$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: AAA7s+flIzCzNEh5ZpTf7d4m+LEx8/ttEDzTzxRYJV4= Subject key identifier: 8D:22:2A:98:96:CE:8F:2C:2C:76:B9:B5:A4:2F:BC:C5:6B:CA:A0:2D Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 0163 Signing time: Mon 03 Nov 2025 04:01:48 +0000 Manifest this update: Mon 03 Nov 2025 04:01:47 +0000 Manifest next update: Mon 10 Nov 2025 04:01:47 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: JTqVAyh6ke+W8IpBQvEeqy4ZrVnHdD6ZJH64UrC8jN0=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Nov 3 04:01:47 2025 GMT Not After : Nov 10 04:01:47 2025 GMT Subject: CN=6908292b-8388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:c3:54:cd:90:b3:9d:70:19:79:bd:ba:c7: 57:be:97:9c:31:6d:da:cc:a0:98:e2:f4:1d:a9:35: 59:39:18:20:a9:ce:54:8e:75:63:8a:c9:fa:36:e0: 31:b7:fb:8f:34:8a:ec:c1:82:f3:41:4e:91:42:eb: 93:19:ec:3f:fb:32:d0:59:53:85:44:19:da:fe:f6: c9:7d:54:e3:8f:08:aa:7a:6e:b7:e5:34:98:57:db: 98:f8:d8:9a:c5:d1:a2:d6:b8:69:f8:15:99:df:54: b0:76:c0:48:cc:b5:74:f8:0f:69:ac:8c:52:e1:1f: b7:f2:67:af:c4:f1:2a:11:ff:9d:89:a2:5c:68:01: 28:a5:ab:b7:1e:56:8f:b5:77:91:ef:da:40:ab:90: 09:6f:88:44:35:6c:64:e2:21:6a:74:f0:2d:f1:9d: c6:1f:9a:ff:0f:d2:3c:69:b3:50:86:2a:65:d1:5e: e8:c7:12:f6:ec:20:eb:bb:f8:7d:06:e7:d6:ee:9d: e4:30:57:19:43:f5:19:54:7b:72:da:5d:dc:d8:05: 9b:4c:8a:e0:65:8a:c1:44:74:1c:05:0e:76:14:fb: 7f:c5:34:15:9a:84:b0:21:02:16:fc:dc:bd:ce:d7: 7d:a2:b1:4b:d3:cf:49:69:04:63:80:99:61:a5:38: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:22:2A:98:96:CE:8F:2C:2C:76:B9:B5:A4:2F:BC:C5:6B:CA:A0:2D X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:08:d0:2f:62:c1:83:fa:76:f9:bc:f8:61:0d:05:c9:f2:6f: 23:f2:1a:aa:15:da:44:f1:ca:51:35:7b:25:16:6b:19:a3:26: fb:d1:29:ec:bc:ad:7d:18:bd:60:7b:ee:17:fd:52:75:49:b6: 8a:f1:12:1c:5c:62:b8:2d:1d:13:19:9a:80:5c:41:ab:18:f7: 2c:89:5e:e4:db:aa:2a:be:d5:91:0d:2b:04:3a:61:59:55:55: dc:91:4d:44:90:22:d6:82:a4:65:1d:ce:9c:98:71:b2:b0:cd: e1:50:da:b0:6d:19:70:13:be:c2:3c:62:05:f5:1d:0e:16:ad: 13:49:f6:f2:ed:f8:9b:ce:29:2e:6c:bc:b6:c3:04:21:69:e7: 74:52:2f:a3:ca:f6:49:3c:02:00:95:69:dd:1e:2a:62:5b:5a: 7f:5d:d3:45:1e:e8:e4:5b:9a:26:57:ca:74:c9:e8:95:67:c5: e5:58:c3:d4:7f:73:6e:a4:6b:b3:1c:7c:64:22:ab:8b:42:b9: 8d:6e:0a:ca:23:d5:c6:99:40:a6:e4:e7:04:c8:4b:03:12:f9: 54:9b:32:3f:d2:69:39:7f:f3:1d:c2:c0:37:f4:6a:de:7b:98: d5:86:8d:4f:51:c7:56:2d:80:41:5b:ea:fb:0d:97:52:4e:77: f7:fe:cc:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjUxMTAzMDQwMTQ3WhcNMjUxMTEwMDQwMTQ3WjAYMRYwFAYD VQQDEw02OTA4MjkyYi04Mzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9HDVM2Qs51wGXm9usdXvpecMW3azKCY4vQdqTVZORggqc5UjnVjisn6NuAx t/uPNIrswYLzQU6RQuuTGew/+zLQWVOFRBna/vbJfVTjjwiqem635TSYV9uY+Nia xdGi1rhp+BWZ31SwdsBIzLV0+A9prIxS4R+38mevxPEqEf+diaJcaAEopau3HlaP tXeR79pAq5AJb4hENWxk4iFqdPAt8Z3GH5r/D9I8abNQhipl0V7oxxL27CDru/h9 BufW7p3kMFcZQ/UZVHty2l3c2AWbTIrgZYrBRHQcBQ52FPt/xTQVmoSwIQIW/Ny9 ztd9orFL089JaQRjgJlhpThaowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0iKpiW zo8sLHa5taQvvMVryqAtMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6CNAvYsGD+nb5vPhhDQXJ8m8j8hqqFdpE8cpRNXslFmsZoyb70Sns vK19GL1ge+4X/VJ1SbaK8RIcXGK4LR0TGZqAXEGrGPcsiV7k26oqvtWRDSsEOmFZ VVXckU1EkCLWgqRlHc6cmHGysM3hUNqwbRlwE77CPGIF9R0OFq0TSfby7fibziku bLy2wwQhaed0Ui+jyvZJPAIAlWndHipiW1p/XdNFHujkW5omV8p0yeiVZ8XlWMPU f3NupGuzHHxkIquLQrmNbgrKI9XGmUCm5OcEyEsDEvlUmzI/0mk5f/MdwsA39Gre e5jVho1PUcdWLYBBW+r7DZdSTnf3/syn -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:52 2025 by rpki-client