$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: NylilXwRI7LnL1CpSQ7lD2W2l1wMH22tzVyR+yKBQcM= Subject key identifier: B8:7F:E0:69:61:DC:D1:85:7A:E6:0A:35:02:17:79:A0:9F:00:EF:1F Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 1729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 171C Signing time: Sat 18 Oct 2025 17:02:34 +0000 Manifest this update: Sat 18 Oct 2025 17:02:33 +0000 Manifest next update: Sat 25 Oct 2025 17:02:33 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: tUkj5Q3nXqyqXMUfQibMrnv9qiNtmHtUkVLpac7bmF4=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5929 (0x1729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Oct 18 17:02:33 2025 GMT Not After : Oct 25 17:02:33 2025 GMT Subject: CN=68f3c829-bd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9a:9a:c7:4a:c9:85:cb:0b:45:72:e8:ff:a4: 3e:9e:4d:b5:47:78:c9:b9:b1:19:4f:7c:ec:f7:36: 58:33:c2:05:02:b0:1c:fc:8f:c5:0a:87:d8:31:5e: 71:9a:28:94:20:3f:0f:cf:2d:d3:d7:38:75:9b:08: 69:d7:74:a3:dd:39:ba:f5:7d:39:cb:0a:80:9c:e7: cd:89:49:44:9d:2d:d7:d5:69:06:40:61:3f:79:16: 55:65:93:95:74:21:2c:39:9c:6a:6e:c3:91:0d:30: 6c:01:4e:ff:40:b9:67:c0:8a:26:5f:f8:4f:f1:25: 09:6a:ad:ef:c0:dd:26:a2:19:90:c8:29:82:4f:2f: e9:d8:24:0b:49:b3:68:35:c5:dc:23:70:17:e3:be: 7c:d4:bf:69:38:af:d5:d2:1a:e6:a3:90:e0:2c:89: 4c:ca:46:f5:44:46:bc:af:21:f2:48:e4:ab:a9:ff: 29:18:4e:a1:29:15:1a:f9:c3:3c:b3:88:65:65:61: 32:2d:f0:54:d6:9e:d5:69:a9:ad:4e:e8:5c:22:25: 42:b2:27:0c:ca:80:5f:bd:d8:ca:92:95:2e:bb:4f: 00:0a:d3:5e:fc:61:30:99:6b:dc:73:e3:30:6f:56: c9:76:14:de:9f:2e:1d:6c:33:70:07:3b:27:7a:48: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7F:E0:69:61:DC:D1:85:7A:E6:0A:35:02:17:79:A0:9F:00:EF:1F X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:85:69:73:bd:c9:0e:ab:3c:c9:b3:82:6f:a3:83:d2:66:af: 18:e2:6e:25:8d:95:b2:43:b3:4b:a0:2a:e1:69:b1:24:05:2c: 26:c9:0a:e7:3d:80:96:e0:93:a4:51:0e:c1:52:5d:52:6a:69: de:9f:63:23:f6:10:5f:e9:0e:6b:52:00:5b:d2:4e:88:fb:d6: 7f:75:08:8c:e5:a7:49:8a:ab:21:03:1f:fc:9c:91:6a:3f:8d: d3:f7:c0:32:cc:91:ca:2d:86:fd:7a:a9:ab:15:63:50:3b:d4: f9:48:02:12:5f:1e:e9:d6:de:32:da:85:46:32:b6:5e:1e:21: c8:ec:34:8c:9f:23:74:09:11:83:04:70:10:56:20:36:9e:85: 6e:ea:26:41:fc:02:3b:c4:e2:4c:e8:27:69:62:d4:54:f9:dc: 4e:30:bd:94:7f:29:bc:28:da:3e:d9:40:44:06:ce:fb:ba:4f: ee:e8:6b:1d:f4:cc:2a:f1:ad:3b:47:e5:f8:5a:cf:3d:52:c0: a4:83:e5:71:68:70:89:a5:8f:fb:94:6a:88:7b:c8:7c:19:ba: bb:aa:61:c5:88:d2:03:c1:f1:b1:98:8e:ea:a9:aa:b8:bd:d7: 3a:e4:33:89:84:ad:43:f8:65:52:e6:df:04:f2:17:1a:af:ad: 54:ba:6c:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUxMDE4MTcwMjMzWhcNMjUxMDI1MTcwMjMzWjAYMRYwFAYD VQQDEw02OGYzYzgyOS1iZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Jqax0rJhcsLRXLo/6Q+nk21R3jJubEZT3zs9zZYM8IFArAc/I/FCofYMV5x miiUID8Pzy3T1zh1mwhp13Sj3Tm69X05ywqAnOfNiUlEnS3X1WkGQGE/eRZVZZOV dCEsOZxqbsORDTBsAU7/QLlnwIomX/hP8SUJaq3vwN0mohmQyCmCTy/p2CQLSbNo NcXcI3AX47581L9pOK/V0hrmo5DgLIlMykb1REa8ryHySOSrqf8pGE6hKRUa+cM8 s4hlZWEyLfBU1p7VaamtTuhcIiVCsicMyoBfvdjKkpUuu08ACtNe/GEwmWvcc+Mw b1bJdhTeny4dbDNwBzsnekjlpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh/4Glh 3NGFeuYKNQIXeaCfAO8fMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBhWlzvckOqzzJs4Jvo4PSZq8Y4m4ljZWyQ7NLoCrhabEkBSwmyQrn PYCW4JOkUQ7BUl1Samnen2Mj9hBf6Q5rUgBb0k6I+9Z/dQiM5adJiqshAx/8nJFq P43T98AyzJHKLYb9eqmrFWNQO9T5SAISXx7p1t4y2oVGMrZeHiHI7DSMnyN0CRGD BHAQViA2noVu6iZB/AI7xOJM6CdpYtRU+dxOML2Ufym8KNo+2UBEBs77uk/u6Gsd 9Mwq8a07R+X4Ws89UsCkg+VxaHCJpY/7lGqIe8h8Gbq7qmHFiNIDwfGxmI7qqaq4 vdc65DOJhK1D+GVS5t8E8hcar61Uumy/ -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:00 2025 by rpki-client