$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json) Hash identifier: nIRNkVGrbK81b40RUfmZ+m/0ID0NTMi7Q+ezdnQgJXA= Subject key identifier: 94:57:C5:D1:B9:F1:9B:6F:A4:6A:7C:5C:15:13:4E:0F:8D:34:BE:1F Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft Manifest number: 8C Signing time: Sun 19 Oct 2025 09:53:10 +0000 Manifest this update: Sun 19 Oct 2025 09:53:10 +0000 Manifest next update: Sun 26 Oct 2025 09:53:10 +0000 Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: MFdo52YghoBu6JaHoJW+S4hUdfohHdgGYVrUNoeLauE=) 2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: KpVW4cQhj8alBR7jcPtqJ2dq3s1eufaG57nwvRNG5IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Validity Not Before: Oct 19 09:53:10 2025 GMT Not After : Oct 26 09:53:10 2025 GMT Subject: CN=68f4b506-7b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:6e:35:82:6f:0d:46:34:71:4a:86:eb:ee: 48:ce:34:a3:8c:66:2a:ce:f9:04:4c:62:3b:46:fc: 30:28:5b:ba:d1:a8:fb:28:bb:72:20:0f:68:04:db: 82:ba:45:5f:51:9b:5d:a6:b8:2c:f0:37:7a:06:03: ad:e0:db:32:80:cd:bd:33:94:57:22:b1:80:93:66: 0c:fb:8d:2e:fe:64:6b:79:61:c0:f4:1c:d7:ea:5f: 61:9e:aa:93:4c:37:b5:1b:63:f1:3b:dc:07:d6:66: c1:10:ad:f8:c1:71:e2:8f:8d:cb:40:35:3b:42:c2: 1b:6b:2e:3a:80:27:72:bc:08:11:c0:3d:2a:c2:f6: aa:71:c5:73:e7:7a:0f:05:30:1e:7e:a2:c3:6d:f6: 00:8f:a1:fb:19:97:f2:48:24:da:9a:c8:70:cf:97: 51:e1:be:e3:b6:4b:d0:d0:0d:e0:6b:2f:68:10:f0: 0a:35:db:f3:1e:ba:8e:f6:90:6b:59:af:12:ba:99: a9:be:cf:d9:ea:7f:b8:0f:77:38:a9:13:e2:f9:e2: 09:84:2f:e1:ee:0e:ba:e5:9a:c1:e0:36:e9:d9:b7: f3:d1:7e:12:5e:5c:66:c2:0d:37:a7:86:a0:13:b0: b3:39:56:48:52:42:25:e6:76:c6:39:cc:8b:c4:67: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:C5:D1:B9:F1:9B:6F:A4:6A:7C:5C:15:13:4E:0F:8D:34:BE:1F X509v3 Authority Key Identifier: keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d7:cb:ef:84:ec:84:9e:27:2d:65:67:90:d0:a9:1a:34:21: a0:f5:b2:29:51:9c:2f:34:b4:29:d9:e1:72:c1:9a:b5:5f:9f: 98:3c:6d:7e:e5:1d:56:51:07:0e:d2:8f:1a:11:3b:18:34:51: f6:42:29:af:f3:82:a4:80:8d:9d:39:ce:70:79:8c:c1:47:c3: 06:60:4c:89:f2:a9:cf:e9:c6:ea:da:f8:ea:96:8e:d1:40:f1: ad:bc:a9:04:4a:84:3e:e5:7a:e3:94:27:fa:98:0e:d3:22:f7: 58:54:9b:4f:e4:5c:16:f4:d5:b4:40:41:0d:9e:be:4f:60:c5: 82:24:67:c2:86:30:a3:a4:8d:46:3a:4a:15:2e:e3:00:d4:0d: f1:c0:35:92:7b:b9:25:2a:33:d3:cb:0c:fe:c6:d4:9e:15:39: dc:ba:8a:83:69:9f:c5:03:6f:92:a9:c0:a0:8f:ce:15:99:b7: 1f:2e:a6:66:9c:e2:be:2b:de:87:1a:f0:84:d8:ae:e6:98:53: 03:86:bf:70:e2:45:e2:5d:10:be:1b:ed:33:97:f0:c8:d8:f0: 06:7e:21:6b:d1:9f:e7:62:91:5c:e7:47:43:bb:f5:d9:56:aa: 46:33:e9:ea:ee:9c:fa:da:db:81:f1:c3:59:73:a7:c0:48:eb: 47:ff:74:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD OTEzMzBCRkMwHhcNMjUxMDE5MDk1MzEwWhcNMjUxMDI2MDk1MzEwWjAYMRYwFAYD VQQDEw02OGY0YjUwNi03YjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUduNYJvDUY0cUqG6+5IzjSjjGYqzvkETGI7RvwwKFu60aj7KLtyIA9oBNuC ukVfUZtdprgs8Dd6BgOt4NsygM29M5RXIrGAk2YM+40u/mRreWHA9BzX6l9hnqqT TDe1G2PxO9wH1mbBEK34wXHij43LQDU7QsIbay46gCdyvAgRwD0qwvaqccVz53oP BTAefqLDbfYAj6H7GZfySCTamshwz5dR4b7jtkvQ0A3gay9oEPAKNdvzHrqO9pBr Wa8Supmpvs/Z6n+4D3c4qRPi+eIJhC/h7g665ZrB4Dbp2bfz0X4SXlxmwg03p4ag E7CzOVZIUkIl5nbGOcyLxGcEiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRXxdG5 8ZtvpGp8XBUTTg+NNL4fMB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODM1Ny8xNEE3OEYyQ0RGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQ S0g5TTVzdzdSR0xKRXpDX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs18vvhOyEnictZWeQ0KkaNCGg9bIpUZwvNLQp2eFywZq1X5+YPG1+ 5R1WUQcO0o8aETsYNFH2Qimv84KkgI2dOc5weYzBR8MGYEyJ8qnP6cbq2vjqlo7R QPGtvKkESoQ+5XrjlCf6mA7TIvdYVJtP5FwW9NW0QEENnr5PYMWCJGfChjCjpI1G OkoVLuMA1A3xwDWSe7klKjPTywz+xtSeFTncuoqDaZ/FA2+SqcCgj84VmbcfLqZm nOK+K96HGvCE2K7mmFMDhr9w4kXiXRC+G+0zl/DI2PAGfiFr0Z/nYpFc50dDu/XZ VqpGM+nq7pz62tuB8cNZc6fASOtH/3Tw -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:37 2025 by rpki-client