$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: el0Ft328srXxQtcHMV+uqO90mtdVtm6FnL2xU9DQuFs= Subject key identifier: 43:4A:6B:3E:8F:1F:87:77:3F:B3:A2:0D:4E:7F:D4:2E:CE:3F:6E:7A Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 0598 Signing time: Tue 04 Nov 2025 23:15:49 +0000 Manifest this update: Tue 04 Nov 2025 23:15:49 +0000 Manifest next update: Tue 11 Nov 2025 23:15:49 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: ZFfty1t9nnZrnneXeeMvR6fLXHpfpwFzXhrKbSuIEoo=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CdrfPMZy52he8bpwd/sQIj17yAvkU7L0EqcCRVjCrHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: Nov 4 23:15:49 2025 GMT Not After : Nov 11 23:15:49 2025 GMT Subject: CN=690a8925-5b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:30:07:2b:38:0c:a5:ed:9b:f2:40:9c:7d: 40:c5:09:e4:e9:ff:88:5c:7c:6e:1b:b6:52:59:a7: 5e:15:0d:95:8b:ff:22:cd:11:eb:d7:c6:a2:ac:ea: b3:d6:fe:38:80:24:3c:21:58:dc:ef:df:11:f5:70: e5:0a:45:94:b3:e4:be:42:97:2a:29:c5:47:1f:b5: 51:82:ac:46:8a:0a:8b:25:26:cb:e5:bd:11:20:9b: fc:87:ed:42:31:c1:0e:dd:54:e8:f0:c7:01:65:4f: d2:86:16:4c:56:ed:fd:d5:95:cb:a4:9a:fd:73:12: 96:ad:da:20:31:74:51:9b:46:06:8d:e4:20:96:e3: 9e:c6:a0:9c:d8:b8:0b:c3:63:75:91:96:f0:0f:54: d1:93:1c:b5:c7:ff:7f:40:60:dd:ae:b6:92:1f:bd: 11:5c:bb:20:08:52:25:94:eb:60:1f:10:ea:ef:33: 9b:9c:5c:85:6e:21:40:0c:0a:29:b2:78:09:9d:07: 4c:72:37:36:d7:e4:1c:aa:6e:cc:76:32:19:69:11: ae:7a:fb:df:bb:97:b4:6e:47:93:a6:5e:6b:b3:09: d8:b4:d3:5a:b1:6f:3e:14:09:26:91:cb:c8:77:63: f0:1b:d4:f3:9d:27:2e:eb:c4:6c:81:b9:8b:d2:19: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4A:6B:3E:8F:1F:87:77:3F:B3:A2:0D:4E:7F:D4:2E:CE:3F:6E:7A X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1d:c0:fa:90:65:1c:61:39:ac:02:2b:a1:90:0d:d9:2f:8a: e5:c4:88:f6:b4:eb:67:dc:64:2e:65:51:12:98:84:5a:f8:26: 76:5e:eb:e8:fe:33:26:f7:cd:90:8c:af:0e:c1:ee:40:f1:e5: db:24:60:f8:fc:50:84:a4:43:78:35:76:61:da:71:70:da:f4: 6e:93:c7:20:61:e3:b0:61:85:78:62:77:36:52:1d:3e:ca:52: 2d:55:3b:21:39:c9:41:96:63:d6:7b:a2:99:94:c3:9e:ce:5b: 35:29:0b:68:fc:73:10:50:76:7e:4f:85:c0:65:c7:94:ad:13: 9a:4a:09:4b:1d:87:48:ce:89:f8:c3:c4:21:53:78:6c:a6:3c: d2:39:c9:5b:9f:75:6b:58:a9:44:63:44:f1:18:59:49:fe:b8: 57:f4:e5:8c:d1:78:b0:ea:7e:0d:27:6a:94:19:d9:26:f9:52: cf:8f:02:4d:af:a5:03:0c:00:5a:43:18:0b:d2:e7:39:a9:33: ae:05:c5:68:9e:33:be:5a:59:d7:40:f3:8c:40:f0:e3:7d:56: f4:2b:f9:d5:a5:67:a8:d6:3f:5d:7d:50:e8:58:f5:7c:ef:bf: 71:17:19:8b:a7:69:99:ba:af:5c:b4:51:96:df:cc:26:82:48: fc:75:02:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUxMTA0MjMxNTQ5WhcNMjUxMTExMjMxNTQ5WjAYMRYwFAYD VQQDEw02OTBhODkyNS01Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrIwBys4DKXtm/JAnH1AxQnk6f+IXHxuG7ZSWadeFQ2Vi/8izRHr18airOqz 1v44gCQ8IVjc798R9XDlCkWUs+S+QpcqKcVHH7VRgqxGigqLJSbL5b0RIJv8h+1C McEO3VTo8McBZU/ShhZMVu391ZXLpJr9cxKWrdogMXRRm0YGjeQgluOexqCc2LgL w2N1kZbwD1TRkxy1x/9/QGDdrraSH70RXLsgCFIllOtgHxDq7zObnFyFbiFADAop sngJnQdMcjc21+Qcqm7MdjIZaRGuevvfu5e0bkeTpl5rswnYtNNasW8+FAkmkcvI d2PwG9TznScu68RsgbmL0hmQTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENKaz6P H4d3P7OiDU5/1C7OP256MB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/HcD6kGUcYTmsAiuhkA3ZL4rlxIj2tOtn3GQuZVESmIRa+CZ2Xuvo /jMm982QjK8Owe5A8eXbJGD4/FCEpEN4NXZh2nFw2vRuk8cgYeOwYYV4Ync2Uh0+ ylItVTshOclBlmPWe6KZlMOezls1KQto/HMQUHZ+T4XAZceUrROaSglLHYdIzon4 w8QhU3hspjzSOclbn3VrWKlEY0TxGFlJ/rhX9OWM0Xiw6n4NJ2qUGdkm+VLPjwJN r6UDDABaQxgL0uc5qTOuBcVonjO+WlnXQPOMQPDjfVb0K/nVpWeo1j9dfVDoWPV8 779xFxmLp2mZuq9ctFGW38wmgkj8dQLD -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:36 2025 by rpki-client