$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: NMCFMg/5Pi45oegtZSqgWsGfxs5x6Mc6y0LuOljPREc= Subject key identifier: AD:48:90:DD:96:E3:9F:DD:91:A9:AC:72:B4:4B:09:A3:43:C4:4C:2C Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 05D8 Signing time: Sun 19 Oct 2025 00:44:58 +0000 Manifest this update: Sun 19 Oct 2025 00:44:57 +0000 Manifest next update: Sun 26 Oct 2025 00:44:57 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: FuRrE1cBkZfTVzsCDVNAjj88M3AO5Um6qqJJB1JQPPE=) 2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=) 3: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: /i4Id8Q+jnrw5e+R6tIy1tKz8MPyg9GBRlUx3W4xwjI=) 4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=) 5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: 1ILmh7AVLQm5eSNZItp8QnZ0ivg8piYKVtyisI3TQ00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Oct 19 00:44:57 2025 GMT Not After : Oct 26 00:44:57 2025 GMT Subject: CN=68f43489-b4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:52:b2:e6:61:35:2d:4b:df:19:a8:27:71: e3:82:05:d8:62:6e:78:e0:76:47:91:9e:4a:e1:22: 2a:f4:19:b3:b6:51:79:38:53:50:3a:80:8b:4c:9f: 62:47:c2:2e:e7:d7:6d:a4:7b:1e:07:7f:9d:33:0b: 9e:65:ed:42:c7:82:8b:84:06:fd:23:ef:1f:1c:e5: 29:75:40:7e:e2:aa:47:4c:b1:ec:ef:de:96:35:a1: 4f:c4:cd:0a:45:86:89:22:54:5b:f6:c0:e7:c3:21: 4d:b6:3d:df:ad:8d:81:29:cb:c9:9f:1d:50:07:c8: d4:b8:d2:d6:d9:ea:b1:dc:92:5f:6f:10:1e:02:ec: 3f:1c:07:e2:0e:13:f8:ef:74:d9:52:79:0b:65:b1: 4f:63:56:86:9d:67:cd:b1:a3:74:87:30:3b:a3:37: a7:54:93:73:2a:77:e9:e5:81:76:6c:29:d3:ec:fd: ec:af:47:50:a5:1a:97:51:ee:79:be:70:85:0b:98: 96:7e:d1:d5:72:b2:4e:83:8f:46:fe:1a:37:4c:48: 40:91:e5:20:19:e6:4b:3a:d1:9f:b2:78:76:95:e3: 5a:83:da:29:2f:58:f2:9f:92:28:cf:da:99:c5:c5: fa:dc:c5:2a:65:03:cd:81:9d:f3:13:26:84:12:c6: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:90:DD:96:E3:9F:DD:91:A9:AC:72:B4:4B:09:A3:43:C4:4C:2C X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:05:95:d8:00:f3:4f:c5:b4:54:44:da:9c:6f:64:74:ff:cf: c1:d5:b8:61:50:25:67:97:40:ff:63:c2:cd:68:63:48:f2:ec: ad:e7:ac:1c:3b:c6:c2:80:d1:5a:7c:0e:91:cf:40:92:a9:8b: c5:f6:34:0d:9d:d8:37:72:70:b2:24:6c:6d:b0:8d:a5:42:c1: 87:7a:c4:58:57:75:40:e4:9f:5b:15:c1:80:90:31:78:69:9f: 69:55:c4:fc:e3:f4:d8:db:60:99:9e:a8:d7:d7:61:77:64:c1: 3e:96:62:08:72:83:57:46:8a:ac:81:fa:22:6d:ec:cf:37:4f: 15:94:02:80:e3:e6:f4:86:a2:a4:31:03:bc:3b:8d:85:07:ad: 4c:dd:0c:0c:4f:e5:95:da:0a:a8:73:80:f8:85:ef:5e:e7:b9: 50:df:35:69:0b:00:15:ee:35:20:39:2a:06:11:93:ac:bb:c7: 71:9b:ed:ec:eb:e7:fa:36:75:07:ca:b8:62:37:22:d0:da:cf: 45:09:81:9a:14:4b:01:d1:14:10:c4:9f:0b:c3:16:40:2b:6a: bd:42:eb:f5:32:0d:7c:a5:22:f9:d4:f7:67:63:69:75:fe:57: 1e:18:5a:1d:47:20:fe:a1:6d:f4:92:44:bb:2f:2e:ec:d3:b6: 48:52:3c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUxMDE5MDA0NDU3WhcNMjUxMDI2MDA0NDU3WjAYMRYwFAYD VQQDEw02OGY0MzQ4OS1iNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT9SsuZhNS1L3xmoJ3HjggXYYm544HZHkZ5K4SIq9BmztlF5OFNQOoCLTJ9i R8Iu59dtpHseB3+dMwueZe1Cx4KLhAb9I+8fHOUpdUB+4qpHTLHs796WNaFPxM0K RYaJIlRb9sDnwyFNtj3frY2BKcvJnx1QB8jUuNLW2eqx3JJfbxAeAuw/HAfiDhP4 73TZUnkLZbFPY1aGnWfNsaN0hzA7ozenVJNzKnfp5YF2bCnT7P3sr0dQpRqXUe55 vnCFC5iWftHVcrJOg49G/ho3TEhAkeUgGeZLOtGfsnh2leNag9opL1jyn5Ioz9qZ xcX63MUqZQPNgZ3zEyaEEsbnGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1IkN2W 45/dkamscrRLCaNDxEwsMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUBZXYAPNPxbRURNqcb2R0/8/B1bhhUCVnl0D/Y8LNaGNI8uyt56wc O8bCgNFafA6Rz0CSqYvF9jQNndg3cnCyJGxtsI2lQsGHesRYV3VA5J9bFcGAkDF4 aZ9pVcT84/TY22CZnqjX12F3ZME+lmIIcoNXRoqsgfoibezPN08VlAKA4+b0hqKk MQO8O42FB61M3QwMT+WV2gqoc4D4he9e57lQ3zVpCwAV7jUgOSoGEZOsu8dxm+3s 6+f6NnUHyrhiNyLQ2s9FCYGaFEsB0RQQxJ8LwxZAK2q9Quv1Mg18pSL51PdnY2l1 /lceGFodRyD+oW30kkS7Ly7s07ZIUjxw -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:14 2025 by rpki-client