$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: 4YiEYLe5r5Qz48K6WHPIwRlMGoQo5bvBG9EfUryuSpc= Subject key identifier: 37:4A:7B:22:5B:2E:C9:62:54:1D:BC:78:8F:49:4A:C4:05:B2:59:09 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 056B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0561 Signing time: Sun 19 Oct 2025 01:05:19 +0000 Manifest this update: Sun 19 Oct 2025 01:05:18 +0000 Manifest next update: Sun 26 Oct 2025 01:05:18 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: CPvy2b90eNbJpndwuODA70pOWa5iF6ujAJpZA4xEo0Q=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: sFxA7zWd1QKxzt33I3bSrxQFMBjh0wvM8Ox270gKZ1E=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: RyN8TdZ33FgQoqBN1enP2qHNRdbXtugooz5NQ7OTf7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Oct 19 01:05:18 2025 GMT Not After : Oct 26 01:05:18 2025 GMT Subject: CN=68f4394e-7c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:4d:3c:73:af:99:85:91:f7:26:5f:55:4d: 3a:13:fc:73:6f:6b:2c:40:ab:fe:4c:4c:cc:f0:6b: ef:a7:b8:59:cc:93:20:45:a3:31:26:ee:f4:b7:56: d0:cc:33:03:b4:20:e9:0d:82:67:62:81:e3:8f:a6: 17:b5:83:dd:5a:8a:6a:f6:f5:78:24:e0:c9:bd:1d: b3:9f:ff:93:07:ad:4b:bf:13:c2:ed:cb:e3:9b:1e: 90:a5:70:13:f0:ea:e0:91:78:10:0b:fd:78:ed:4b: 32:ad:ee:ba:18:9a:db:05:a0:a5:93:65:ab:c4:1d: fc:04:14:78:da:b2:31:91:2c:d2:af:27:95:c2:77: 6f:00:32:d7:9f:85:ed:70:fe:5c:11:2b:c2:f2:3b: 18:16:7e:bc:b6:f2:b6:51:e2:5d:2d:e7:a0:67:5c: 52:c1:6a:eb:51:b2:ae:32:65:c0:78:43:84:0b:e3: cb:4e:e4:46:b8:19:14:09:2b:e4:0d:b7:8b:b1:a2: 27:b2:3c:ea:5b:53:09:9b:6d:15:03:10:de:62:29: da:9f:dc:15:cf:51:4e:81:85:2e:9c:3d:aa:d0:94: f8:22:e8:3b:22:59:8a:c4:29:7e:21:73:ea:31:1f: ca:13:c0:12:e0:ec:69:d3:31:4a:e9:ce:c7:a9:d6: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4A:7B:22:5B:2E:C9:62:54:1D:BC:78:8F:49:4A:C4:05:B2:59:09 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ee:fb:95:74:ef:f6:e3:34:43:67:de:d6:cb:ed:49:24:c5: 71:44:1b:56:0f:41:02:4a:24:fa:dc:8b:c9:3a:b0:9d:76:c3: 33:a1:3a:f2:27:96:77:96:1d:35:ad:0e:f5:f6:a0:f5:3b:e1: da:31:7e:bc:66:4d:ba:a2:79:a5:35:4d:15:3e:d6:af:69:2f: bb:cb:1c:f6:5f:c9:a1:5b:6e:93:5b:a5:30:80:5f:c2:fc:1a: 02:e7:13:af:4b:35:f1:44:59:a8:00:52:5f:ec:f2:9c:29:04: 4a:27:23:9e:bc:06:d4:a6:d4:d9:d4:44:99:b2:ab:cb:d6:4d: 86:f0:c4:6c:27:f0:39:a4:97:2c:50:5e:c3:a0:7d:be:7d:21: b6:ac:10:f3:12:53:c0:10:14:68:c2:93:56:ed:70:70:7d:88: fd:5e:87:56:3f:e9:0a:fd:c7:b3:bc:60:9e:e5:09:52:46:96: 9a:a3:5c:64:1d:ed:49:6e:3d:75:64:61:b4:ec:83:24:78:23: 06:40:cf:7f:14:b6:2e:34:e9:9a:77:f1:b4:8d:fd:1d:f6:05: f0:26:74:44:d1:1e:50:92:9c:70:da:08:96:52:73:36:51:de: cc:6f:c8:f7:79:da:15:cf:d9:49:a4:3f:5b:ad:97:f4:03:1d: 2c:1f:7e:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUxMDE5MDEwNTE4WhcNMjUxMDI2MDEwNTE4WjAYMRYwFAYD VQQDEw02OGY0Mzk0ZS03Yzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXlNPHOvmYWR9yZfVU06E/xzb2ssQKv+TEzM8Gvvp7hZzJMgRaMxJu70t1bQ zDMDtCDpDYJnYoHjj6YXtYPdWopq9vV4JODJvR2zn/+TB61LvxPC7cvjmx6QpXAT 8OrgkXgQC/147Usyre66GJrbBaClk2WrxB38BBR42rIxkSzSryeVwndvADLXn4Xt cP5cESvC8jsYFn68tvK2UeJdLeegZ1xSwWrrUbKuMmXAeEOEC+PLTuRGuBkUCSvk DbeLsaInsjzqW1MJm20VAxDeYinan9wVz1FOgYUunD2q0JT4Iug7IlmKxCl+IXPq MR/KE8AS4Oxp0zFK6c7HqdZKAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdKeyJb LsliVB28eI9JSsQFslkJMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM7vuVdO/24zRDZ97Wy+1JJMVxRBtWD0ECSiT63IvJOrCddsMzoTry J5Z3lh01rQ719qD1O+HaMX68Zk26onmlNU0VPtavaS+7yxz2X8mhW26TW6UwgF/C /BoC5xOvSzXxRFmoAFJf7PKcKQRKJyOevAbUptTZ1ESZsqvL1k2G8MRsJ/A5pJcs UF7DoH2+fSG2rBDzElPAEBRowpNW7XBwfYj9XodWP+kK/cezvGCe5QlSRpaao1xk He1Jbj11ZGG07IMkeCMGQM9/FLYuNOmad/G0jf0d9gXwJnRE0R5Qkpxw2giWUnM2 Ud7Mb8j3edoVz9lJpD9brZf0Ax0sH34r -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:39 2025 by rpki-client