$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft File: nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json) Hash identifier: rcXD5iwtfM6EWKeEuza+doQ3TYvG+B+C7VRB1KgZNWk= Subject key identifier: FB:66:4E:3C:A6:AB:7D:56:B5:CE:B1:5E:5B:CB:67:5D:2E:10:F6:F4 Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC Certificate issuer: /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft Manifest number: EC Signing time: Sun 19 Oct 2025 08:21:57 +0000 Manifest this update: Sun 19 Oct 2025 08:21:56 +0000 Manifest next update: Sun 26 Oct 2025 08:21:56 +0000 Files and hashes: 1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: CAvP8CCd6LK78hoJbOmJwTDTDNU6ycSsusWc9T3d9LU=) 2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: gcIhWP5NO91lJBfeWuctKx1kLPZssG1GkCQYCQaZs38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Validity Not Before: Oct 19 08:21:56 2025 GMT Not After : Oct 26 08:21:56 2025 GMT Subject: CN=68f49fa4-5067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:e3:ee:43:92:3a:81:c1:c1:d5:f3:ac:72: 66:43:d7:ce:e7:82:be:93:b5:26:64:ba:e6:48:fe: dc:88:b9:ea:f0:ad:7f:fd:20:a9:ac:57:93:84:29: 5e:95:69:d5:c3:79:ca:62:ec:0e:cf:19:f1:50:72: 34:eb:3e:d4:a4:fc:ff:3e:f6:df:b8:a0:14:02:72: 1d:c0:04:76:8e:f7:55:49:7d:0b:c4:03:40:93:42: 24:6b:7a:ae:1e:e3:a7:86:9e:fe:3b:04:40:ac:06: 0d:7d:bb:8f:ce:e8:22:5b:32:52:58:f2:c7:8f:1f: 4a:18:b4:ca:8e:d2:a3:5a:61:94:22:e8:59:c5:16: d8:b2:fa:a6:32:6b:00:04:29:74:5f:5a:97:01:a8: 29:e6:b4:ba:72:b4:2b:bb:34:84:c3:f4:65:e4:fc: 35:c9:40:d1:88:eb:49:27:39:1c:2e:6b:43:87:16: 99:9b:82:6b:2d:f9:ac:55:a8:1a:34:4d:68:61:d9: f1:51:22:e5:6a:29:3e:71:9f:e7:3c:ca:16:12:28: 19:40:34:26:ec:92:be:45:83:5c:b9:3b:fb:33:23: 2c:16:f9:4a:b8:74:2b:a1:db:59:75:37:16:1b:4a: 56:58:03:e1:77:0e:7e:29:61:26:1d:48:76:cb:05: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:66:4E:3C:A6:AB:7D:56:B5:CE:B1:5E:5B:CB:67:5D:2E:10:F6:F4 X509v3 Authority Key Identifier: keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:85:1b:e6:2e:3d:64:dd:5b:1c:a6:10:4a:d1:fe:fa:d5:8f: 32:df:6f:5b:6f:c2:75:ad:0f:2b:09:db:31:ca:e7:23:eb:01: 63:6a:f1:5a:7b:ff:dd:e0:e5:30:4b:75:73:fe:ad:f3:aa:e4: 4e:d2:81:37:bc:c9:94:df:7b:c9:6a:5a:21:08:dc:48:06:c3: 3e:4d:e2:26:ea:37:9c:cf:78:95:da:da:90:4a:32:99:09:fa: 20:29:b9:7c:c8:9c:d0:19:19:96:f6:09:8d:89:1d:72:4d:1b: e8:63:6b:a1:c5:b9:f4:d9:93:a1:39:c0:5c:7a:91:27:77:20: 58:96:26:29:2a:90:12:1b:49:fd:8b:d0:89:ad:75:57:7f:17: b4:5d:a2:f0:ea:c3:0e:db:19:2c:9e:70:2a:30:79:cc:53:98: 78:94:8b:81:ef:89:5e:50:a7:2b:f9:b3:24:44:9b:cc:ca:14: 8d:1f:b1:96:d4:bf:e6:bb:7c:d5:0d:4c:21:2c:fa:db:9a:c5: 89:46:a9:35:bc:49:99:b5:6f:39:04:d4:2b:53:db:f3:9e:e9: e6:cc:7c:2f:2f:34:f0:3b:bd:28:6d:70:f0:83:de:77:2d:28: 09:33:8a:c2:1b:88:78:26:98:e8:dd:23:4c:2e:a4:cc:27:05: cb:f0:bc:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0NzIxMTAvBgNVBAUTKDlFNTEzQUNDNEQ3QjkwMDE0QTg2N0ZCNTJBRjg5MjI5 RTAwQkE0QUMwHhcNMjUxMDE5MDgyMTU2WhcNMjUxMDI2MDgyMTU2WjAYMRYwFAYD VQQDEw02OGY0OWZhNC01MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjTj7kOSOoHBwdXzrHJmQ9fO54K+k7UmZLrmSP7ciLnq8K1//SCprFeThCle lWnVw3nKYuwOzxnxUHI06z7UpPz/PvbfuKAUAnIdwAR2jvdVSX0LxANAk0Ika3qu HuOnhp7+OwRArAYNfbuPzugiWzJSWPLHjx9KGLTKjtKjWmGUIuhZxRbYsvqmMmsA BCl0X1qXAagp5rS6crQruzSEw/Rl5Pw1yUDRiOtJJzkcLmtDhxaZm4JrLfmsVaga NE1oYdnxUSLlaik+cZ/nPMoWEigZQDQm7JK+RYNcuTv7MyMsFvlKuHQrodtZdTcW G0pWWAPhdw5+KWEmHUh2ywVF8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtmTjym q31Wtc6xXlvLZ10uEPb0MB8GA1UdIwQYMBaAFJ5ROsxNe5ABSoZ/tSr4kingC6Ss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ3Mi9FNjJCNzM1QTQ4 MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tBRktobi0xS3ZpU0tlQUxw S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sRTZ6RTE3a0FGS2huLTFLdmlTS2VBTHBLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ3Mi9FNjJCNzM1QTQ4MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tB Rktobi0xS3ZpU0tlQUxwS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzhRvmLj1k3VscphBK0f761Y8y329bb8J1rQ8rCdsxyucj6wFjavFa e//d4OUwS3Vz/q3zquRO0oE3vMmU33vJalohCNxIBsM+TeIm6jecz3iV2tqQSjKZ CfogKbl8yJzQGRmW9gmNiR1yTRvoY2uhxbn02ZOhOcBcepEndyBYliYpKpASG0n9 i9CJrXVXfxe0XaLw6sMO2xksnnAqMHnMU5h4lIuB74leUKcr+bMkRJvMyhSNH7GW 1L/mu3zVDUwhLPrbmsWJRqk1vEmZtW85BNQrU9vznunmzHwvLzTwO70obXDwg953 LSgJM4rCG4h4Jpjo3SNMLqTMJwXL8Lyi -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:27 2025 by rpki-client