSMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEM2MC9CNTI2RkY3NEQ4NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpU SjF4NVkxbU5hMFczQ3ZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwOW7dIw2KnsEEi5Krnwn93HV37t5BT6gseST3WoZI5Ye6mAX9M7a8 uds1cNfuP0bHWDYS0C/jKyDCsn8adaVRh1//3wlNxoEH/GcOXwr+Iaw3WEvOPv5E bXsowSjYaWJWzjc6uFaaXGEHve54sM2BDnjvkI2g+5wSoMN3nBHfmZBeeWty+djg 6ySJmJ9lPbe+avB0STcETJ9CUbGY0B2rzJLvSIP/1SKpt+T5jZrdjDoD4+j/pvZS Sd+h7Df5AHvlMfsw+LJv0eilrfjz1Jf4Wix4LiAZ28+M9pChaQB/YlOyLh9fPx9Q cTE4WjKGT58CtZgl9ct+71mPRJ5SkSwq -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:22 2025 by rpki-client