$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft File: nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json) Hash identifier: nOyZqmNZcoweukwB2r2CA9k0o8H/9ithHxcJEFmmBjI= Subject key identifier: C8:9E:94:37:A2:85:6E:DE:62:3C:77:DD:77:73:FE:82:5F:DB:79:D8 Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 Certificate issuer: /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5 Certificate serial: 0828 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft Manifest number: 0822 Signing time: Sat 18 Oct 2025 22:01:19 +0000 Manifest this update: Sat 18 Oct 2025 22:01:18 +0000 Manifest next update: Sat 25 Oct 2025 22:01:18 +0000 Files and hashes: 1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: P/Bh357MpQwbJJvDXQHb6nBFiKCHnolbwj6Wao192C4=) 2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: ZuNx07Xi3l7zK6QE18qPa3KdYreh+VNjcsKw+zEu9qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5 Validity Not Before: Oct 18 22:01:18 2025 GMT Not After : Oct 25 22:01:18 2025 GMT Subject: CN=68f40e2f-7911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:96:f8:7b:3f:89:d8:12:72:f0:08:46:af: 1d:b0:75:91:7e:af:c3:ca:9e:ba:74:e0:fd:6a:b1: 53:a0:67:54:11:5d:c4:85:63:fe:c7:c3:d8:94:ba: fc:55:c9:6d:e4:79:a2:00:e4:ae:3c:dc:f0:ef:c4: 92:c0:ed:21:1d:62:09:74:f8:c3:4d:29:1e:92:e5: d1:23:ca:7f:50:5a:62:c1:df:5e:c5:89:de:b7:4c: 07:84:ba:60:40:52:af:28:71:40:a4:01:96:32:9f: f9:76:19:66:d9:f5:fe:c7:4d:d9:af:cf:c3:4b:2a: 1e:18:1b:b1:00:e8:72:2e:a0:31:d2:83:27:40:ef: b7:f9:5c:1b:0b:5a:c6:63:56:da:b2:ba:8b:b4:f7: b5:d3:31:68:13:43:f1:a0:92:80:67:bd:ab:47:c9: cd:04:83:46:72:df:bb:c2:02:34:37:10:3d:e7:8f: b0:68:c0:53:6c:43:ab:3d:0d:18:a6:fb:20:03:aa: 25:f5:41:45:31:64:86:00:21:e0:d8:94:78:43:e3: d5:0e:a5:fe:0f:c1:4c:81:ea:84:77:63:6c:f8:46: 21:96:c0:19:30:48:25:e4:80:03:12:e8:32:6f:dc: 4e:88:9a:64:57:ba:8e:e0:d5:ca:b1:b5:87:31:d2: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:94:37:A2:85:6E:DE:62:3C:77:DD:77:73:FE:82:5F:DB:79:D8 X509v3 Authority Key Identifier: keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:40:44:22:33:51:67:09:ef:f8:de:bc:7f:12:97:38:31:67: 50:cd:e8:5e:e7:0f:f5:0f:07:2b:f7:e5:dc:6b:a4:de:ba:a0: bf:fc:02:bd:ca:2b:fb:b2:38:b5:ad:02:da:66:86:cc:6b:64: 98:86:d0:5a:44:48:ec:b3:32:11:ff:0f:3a:a5:03:d4:69:42: 08:5d:3c:63:10:2f:ec:57:55:06:50:fc:85:70:8e:53:15:97: b7:f0:ca:15:bb:fe:73:b5:9a:4c:f0:00:87:20:81:66:ea:e8: bc:1f:c5:30:97:34:bb:93:af:19:f9:15:6c:c9:bb:68:07:29: 35:5c:d1:91:82:b7:8c:99:00:14:c2:04:75:61:52:6d:3f:7e: 0c:1c:16:3e:e8:14:14:b9:ba:c3:85:a5:1d:44:74:6c:c5:30: 21:7b:e7:36:d6:09:f3:71:cf:23:9d:5a:ee:b3:d3:b6:d2:39: 5e:a2:6b:de:d2:a4:7c:55:79:97:17:16:07:ed:ff:5f:0e:b7: 84:ee:f7:88:38:fe:17:ac:6c:c9:83:43:fd:7f:ea:27:24:dc: a3:2e:16:f8:05:2a:35:25:16:a9:d3:e9:06:84:a8:6f:b6:69: f5:dd:09:cc:55:ea:3a:9e:a0:c2:6e:df:5f:13:c9:fe:b2:de: fd:8f:3b:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QjQxMTAvBgNVBAUTKDlFQUM4MzU2OEVDRTg3N0M1NEI5MjMwRDYzOURBNDRG MzgwRDIxRTUwHhcNMjUxMDE4MjIwMTE4WhcNMjUxMDI1MjIwMTE4WjAYMRYwFAYD VQQDEw02OGY0MGUyZi03OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpiW+Hs/idgScvAIRq8dsHWRfq/Dyp66dOD9arFToGdUEV3EhWP+x8PYlLr8 Vclt5HmiAOSuPNzw78SSwO0hHWIJdPjDTSkekuXRI8p/UFpiwd9exYnet0wHhLpg QFKvKHFApAGWMp/5dhlm2fX+x03Zr8/DSyoeGBuxAOhyLqAx0oMnQO+3+VwbC1rG Y1basrqLtPe10zFoE0PxoJKAZ72rR8nNBINGct+7wgI0NxA954+waMBTbEOrPQ0Y pvsgA6ol9UFFMWSGACHg2JR4Q+PVDqX+D8FMgeqEd2Ns+EYhlsAZMEgl5IADEugy b9xOiJpkV7qO4NXKsbWHMdIYMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMielDei hW7eYjx33Xdz/oJf23nYMB8GA1UdIwQYMBaAFJ6sg1aOzod8VLkjDWOdpE84DSHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThCNC80QTY1RUFDOEVF ODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gzeFV1U01OWTUya1R6Z05J ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25xeURWbzdPaDN4VXVTTU5ZNTJrVHpnTkllVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThCNC80QTY1RUFDOEVFODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gz eFV1U01OWTUya1R6Z05JZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7QEQiM1FnCe/43rx/Epc4MWdQzehe5w/1Dwcr9+Xca6TeuqC//AK9 yiv7sji1rQLaZobMa2SYhtBaREjsszIR/w86pQPUaUIIXTxjEC/sV1UGUPyFcI5T FZe38MoVu/5ztZpM8ACHIIFm6ui8H8UwlzS7k68Z+RVsybtoByk1XNGRgreMmQAU wgR1YVJtP34MHBY+6BQUubrDhaUdRHRsxTAhe+c21gnzcc8jnVrus9O20jleomve 0qR8VXmXFxYH7f9fDreE7veIOP4XrGzJg0P9f+onJNyjLhb4BSo1JRap0+kGhKhv tmn13QnMVeo6nqDCbt9fE8n+st79jzs7 -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:42 2025 by rpki-client