$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: jcrU12Tk0SCGbS7CX1xCwwQov2VKRho2JRg8jt2obNU= Subject key identifier: 8B:7E:16:14:4F:83:C2:47:F7:CE:6E:BC:39:3E:22:CB:ED:9B:B5:81 Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 0165 Signing time: Sun 19 Oct 2025 06:40:58 +0000 Manifest this update: Sun 19 Oct 2025 06:40:57 +0000 Manifest next update: Sun 26 Oct 2025 06:40:57 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: bS3mHjMdhhlqf2lXA4jOUKqUzdL3aMjdzgl0VdLs+nA=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: Oct 19 06:40:57 2025 GMT Not After : Oct 26 06:40:57 2025 GMT Subject: CN=68f487fa-0d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:2c:0f:07:36:ff:20:f4:6b:88:10:9f:b6: 87:5e:1a:9e:27:08:98:e5:11:2e:29:27:06:4e:ae: 12:5a:6d:0c:61:02:14:6b:10:ee:d9:c3:86:17:4c: 6c:99:d3:4f:56:42:dd:66:76:4f:a4:c9:f7:97:fc: d2:fb:7d:ca:13:b5:44:43:18:1a:88:b0:f7:4f:0d: c9:d0:89:34:62:00:d7:6e:a7:f7:ad:2a:ec:55:23: fb:3a:c3:63:08:f8:00:4b:16:33:eb:a0:e0:9a:8f: 70:f9:fa:da:65:e4:a8:b4:3e:65:4b:62:b5:dd:eb: 35:c3:a6:28:e5:cc:9f:de:e6:db:81:f8:df:50:d9: ea:5f:d3:0c:68:21:14:fe:93:5a:3c:f3:50:e7:fc: 73:62:b7:dd:1a:52:cc:5a:90:f2:bf:ad:ec:17:89: 9c:5f:4a:ec:a7:c4:63:2f:a1:98:93:af:e0:8b:2c: 8d:ea:62:42:f1:4c:66:32:c5:03:87:5f:c3:47:f4: 0e:fc:b2:cd:3e:aa:9c:92:51:8b:61:b5:c4:f7:92: 36:c4:5f:30:73:b0:ac:96:f3:10:b1:b3:48:7e:98: e2:1d:87:28:78:0f:28:e9:49:df:13:36:44:27:c8: 05:c0:4d:bd:a6:a5:ee:46:6a:48:3b:6f:d6:b0:e4: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:16:14:4F:83:C2:47:F7:CE:6E:BC:39:3E:22:CB:ED:9B:B5:81 X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:15:28:6d:1c:67:4f:81:2f:73:f2:6f:6a:bf:3b:da:5c:3d: 8a:6e:67:d8:12:8a:11:3d:a2:0e:5d:3c:b5:5d:32:5d:eb:c9: 42:3a:4b:0a:53:6c:4e:b7:a4:03:23:25:30:01:cb:f0:40:8c: ef:1e:4a:87:34:74:13:95:3a:be:18:77:9e:d8:eb:ce:98:c0: df:69:1d:9f:5d:c1:8d:43:f1:9e:e7:a3:da:80:9e:e8:c5:e8: a1:98:62:ff:ea:10:d5:b9:6b:af:cf:d5:e7:6b:c6:33:cb:51: 69:11:6f:ce:3b:34:1e:25:89:e0:fa:cc:02:32:3b:bb:7b:5e: 38:99:5c:c2:3b:16:83:ba:6c:83:3c:9d:89:b6:09:9a:03:82: 0a:1b:3f:42:2e:8a:36:55:fd:31:9c:33:99:99:d5:97:ba:48: cc:79:b6:5e:ec:8e:0f:3b:68:3c:88:47:35:43:c2:82:38:08: 97:27:31:c4:68:5f:02:d8:58:9b:35:cb:e1:59:fe:e8:89:b7: c1:28:67:95:09:ec:9d:72:c9:23:a8:44:df:5c:f1:ae:be:58: 68:63:bf:dc:7e:7e:dd:2c:30:9f:6d:f1:74:e9:d1:09:02:18: fa:99:02:ba:47:a3:60:c1:10:4d:43:a2:b4:77:4f:db:d5:1a: 54:d0:7d:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD RjUwMEQzRjEwHhcNMjUxMDE5MDY0MDU3WhcNMjUxMDI2MDY0MDU3WjAYMRYwFAYD VQQDEw02OGY0ODdmYS0wZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluksDwc2/yD0a4gQn7aHXhqeJwiY5REuKScGTq4SWm0MYQIUaxDu2cOGF0xs mdNPVkLdZnZPpMn3l/zS+33KE7VEQxgaiLD3Tw3J0Ik0YgDXbqf3rSrsVSP7OsNj CPgASxYz66Dgmo9w+fraZeSotD5lS2K13es1w6Yo5cyf3ubbgfjfUNnqX9MMaCEU /pNaPPNQ5/xzYrfdGlLMWpDyv63sF4mcX0rsp8RjL6GYk6/giyyN6mJC8UxmMsUD h1/DR/QO/LLNPqqcklGLYbXE95I2xF8wc7CslvMQsbNIfpjiHYcoeA8o6UnfEzZE J8gFwE29pqXuRmpIO2/WsOR9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt+FhRP g8JH985uvDk+Isvtm7WBMB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ VzdsNXB1THk1NnJQVUEwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmFShtHGdPgS9z8m9qvzvaXD2KbmfYEooRPaIOXTy1XTJd68lCOksK U2xOt6QDIyUwAcvwQIzvHkqHNHQTlTq+GHee2OvOmMDfaR2fXcGNQ/Ge56PagJ7o xeihmGL/6hDVuWuvz9Xna8Yzy1FpEW/OOzQeJYng+swCMju7e144mVzCOxaDumyD PJ2JtgmaA4IKGz9CLoo2Vf0xnDOZmdWXukjMebZe7I4PO2g8iEc1Q8KCOAiXJzHE aF8C2FibNcvhWf7oibfBKGeVCeydcskjqETfXPGuvlhoY7/cfn7dLDCfbfF06dEJ Ahj6mQK6R6NgwRBNQ6K0d0/b1RpU0H3w -----END CERTIFICATE-----Generated at Tue Oct 21 01:01:27 2025 by rpki-client