$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: U/N534si6n6ocl9uKVyiInZCavfj5sM6r4DFvy38sgE= Subject key identifier: 25:B0:82:58:6F:D5:B1:C0:ED:9E:7F:17:F1:8E:8F:30:39:22:DC:E7 Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 09E6 Signing time: Sat 18 Oct 2025 20:57:50 +0000 Manifest this update: Sat 18 Oct 2025 20:57:49 +0000 Manifest next update: Sat 25 Oct 2025 20:57:49 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: cX7tJt1oi6PAtxoGPB7Ixoh2tHeFdPCbTstWZWSh9mo=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: MZTRHkBugOG0/w9DN1EvKjeTW8go+K0xNXADKQ+F2nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Oct 18 20:57:49 2025 GMT Not After : Oct 25 20:57:49 2025 GMT Subject: CN=68f3ff4e-ca6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d1:90:7f:11:e3:ec:cd:e4:35:4c:90:db:8b: c4:24:bf:5c:b0:9f:db:9a:3d:f2:b4:9c:58:f1:ee: 62:bd:71:28:d3:fc:a5:12:fc:0a:00:12:0b:a2:71: 65:a3:2d:56:28:42:fa:c9:25:b5:d9:07:21:c4:dd: 6f:40:f7:a1:ee:5b:8b:0e:24:0f:87:f5:97:01:84: a4:8b:17:d2:b2:99:b1:fc:9f:65:64:ba:97:30:0c: 72:db:af:69:a8:01:5e:95:91:5d:da:4e:b0:bf:aa: db:cf:72:3b:61:8d:ed:66:db:be:cf:03:9d:6e:5c: c3:60:e7:13:93:a0:15:b4:59:7b:fe:74:0c:a7:dc: 41:5d:48:d1:26:70:35:79:a5:d9:90:ea:5a:4c:10: 18:18:20:18:1a:2b:94:31:a5:69:c3:50:11:4c:4e: d1:e7:98:de:3d:a9:a4:b4:05:f7:a1:f1:9b:18:07: 29:d5:52:ee:14:5e:82:61:40:23:f1:01:1b:fa:b6: a5:86:1f:93:c9:3f:d6:93:39:69:18:73:ac:d0:e1: 59:fb:74:01:93:7f:9a:ac:c5:00:19:fc:a1:ef:b1: f7:39:ba:8d:aa:78:a6:58:38:5a:f2:a9:7f:d9:f1: b5:01:57:65:3e:a9:4a:ef:f5:8c:37:13:2b:50:0a: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B0:82:58:6F:D5:B1:C0:ED:9E:7F:17:F1:8E:8F:30:39:22:DC:E7 X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e3:37:7f:97:54:0e:41:a4:bf:39:ab:9c:0d:f6:ed:e9:df: 72:ca:e6:99:e1:09:0e:73:53:ec:9d:85:bf:b1:97:6b:b6:13: af:6a:32:7f:60:6a:57:f5:0d:94:b8:7d:75:ca:62:47:65:2a: c1:c1:2e:bf:f1:ff:28:a5:e7:8a:a0:d9:27:48:ef:2b:19:ae: 3a:63:af:60:c4:b6:9d:73:eb:fe:e0:a1:9d:58:3a:2e:19:2e: 69:4e:6d:82:7c:e2:43:e4:30:95:ca:fe:36:5e:20:60:88:46: 25:2f:a7:77:1b:68:db:b5:2e:61:25:fd:9c:ce:71:a7:8e:07: 42:e6:04:10:54:b6:6e:21:d6:72:b6:3d:ef:de:3d:22:58:06: 5a:87:36:54:66:db:d6:dd:a4:4d:88:7d:53:dc:63:4b:da:76: 9c:8a:6e:5d:7e:a0:0c:7c:f3:39:ff:f9:bf:28:1d:7d:17:cc: e8:db:bc:e0:70:0d:5a:69:9e:8d:9c:c2:90:dc:9f:55:9c:fd: 04:f5:9e:db:1d:a4:11:36:dd:5f:32:93:d3:ff:3b:0b:11:5d: 9d:f5:df:c4:11:9c:4c:db:3b:bb:59:39:4d:a4:32:78:ae:9e: 5f:0d:10:6d:42:70:5f:85:f5:ba:f3:60:0b:34:28:b7:45:7e: c7:fa:e7:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUxMDE4MjA1NzQ5WhcNMjUxMDI1MjA1NzQ5WjAYMRYwFAYD VQQDEw02OGYzZmY0ZS1jYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29GQfxHj7M3kNUyQ24vEJL9csJ/bmj3ytJxY8e5ivXEo0/ylEvwKABILonFl oy1WKEL6ySW12QchxN1vQPeh7luLDiQPh/WXAYSkixfSspmx/J9lZLqXMAxy269p qAFelZFd2k6wv6rbz3I7YY3tZtu+zwOdblzDYOcTk6AVtFl7/nQMp9xBXUjRJnA1 eaXZkOpaTBAYGCAYGiuUMaVpw1ARTE7R55jePamktAX3ofGbGAcp1VLuFF6CYUAj 8QEb+ralhh+TyT/WkzlpGHOs0OFZ+3QBk3+arMUAGfyh77H3ObqNqnimWDha8ql/ 2fG1AVdlPqlK7/WMNxMrUAqCnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWwglhv 1bHA7Z5/F/GOjzA5ItznMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ4zd/l1QOQaS/OaucDfbt6d9yyuaZ4QkOc1PsnYW/sZdrthOvajJ/ YGpX9Q2UuH11ymJHZSrBwS6/8f8opeeKoNknSO8rGa46Y69gxLadc+v+4KGdWDou GS5pTm2CfOJD5DCVyv42XiBgiEYlL6d3G2jbtS5hJf2cznGnjgdC5gQQVLZuIdZy tj3v3j0iWAZahzZUZtvW3aRNiH1T3GNL2nacim5dfqAMfPM5//m/KB19F8zo27zg cA1aaZ6NnMKQ3J9VnP0E9Z7bHaQRNt1fMpPT/zsLEV2d9d/EEZxM2zu7WTlNpDJ4 rp5fDRBtQnBfhfW682ALNCi3RX7H+udV -----END CERTIFICATE-----Generated at Mon Oct 20 21:47:12 2025 by rpki-client