$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: ZwVAw4XBYuP1NPvU6CBvNsbIDtt46O9IaZh2bebnzRo= Subject key identifier: 5C:23:2F:EE:97:19:66:4D:02:29:55:33:10:C1:D8:52:BC:9C:BD:D0 Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 075E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 0755 Signing time: Tue 04 Nov 2025 21:46:57 +0000 Manifest this update: Tue 04 Nov 2025 21:46:57 +0000 Manifest next update: Tue 11 Nov 2025 21:46:57 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: I7ylqY8KdUiGl1aDIVF6HEGoSmekGTqcBULSCMvta6A=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: gX+GYBAPGbjqUnHfi91j/NNdMc3SWhzi/7eOCrrQtPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Nov 4 21:46:57 2025 GMT Not After : Nov 11 21:46:57 2025 GMT Subject: CN=690a7451-94fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:6d:be:c2:00:91:23:ad:d4:2f:6e:6e:49: 43:be:17:5a:74:0c:c2:a1:6b:24:88:5e:86:c0:d4: 6a:51:14:1b:53:5b:f9:f0:00:2a:6b:9b:71:cd:c1: 9b:5f:aa:bf:9b:fc:a5:ef:c5:17:22:64:55:f5:75: 20:2b:e1:6a:16:46:bd:06:f3:a7:2b:3a:4e:a3:ed: 7d:26:95:e5:21:e9:07:c0:50:12:bb:9d:54:2b:5c: 78:c7:3f:1f:54:35:7d:5f:ad:a2:35:8b:ae:96:9f: 53:ab:a3:67:77:e7:53:53:46:86:ae:bb:cc:9b:9b: 95:55:be:d1:f1:64:fa:9f:5f:a6:6c:b7:c7:c3:41: a9:12:75:75:a7:8f:77:00:43:1f:7f:b0:86:69:84: a5:30:63:c5:cf:1a:4c:5e:f7:f2:64:7c:7a:20:9b: c3:8c:f5:bb:70:6b:1e:ef:4d:01:5c:86:18:a3:f2: fe:02:ab:f5:be:ae:d0:3f:ea:83:d4:a2:fe:37:f4: 68:6b:01:08:d5:17:58:28:db:65:3e:e5:12:72:49: 47:d5:9b:03:30:2c:31:af:d0:6c:a7:db:67:87:e3: ac:74:26:89:fd:8e:d1:79:3b:78:ec:77:e5:82:5c: cc:1f:b0:70:6e:19:c0:a2:f9:c0:77:2f:77:e1:0c: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:2F:EE:97:19:66:4D:02:29:55:33:10:C1:D8:52:BC:9C:BD:D0 X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:db:bf:7d:c2:f3:dc:04:4d:ad:ff:1b:8a:fb:02:76:fa: 56:99:2e:be:e7:02:c2:be:39:76:1c:c4:c2:de:79:60:aa:92: b6:32:89:8a:80:22:70:84:76:44:3d:51:0e:d3:8f:50:d1:e7: da:f7:d6:ab:31:7a:6e:ac:57:d8:fc:93:93:d1:c0:4c:24:cf: b5:00:a4:75:29:0f:af:54:9b:a7:4e:3f:31:12:4d:10:f1:87: d0:8e:87:28:61:d5:ec:5b:18:d7:33:84:e7:b4:0f:c5:16:05: f1:3b:7f:fd:a3:f8:82:d2:1d:c6:d1:73:d0:db:65:ec:3a:e7: e4:e8:0e:e5:65:e8:10:27:0d:8b:f5:db:0f:81:d6:d0:91:0e: 3a:ba:1e:4a:2c:b6:5a:61:ee:84:54:13:11:dc:15:23:59:ec: c3:c2:46:e4:65:16:80:06:f4:83:5b:0b:84:6f:ee:67:9b:71: c4:e5:94:44:78:dd:b2:8e:f0:20:f5:47:82:cb:90:aa:2c:3a: 51:a8:38:18:a1:4a:bf:db:7e:56:70:46:bf:45:b5:4d:42:d3: 7a:01:b6:54:72:16:2e:87:f9:6d:f9:77:6b:5d:36:88:3b:7c: 46:13:6a:c3:76:89:8b:51:1c:8a:ec:50:e3:2d:b4:43:ac:ed: ef:85:28:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUxMTA0MjE0NjU3WhcNMjUxMTExMjE0NjU3WjAYMRYwFAYD VQQDEw02OTBhNzQ1MS05NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApu5tvsIAkSOt1C9ubklDvhdadAzCoWskiF6GwNRqURQbU1v58AAqa5txzcGb X6q/m/yl78UXImRV9XUgK+FqFka9BvOnKzpOo+19JpXlIekHwFASu51UK1x4xz8f VDV9X62iNYuulp9Tq6Nnd+dTU0aGrrvMm5uVVb7R8WT6n1+mbLfHw0GpEnV1p493 AEMff7CGaYSlMGPFzxpMXvfyZHx6IJvDjPW7cGse700BXIYYo/L+Aqv1vq7QP+qD 1KL+N/RoawEI1RdYKNtlPuUScklH1ZsDMCwxr9Bsp9tnh+OsdCaJ/Y7ReTt47Hfl glzMH7BwbhnAovnAdy934QzcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwjL+6X GWZNAilVMxDB2FK8nL3QMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt/Nu/fcLz3ARNrf8bivsCdvpWmS6+5wLCvjl2HMTC3nlgqpK2MomK gCJwhHZEPVEO049Q0efa99arMXpurFfY/JOT0cBMJM+1AKR1KQ+vVJunTj8xEk0Q 8YfQjocoYdXsWxjXM4TntA/FFgXxO3/9o/iC0h3G0XPQ22XsOufk6A7lZegQJw2L 9dsPgdbQkQ46uh5KLLZaYe6EVBMR3BUjWezDwkbkZRaABvSDWwuEb+5nm3HE5ZRE eN2yjvAg9UeCy5CqLDpRqDgYoUq/235WcEa/RbVNQtN6AbZUchYuh/lt+XdrXTaI O3xGE2rDdomLURyK7FDjLbRDrO3vhSiC -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:37 2025 by rpki-client