$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: tjzd0KMMxSj4VhFO8HaR1yyxLYjGxnMlTJSoEeCHPhw= Subject key identifier: 06:86:3C:B3:FF:77:40:58:F1:D2:57:21:CE:66:6F:49:66:76:36:94 Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: A2 Signing time: Wed 05 Nov 2025 06:29:06 +0000 Manifest this update: Wed 05 Nov 2025 06:29:05 +0000 Manifest next update: Wed 12 Nov 2025 06:29:05 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: e6i7UIKeu3ywrfQwGhRl8b2eHo/I7/MKF+Fl6hMpiEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Nov 5 06:29:05 2025 GMT Not After : Nov 12 06:29:05 2025 GMT Subject: CN=690aeeb2-5032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:c4:c1:11:5f:8f:92:c2:28:f4:92:c9:03: 23:4a:5b:6c:93:2f:b6:c8:50:4d:0a:c5:6d:70:d3: 74:4f:50:17:37:2d:32:49:fc:af:84:66:0e:62:5a: be:d7:ec:ce:d0:e3:4d:71:93:f0:6e:4c:f9:7f:0c: 94:41:5b:5f:ba:73:0f:43:25:a1:e1:e3:ad:aa:e8: ce:ed:4d:d9:62:6b:f6:90:de:88:3c:45:6c:b6:c4: b5:b2:92:4e:ef:a2:01:ae:0f:66:11:1c:2d:d9:45: 56:15:9c:85:ae:df:57:02:04:19:fa:c2:cb:7a:48: 9c:e1:90:fe:43:68:6f:60:e2:cd:7c:b9:16:b7:88: 64:3a:dd:8c:ed:74:10:58:46:90:a8:b4:59:4c:dc: 05:97:d0:fc:6e:ee:3d:7f:2d:96:96:ef:e9:dd:12: 80:77:a5:9b:3d:34:1c:3e:28:01:7c:ba:c0:ae:00: 84:58:01:70:34:33:7b:3e:d7:3e:6e:f8:29:4f:eb: c1:7e:51:b8:6b:95:04:de:d7:19:10:9f:6c:ac:6c: 44:6e:ce:eb:96:d1:c0:80:dc:1b:a4:a0:1f:3a:ed: 43:3f:50:3f:86:75:a7:80:4b:93:25:3e:0d:16:60: e3:7c:15:34:7c:48:75:e4:cd:e3:54:de:50:d5:ee: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:86:3C:B3:FF:77:40:58:F1:D2:57:21:CE:66:6F:49:66:76:36:94 X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:bd:b8:18:81:14:cd:e5:8e:84:4b:7b:88:85:13:1a:a3:45: a5:e9:91:93:7b:f3:8e:52:71:22:d0:c1:b6:3b:28:06:1c:f8: dc:b8:e0:b5:e0:e4:78:31:ee:81:51:e5:6b:ee:ea:f1:4f:5c: 5b:53:a6:9e:bc:ce:c2:5d:2d:25:1e:87:94:85:b7:a3:eb:26: a9:37:fa:d2:3f:b5:be:78:12:ff:db:45:4f:ab:99:a5:af:e7: db:02:66:63:6f:23:63:c5:f7:1f:87:06:d5:ac:71:b4:00:76: f6:3d:05:be:17:ad:65:10:65:d2:34:22:cd:54:14:38:8d:ae: 98:4f:9b:34:23:73:f7:f1:5b:c8:c4:66:2a:f7:73:89:7a:f3: cc:5a:08:e3:b1:95:c6:a3:bc:0b:0b:18:4b:a5:27:f3:d2:31: 89:d5:a5:a1:63:36:d9:bc:38:f3:c8:64:1e:0c:69:9f:24:91: 08:88:8c:0e:61:20:f8:95:ba:84:db:25:6a:2b:94:3a:bf:8d: e8:39:48:5f:f7:3d:1f:9f:d5:90:db:e9:1b:eb:b6:6f:35:7c: 1e:28:3c:f5:31:17:3f:50:50:9c:c7:fb:36:48:aa:30:76:04: 35:79:58:02:d2:00:85:23:b4:6f:ea:a0:a9:bf:16:fe:6f:e6: cc:98:a6:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1 QUVGQTRDQUEwHhcNMjUxMTA1MDYyOTA1WhcNMjUxMTEyMDYyOTA1WjAYMRYwFAYD VQQDEw02OTBhZWViMi01MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p3EwRFfj5LCKPSSyQMjSltsky+2yFBNCsVtcNN0T1AXNy0ySfyvhGYOYlq+ 1+zO0ONNcZPwbkz5fwyUQVtfunMPQyWh4eOtqujO7U3ZYmv2kN6IPEVstsS1spJO 76IBrg9mERwt2UVWFZyFrt9XAgQZ+sLLekic4ZD+Q2hvYOLNfLkWt4hkOt2M7XQQ WEaQqLRZTNwFl9D8bu49fy2Wlu/p3RKAd6WbPTQcPigBfLrArgCEWAFwNDN7Ptc+ bvgpT+vBflG4a5UE3tcZEJ9srGxEbs7rltHAgNwbpKAfOu1DP1A/hnWngEuTJT4N FmDjfBU0fEh15M3jVN5Q1e6dnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaGPLP/ d0BY8dJXIc5mb0lmdjaUMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS R0M2NkZMZU1oSXBhNzZUS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASvbgYgRTN5Y6ES3uIhRMao0Wl6ZGTe/OOUnEi0MG2OygGHPjcuOC1 4OR4Me6BUeVr7urxT1xbU6aevM7CXS0lHoeUhbej6yapN/rSP7W+eBL/20VPq5ml r+fbAmZjbyNjxfcfhwbVrHG0AHb2PQW+F61lEGXSNCLNVBQ4ja6YT5s0I3P38VvI xGYq93OJevPMWgjjsZXGo7wLCxhLpSfz0jGJ1aWhYzbZvDjzyGQeDGmfJJEIiIwO YSD4lbqE2yVqK5Q6v43oOUhf9z0fn9WQ2+kb67ZvNXweKDz1MRc/UFCcx/s2SKow dgQ1eVgC0gCFI7Rv6qCpvxb+b+bMmKbq -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:27 2025 by rpki-client