$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json) Hash identifier: 6A+FTTRO2CfYzqq/g5u+cfEKMtzW5Zfk35IcLt9uFHY= Subject key identifier: 79:1B:74:30:72:AC:B9:2B:57:24:17:81:29:34:53:0F:8D:A9:69:AF Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft Manifest number: 4A Signing time: Sun 19 Oct 2025 10:48:16 +0000 Manifest this update: Sun 19 Oct 2025 10:48:15 +0000 Manifest next update: Sun 26 Oct 2025 10:48:15 +0000 Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: TyxLztEdmoJ1CZLApmUt3wCqAikwtbxew6gjw4YSCgY=) 2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: zzVlxhn6+jvA03mHN2RlJJu0S5vEXRz/2+gZ9LS069Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Validity Not Before: Oct 19 10:48:15 2025 GMT Not After : Oct 26 10:48:15 2025 GMT Subject: CN=68f4c1f0-b2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:2f:99:30:c9:4d:76:57:c0:f6:96:bd:dd: 41:0b:7f:5c:cc:fa:d2:d9:88:61:7d:db:42:e3:fc: da:47:66:7f:3b:c1:b7:7b:a1:4c:e4:84:28:f6:3b: 96:38:6b:ba:7e:8d:17:79:4f:8c:1f:2a:13:12:39: ba:17:8f:80:f5:7c:3f:70:76:db:34:6f:ad:8c:e6: d3:35:44:57:d3:91:f3:48:a3:ca:c4:a8:4e:51:91: e0:62:9d:43:ec:b2:d4:dd:e3:dc:f6:dc:30:96:33: 1c:6e:2a:5c:2b:0e:87:73:98:ac:70:56:ae:5c:20: 77:7e:35:27:72:dc:1c:80:56:e4:f1:96:bb:7b:68: 07:90:5d:e4:7f:00:5a:35:37:38:59:12:a0:0d:70: 5e:9d:65:a6:f6:85:d9:45:f3:58:32:10:62:0c:00: a5:5d:79:f0:2a:fd:67:13:f9:46:57:21:d8:1b:69: 0b:f0:b3:58:14:d2:49:10:6d:87:d2:c6:c1:f3:85: 62:6c:7f:e5:4f:c5:9d:5b:07:72:c9:a3:25:05:3c: d4:f0:07:77:f3:2d:1b:cd:fd:5a:d3:ba:79:2d:cc: 94:20:44:26:d7:86:26:25:22:3b:aa:64:b4:95:fe: c4:3c:f7:60:bf:2b:ad:26:69:5c:0b:9a:cf:dc:56: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:74:30:72:AC:B9:2B:57:24:17:81:29:34:53:0F:8D:A9:69:AF X509v3 Authority Key Identifier: keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:02:e5:84:fd:6c:ae:1f:76:d4:2f:8a:68:fa:31:cb:47:f3: 6d:ea:ad:1c:af:53:96:84:f7:df:90:ab:83:8a:cb:16:6d:c0: b6:25:60:a6:0c:26:c2:b5:33:aa:c8:37:90:63:bb:8f:d6:49: 3a:b4:82:fa:b9:5b:36:32:88:80:25:22:f6:9d:d5:12:be:24: 4e:08:1a:3b:dd:56:ea:75:1a:2a:f4:43:d8:ef:b2:c6:2c:8c: 34:12:f0:0d:ea:3d:e9:0a:a3:6a:1a:97:e4:a4:0d:0b:cc:a6: 8d:80:b8:04:ea:da:58:8f:f9:8f:df:59:57:67:b2:39:63:69: 6b:eb:08:6a:98:4b:30:14:68:28:30:f3:05:3d:48:25:14:13: 59:70:8e:5f:4b:3c:c2:54:46:7b:f8:69:88:df:ef:19:21:6c: f5:f2:02:57:b7:4d:5c:12:5c:aa:f6:06:91:e2:f1:bf:d3:fd: f7:b2:c3:20:2b:b0:ee:49:e0:76:35:4c:37:ce:53:86:8a:35: f4:d9:f7:b7:17:63:7f:00:5f:94:80:22:3d:05:ff:f5:94:de: e9:38:a2:dc:40:eb:4e:c0:75:65:90:58:e8:25:c1:40:d8:fe: 84:ad:5c:5a:24:f7:1f:e1:99:52:24:26:4a:60:15:98:81:63: 37:96:ef:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMzRGMEY4Q0Q4N0I4OEM0RjUyMEU0NkZCOTVEMkRCODRG QTA0MzM2MjAeFw0yNTEwMTkxMDQ4MTVaFw0yNTEwMjYxMDQ4MTVaMBgxFjAUBgNV BAMTDTY4ZjRjMWYwLWIyYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP7y+ZMMlNdlfA9pa93UELf1zM+tLZiGF920Lj/NpHZn87wbd7oUzkhCj2O5Y4 a7p+jRd5T4wfKhMSOboXj4D1fD9wdts0b62M5tM1RFfTkfNIo8rEqE5RkeBinUPs stTd49z23DCWMxxuKlwrDodzmKxwVq5cIHd+NSdy3ByAVuTxlrt7aAeQXeR/AFo1 NzhZEqANcF6dZab2hdlF81gyEGIMAKVdefAq/WcT+UZXIdgbaQvws1gU0kkQbYfS xsHzhWJsf+VPxZ1bB3LJoyUFPNTwB3fzLRvN/VrTunktzJQgRCbXhiYlIjuqZLSV /sQ892C/K60maVwLms/cVuxPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeRt0MHKs uStXJBeBKTRTD42paa8wHwYDVR0jBBgwFoAUNPD4zYe4jE9SDkb7ldLbhPoEM2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzcyRTZGQTI2NDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL05QRDR6WWU0akU5U0RrYjdsZExiaFBvRU0y SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBENHpZZTRqRTlTRGtiN2xkTGJoUG9FTTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 QjM2LzcyRTZGQTI2NDA4RjExRjBCMzRBRUY0N0M0RjlBRTAyL05QRDR6WWU0akU5 U0RrYjdsZExiaFBvRU0ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwC5YT9bK4fdtQvimj6MctH823qrRyvU5aE99+Qq4OKyxZtwLYlYKYM JsK1M6rIN5Bju4/WSTq0gvq5WzYyiIAlIvad1RK+JE4IGjvdVup1Gir0Q9jvssYs jDQS8A3qPekKo2oal+SkDQvMpo2AuATq2liP+Y/fWVdnsjljaWvrCGqYSzAUaCgw 8wU9SCUUE1lwjl9LPMJURnv4aYjf7xkhbPXyAle3TVwSXKr2BpHi8b/T/feywyAr sO5J4HY1TDfOU4aKNfTZ97cXY38AX5SAIj0F//WU3uk4otxA607AdWWQWOglwUDY /oStXFok9x/hmVIkJkpgFZiBYzeW7y0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:22 2025 by rpki-client