$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: fP+coKZnHT+GLGZZ7HHA8eJECaAwQUGh4c/HLTBNv4U= Subject key identifier: 4F:E0:29:DD:87:A2:F6:A8:09:A8:2E:76:6D:6C:34:DE:DE:7D:E6:B9 Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 027E Signing time: Sun 19 Oct 2025 03:51:18 +0000 Manifest this update: Sun 19 Oct 2025 03:51:18 +0000 Manifest next update: Sun 26 Oct 2025 03:51:18 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: i/3z9vNSmzIaLCEsSeqFN93f1HI99zzhKP4o2XSWUMA=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: EUxX4jfQlcU/1uY0IOylmxYMPcoOQVgae213RHQG1Xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Oct 19 03:51:18 2025 GMT Not After : Oct 26 03:51:18 2025 GMT Subject: CN=68f46036-580f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:2c:ee:29:54:d5:16:70:2d:29:42:b2:cf: 78:02:4c:ae:44:6b:18:ff:9c:13:94:72:81:05:1b: e8:dc:c1:c2:f3:a3:e4:61:92:63:ea:46:ec:ea:c9: b1:bb:14:f2:17:5e:60:df:db:b5:f3:fe:a3:4e:36: 9a:53:2c:e4:a9:0d:67:8d:bf:c5:c7:8a:d5:62:0b: fe:8b:8b:bf:4a:b4:48:85:29:b2:b0:a2:22:1b:ea: 24:a1:ac:14:c5:e1:37:fa:5c:8b:d7:ab:8e:47:76: 42:48:88:bc:f2:c9:ab:a9:4b:1d:80:8b:cd:87:9b: 33:c7:83:cc:d3:19:0c:31:7e:9c:e8:2f:95:21:20: 54:fe:31:c8:e0:9f:a7:c1:a8:5d:03:f5:5d:47:4e: fa:e1:df:c3:6a:ec:cf:02:90:70:a0:49:58:eb:74: b7:ce:c2:17:36:56:00:1c:eb:c6:f5:fd:bd:48:13: 0e:64:3c:f8:c7:41:85:0c:da:4a:c2:47:6a:c2:e6: f6:96:f0:7b:8d:9a:00:26:b5:09:0b:f0:7b:48:ba: 03:4c:e3:39:f3:41:10:29:e7:3d:35:b5:c7:37:f2: ec:42:f9:ac:3c:73:17:74:80:67:e8:88:33:d6:99: 55:72:3c:a3:76:5e:8c:5e:ce:de:1a:7b:a4:e9:be: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E0:29:DD:87:A2:F6:A8:09:A8:2E:76:6D:6C:34:DE:DE:7D:E6:B9 X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:90:ca:7e:2f:bc:4e:9e:0f:aa:16:21:33:a6:93:84:99:e0: 15:1c:57:ef:db:3e:61:57:dc:10:a8:5e:aa:4b:16:f2:d3:96: 39:3a:51:b8:74:5c:ce:f7:25:31:c2:6a:b2:ca:29:33:be:a9: 15:c1:8b:23:b8:b9:cf:79:56:c8:f6:3a:d6:47:63:35:e1:40: e2:c7:82:46:38:c8:fd:8a:a9:90:cf:41:e1:7d:90:ae:86:0a: b4:6e:1a:7b:85:ce:63:81:5a:41:13:4e:38:bc:1d:5d:dd:7f: 97:31:bc:20:04:82:40:e1:d0:3a:14:42:fd:36:47:3b:08:f0: 6e:f1:10:b1:4b:a5:7b:c1:5a:57:c0:e1:eb:f9:ef:4a:07:8b: 0c:e2:74:92:00:53:ac:68:e4:c8:43:05:ef:cd:c3:65:3f:e4: 78:06:d0:8c:5f:ac:d7:ce:1e:db:23:35:93:aa:7d:90:3e:4c: 9e:b5:24:eb:d6:70:b3:0b:65:a8:5b:4c:32:fa:4d:b8:72:91: fc:cc:e6:54:4d:e2:93:b7:a4:ac:cb:7e:f8:d2:44:c9:fe:7c: 46:c0:40:a9:73:20:1b:d7:9d:01:cf:3f:cb:d9:47:7b:dc:01: 41:c8:e9:92:e1:2d:00:a8:53:4c:dd:fe:f1:45:31:41:8c:05: ad:19:c4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjUxMDE5MDM1MTE4WhcNMjUxMDI2MDM1MTE4WjAYMRYwFAYD VQQDEw02OGY0NjAzNi01ODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX4s7ilU1RZwLSlCss94AkyuRGsY/5wTlHKBBRvo3MHC86PkYZJj6kbs6smx uxTyF15g39u18/6jTjaaUyzkqQ1njb/Fx4rVYgv+i4u/SrRIhSmysKIiG+okoawU xeE3+lyL16uOR3ZCSIi88smrqUsdgIvNh5szx4PM0xkMMX6c6C+VISBU/jHI4J+n wahdA/VdR0764d/DauzPApBwoElY63S3zsIXNlYAHOvG9f29SBMOZDz4x0GFDNpK wkdqwub2lvB7jZoAJrUJC/B7SLoDTOM580EQKec9NbXHN/LsQvmsPHMXdIBn6Igz 1plVcjyjdl6MXs7eGnuk6b69uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/gKd2H ovaoCagudm1sNN7efea5MB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALkMp+L7xOng+qFiEzppOEmeAVHFfv2z5hV9wQqF6qSxby05Y5OlG4 dFzO9yUxwmqyyikzvqkVwYsjuLnPeVbI9jrWR2M14UDix4JGOMj9iqmQz0HhfZCu hgq0bhp7hc5jgVpBE044vB1d3X+XMbwgBIJA4dA6FEL9Nkc7CPBu8RCxS6V7wVpX wOHr+e9KB4sM4nSSAFOsaOTIQwXvzcNlP+R4BtCMX6zXzh7bIzWTqn2QPkyetSTr 1nCzC2WoW0wy+k24cpH8zOZUTeKTt6Ssy3740kTJ/nxGwECpcyAb150Bzz/L2Ud7 3AFByOmS4S0AqFNM3f7xRTFBjAWtGcR/ -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:27 2025 by rpki-client