$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: alFgVBxrAVnGwgviqK0ZFiw6QHZIHHTJzje+JyjaYfk= Subject key identifier: 8D:CA:2F:C5:C5:77:36:DB:D4:41:EC:E7:1A:AD:49:E6:1A:9D:2C:94 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E5B Signing time: Sat 18 Oct 2025 16:25:25 +0000 Manifest this update: Sat 18 Oct 2025 16:25:24 +0000 Manifest next update: Sat 25 Oct 2025 16:25:24 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: 2Ef2uuBdkZOplaPbM79KnJBKZpAAYcVHo3+3DbwMIMY=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: ff+yRWpZGVwQu2/+ce6wo5vQ/4ykM8fNsCLeEkORRWk=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: XJKFjiP3tvsMhs6LmvK7B6XUUWrtRbubwh2zJ/jKEZ0=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: u7p+nz5w2jpHdQPlyKnwRdRnTG51oOxdLpI/jwgWuSM=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7978 (0x1f2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Oct 18 16:25:24 2025 GMT Not After : Oct 25 16:25:24 2025 GMT Subject: CN=68f3bf74-4e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:97:67:69:6c:2d:c9:1a:ed:a9:7c:12:72: 16:c2:05:6b:36:db:bf:11:75:c7:25:54:a2:2d:03: cb:11:89:0b:a9:0b:40:e9:c9:f3:dc:76:f6:46:55: dc:02:0f:8b:d9:45:7f:ea:02:2f:c8:67:a2:5d:0c: ca:07:9a:a3:35:80:ee:f7:6c:a1:98:9e:a8:20:4d: 3b:bc:33:14:4d:3d:0e:e5:a2:6f:07:3b:9d:15:63: 57:41:bb:44:9f:04:bf:7a:22:d0:b4:a9:a4:c1:e0: 27:3d:a6:24:fc:c9:33:e1:05:28:81:08:1b:da:87: 8e:4c:cc:2d:ae:50:8d:ab:4a:80:2d:32:a1:62:c7: a1:39:14:0a:d1:5a:89:06:f3:5a:ba:75:cb:5e:37: aa:1f:2d:dc:a9:3a:9c:62:51:df:cc:b9:35:90:94: a6:68:46:78:93:93:04:2f:c3:b2:76:59:32:fe:53: 42:2e:fe:15:5d:ed:bc:4d:e9:ab:58:6f:e2:ea:d8: c8:2f:97:56:8e:eb:f0:45:87:36:24:c8:89:fc:aa: ef:f7:34:40:12:7a:53:48:86:78:1f:79:02:55:4d: ec:02:90:6a:d5:04:08:44:bc:a3:62:d2:eb:84:c2: 7e:e9:51:6a:28:90:1b:77:2c:5d:0f:1b:17:3c:58: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CA:2F:C5:C5:77:36:DB:D4:41:EC:E7:1A:AD:49:E6:1A:9D:2C:94 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:76:d5:fd:76:8c:24:58:7a:e1:86:00:42:18:f9:7f:a9:d2: ec:79:bc:bb:a5:30:87:db:82:7f:86:f5:a0:86:25:aa:07:d7: d3:a7:b9:bf:74:9e:6d:7f:00:32:d6:0e:40:a4:54:4c:cc:c2: dd:c5:d4:8e:1d:37:03:a0:f3:2e:92:e0:4d:8e:81:49:20:05: f3:cd:ec:fc:a5:87:b2:94:3e:7d:a7:5f:71:76:73:2a:62:af: 98:ff:4b:04:11:a3:ce:ed:ab:f0:82:28:32:3b:40:5c:1b:0b: 8f:00:be:00:c8:26:49:d8:21:0f:e5:15:5f:85:3a:78:56:b8: 99:95:b2:8e:ba:f4:7e:6c:26:c7:fb:d8:da:ed:00:09:c3:2b: 93:92:92:35:fc:fd:63:de:b3:49:77:a0:14:4e:13:0e:98:21: 2d:f4:aa:d5:aa:da:86:7e:d6:9f:f6:69:f6:0f:91:61:2d:85: d7:c3:8c:6f:20:48:4f:28:2c:b9:ca:13:0b:15:a9:f3:aa:d5: 7f:cf:69:e3:64:6a:75:6c:f1:b4:f3:f8:5c:89:45:17:25:31: 67:44:29:71:11:38:60:35:6a:7a:51:a6:d7:2a:af:e5:52:6c: 53:1f:cc:90:12:69:37:2d:80:59:7a:7f:17:4d:21:1a:e2:88: f3:d1:80:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMDE4MTYyNTI0WhcNMjUxMDI1MTYyNTI0WjAYMRYwFAYD VQQDEw02OGYzYmY3NC00ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wKXZ2lsLcka7al8EnIWwgVrNtu/EXXHJVSiLQPLEYkLqQtA6cnz3Hb2RlXc Ag+L2UV/6gIvyGeiXQzKB5qjNYDu92yhmJ6oIE07vDMUTT0O5aJvBzudFWNXQbtE nwS/eiLQtKmkweAnPaYk/Mkz4QUogQgb2oeOTMwtrlCNq0qALTKhYsehORQK0VqJ BvNaunXLXjeqHy3cqTqcYlHfzLk1kJSmaEZ4k5MEL8Oydlky/lNCLv4VXe28Temr WG/i6tjIL5dWjuvwRYc2JMiJ/Krv9zRAEnpTSIZ4H3kCVU3sApBq1QQIRLyjYtLr hMJ+6VFqKJAbdyxdDxsXPFhGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3KL8XF dzbb1EHs5xqtSeYanSyUMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOdtX9dowkWHrhhgBCGPl/qdLseby7pTCH24J/hvWghiWqB9fTp7m/ dJ5tfwAy1g5ApFRMzMLdxdSOHTcDoPMukuBNjoFJIAXzzez8pYeylD59p19xdnMq Yq+Y/0sEEaPO7avwgigyO0BcGwuPAL4AyCZJ2CEP5RVfhTp4VriZlbKOuvR+bCbH +9ja7QAJwyuTkpI1/P1j3rNJd6AUThMOmCEt9KrVqtqGftaf9mn2D5FhLYXXw4xv IEhPKCy5yhMLFanzqtV/z2njZGp1bPG08/hciUUXJTFnRClxEThgNWp6UabXKq/l UmxTH8yQEmk3LYBZen8XTSEa4ojz0YCo -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:47 2025 by rpki-client