$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: 2nxQdVRp0+2A8ZOPLoKOzSNKnI2R2HdD4A6SJLEqokw= Subject key identifier: 26:90:DD:71:DF:88:A8:62:FB:45:EB:53:2B:7D:A2:4D:54:CD:39:A3 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1E3C Signing time: Sun 02 Nov 2025 16:05:24 +0000 Manifest this update: Sun 02 Nov 2025 16:05:23 +0000 Manifest next update: Sun 09 Nov 2025 16:05:23 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: CMzgLaKmRxyNmLZsepgN/tL3pdF2yKJ2NXzzzzt3Ggc=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7755 (0x1e4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Nov 2 16:05:23 2025 GMT Not After : Nov 9 16:05:23 2025 GMT Subject: CN=69078144-afb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:94:85:40:0b:b9:3d:38:2e:0d:6c:1e:d3: 21:bc:f7:9f:bf:c8:04:f9:cb:56:15:a2:f1:c7:8a: 75:f8:b8:88:77:d4:47:49:b7:ae:c4:6e:c0:de:bd: 59:11:4c:0e:83:d8:e1:83:5f:35:2d:8b:06:c1:6b: 57:92:b4:6b:e8:c5:ca:23:d5:d0:1f:14:12:2a:8f: 72:8e:7c:88:c4:89:3c:32:2e:ec:b6:b7:12:cc:f6: 05:19:5b:6a:4c:91:c7:00:ac:f0:e4:d6:58:49:4e: ee:03:d3:16:c3:3f:51:1d:23:14:e1:59:67:e1:a1: 21:c4:99:47:88:cf:c7:b8:41:8e:f5:53:ed:f4:7d: b5:90:12:c0:f2:a5:a0:7a:db:b7:bb:fd:d3:e1:08: 0c:a1:bc:fb:32:1d:c4:35:8e:f4:32:59:94:3e:b1: f8:65:47:2d:28:3c:22:60:d0:d3:54:59:3b:5e:a3: b6:dc:e1:fb:49:97:84:27:38:bd:0a:5b:69:cb:f8: 3c:c5:f8:b2:e1:24:5b:d8:24:e4:37:61:94:18:01: f3:b5:0c:fe:01:fc:ed:57:f0:2b:e0:d2:25:f5:aa: 47:30:5d:e7:3b:65:05:21:ca:22:8a:9a:f7:50:ab: 3b:fa:22:32:65:fb:54:6f:9e:36:d8:0c:48:91:80: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:90:DD:71:DF:88:A8:62:FB:45:EB:53:2B:7D:A2:4D:54:CD:39:A3 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9d:65:5d:29:4c:5f:73:24:a0:6f:c8:54:de:18:d6:e0:0d: 97:65:c4:a0:3b:8c:82:0d:73:2a:c0:83:b7:9e:3e:4b:b7:46: 3a:8a:64:1c:95:1f:83:d0:7c:2d:26:30:76:ca:70:0c:07:c3: 0c:26:22:4c:2c:16:2e:22:0b:3e:1d:af:17:1a:71:ff:3f:68: e3:5f:64:b1:25:91:8e:3f:a0:e8:0a:41:65:77:7b:a2:8e:6a: 25:ec:eb:58:14:58:52:85:93:81:24:83:8f:07:14:c2:d1:ef: 9f:c7:f2:8a:73:74:35:14:15:f1:0d:6c:86:53:f1:ee:90:a1: 48:5f:f0:6f:1c:d4:bc:aa:af:ce:4a:4b:a1:70:1e:70:06:d1: 03:f6:08:65:e6:ce:59:61:61:81:47:67:d9:a7:6b:d3:15:53: 4f:e3:9a:c8:68:25:bc:fd:72:12:ed:a9:2b:ad:9a:fc:9f:16: 0a:6c:7c:a1:0e:ba:54:d4:4e:39:b8:28:24:17:8c:b0:dc:97: cc:37:7b:d3:0f:25:9d:2e:88:db:2d:87:ec:ce:76:f0:5f:7f: cb:67:be:7b:6d:af:5f:b9:d5:dc:1b:f0:fa:d9:69:c5:ea:e8: d9:cd:b2:c2:d5:9d:98:6c:71:6f:77:9d:2b:92:af:69:33:c4: 46:45:6c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUxMTAyMTYwNTIzWhcNMjUxMTA5MTYwNTIzWjAYMRYwFAYD VQQDEw02OTA3ODE0NC1hZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl6UhUALuT04Lg1sHtMhvPefv8gE+ctWFaLxx4p1+LiId9RHSbeuxG7A3r1Z EUwOg9jhg181LYsGwWtXkrRr6MXKI9XQHxQSKo9yjnyIxIk8Mi7strcSzPYFGVtq TJHHAKzw5NZYSU7uA9MWwz9RHSMU4Vln4aEhxJlHiM/HuEGO9VPt9H21kBLA8qWg etu3u/3T4QgMobz7Mh3ENY70MlmUPrH4ZUctKDwiYNDTVFk7XqO23OH7SZeEJzi9 Cltpy/g8xfiy4SRb2CTkN2GUGAHztQz+AfztV/Ar4NIl9apHMF3nO2UFIcoiipr3 UKs7+iIyZftUb5422AxIkYB22wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaQ3XHf iKhi+0XrUyt9ok1UzTmjMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbnWVdKUxfcySgb8hU3hjW4A2XZcSgO4yCDXMqwIO3nj5Lt0Y6imQc lR+D0HwtJjB2ynAMB8MMJiJMLBYuIgs+Ha8XGnH/P2jjX2SxJZGOP6DoCkFld3ui jmol7OtYFFhShZOBJIOPBxTC0e+fx/KKc3Q1FBXxDWyGU/HukKFIX/BvHNS8qq/O SkuhcB5wBtED9ghl5s5ZYWGBR2fZp2vTFVNP45rIaCW8/XIS7akrrZr8nxYKbHyh DrpU1E45uCgkF4yw3JfMN3vTDyWdLojbLYfsznbwX3/LZ757ba9fudXcG/D62WnF 6ujZzbLC1Z2YbHFvd50rkq9pM8RGRWyZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:32 2025 by rpki-client