$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: w0M4wih6jijMG5s5ri91+8gqnE9yi+iReGzxnZtDWbM= Subject key identifier: FD:93:E7:E5:A2:0D:4C:1F:B4:1C:2B:19:FC:BB:DD:DA:8C:B5:41:62 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 029E Signing time: Wed 05 Nov 2025 01:40:29 +0000 Manifest this update: Wed 05 Nov 2025 01:40:28 +0000 Manifest next update: Wed 12 Nov 2025 01:40:28 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: aYVrsks95wIkeJJnTErlaQXr8fqXOls359UW1z1tZaw=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: jNBzv9AEhkETumwnZVmfkixYJ4ySA7uLCgYaGX6tsDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Nov 5 01:40:28 2025 GMT Not After : Nov 12 01:40:28 2025 GMT Subject: CN=690aab0c-58cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:ba:19:1b:6d:cf:6b:30:0a:1d:3e:79:20: a7:78:3c:40:4c:82:02:2e:87:20:cc:88:64:49:17: d0:77:a3:ab:22:4c:f0:8a:be:e9:06:3e:37:0d:aa: 1f:26:ab:1a:52:fd:12:5c:bc:5c:3b:ba:df:95:40: dc:a9:16:0c:93:cd:5f:54:22:5c:e3:64:62:4a:e0: 39:57:2f:01:07:9e:75:3a:18:82:f7:24:33:52:7c: 17:b3:e5:c9:ff:2e:0c:cc:3d:3c:c2:ff:09:49:36: 0c:00:72:1d:0b:5f:7e:74:ac:d9:4c:6f:ba:65:52: e9:5e:c6:18:2d:d6:ed:c0:3a:f2:e4:fe:ed:2a:eb: 74:60:b5:de:b0:1f:cd:f6:64:f2:1a:f7:5d:b6:8f: a0:fc:47:38:ab:b0:bc:54:88:22:10:b2:18:1e:9f: ec:26:26:1a:b0:c2:dd:87:c0:72:8a:45:47:cc:40: 86:a1:44:32:1b:88:66:3b:29:53:9a:c9:67:fd:70: 4c:1e:47:5d:1f:d9:89:f5:1b:60:20:8c:07:ad:b7: 37:8a:0d:c3:12:07:d9:5d:3a:63:3e:c9:f4:a1:1b: 96:b7:e1:2f:1a:f3:67:b5:08:fd:31:81:fb:31:f3: bb:14:c9:16:63:60:53:8e:b0:c7:bc:6a:66:c9:39: a8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:93:E7:E5:A2:0D:4C:1F:B4:1C:2B:19:FC:BB:DD:DA:8C:B5:41:62 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b9:54:19:fd:1c:52:1e:45:4e:3e:4c:e5:f0:8f:16:a7:c4: 9b:f5:57:c5:e7:7f:37:37:d6:bc:39:2a:f8:e5:ea:11:6a:90: 00:93:41:ed:78:8c:74:71:84:43:5c:b9:a9:c3:c8:1f:a5:2b: b2:73:50:b8:63:c5:42:25:03:42:59:1c:ba:6a:0f:c0:a3:6a: 5b:4b:38:53:60:f5:d8:eb:47:89:dc:2f:9a:c8:fe:57:e8:62: 23:7f:f1:ad:6e:de:e0:72:f7:e8:39:08:c6:53:a8:00:29:9d: be:a0:12:ec:d1:06:ea:a1:b1:95:0a:e5:b4:ff:29:6f:17:66: 15:ec:59:c7:cf:97:e6:3c:de:6a:fb:59:3c:62:0e:39:99:5e: 2c:9f:12:09:b5:d1:67:32:37:95:c3:70:93:38:ec:56:67:a9: b0:2b:9d:c4:d3:a5:01:55:46:59:08:4a:04:c1:37:ee:ff:81: e8:32:5d:b2:fa:1a:14:2e:c3:db:75:75:3e:25:1d:27:3f:cc: 76:ad:7e:71:c9:d4:10:d5:5d:dd:8a:c1:77:ab:cf:0b:a3:8a: 42:d2:63:61:16:e0:a3:16:2f:90:11:01:dd:89:ed:a9:63:9d: 25:38:c3:9c:99:f8:42:e4:ae:dd:3c:6a:04:6c:f6:12:45:c1: 84:8b:de:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjUxMTA1MDE0MDI4WhcNMjUxMTEyMDE0MDI4WjAYMRYwFAYD VQQDEw02OTBhYWIwYy01OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gS6GRttz2swCh0+eSCneDxATIICLocgzIhkSRfQd6OrIkzwir7pBj43Daof JqsaUv0SXLxcO7rflUDcqRYMk81fVCJc42RiSuA5Vy8BB551OhiC9yQzUnwXs+XJ /y4MzD08wv8JSTYMAHIdC19+dKzZTG+6ZVLpXsYYLdbtwDry5P7tKut0YLXesB/N 9mTyGvddto+g/Ec4q7C8VIgiELIYHp/sJiYasMLdh8ByikVHzECGoUQyG4hmOylT msln/XBMHkddH9mJ9RtgIIwHrbc3ig3DEgfZXTpjPsn0oRuWt+EvGvNntQj9MYH7 MfO7FMkWY2BTjrDHvGpmyTmoWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2T5+Wi DUwftBwrGfy73dqMtUFiMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFuVQZ/RxSHkVOPkzl8I8Wp8Sb9VfF5383N9a8OSr45eoRapAAk0Ht eIx0cYRDXLmpw8gfpSuyc1C4Y8VCJQNCWRy6ag/Ao2pbSzhTYPXY60eJ3C+ayP5X 6GIjf/Gtbt7gcvfoOQjGU6gAKZ2+oBLs0QbqobGVCuW0/ylvF2YV7FnHz5fmPN5q +1k8Yg45mV4snxIJtdFnMjeVw3CTOOxWZ6mwK53E06UBVUZZCEoEwTfu/4HoMl2y +hoULsPbdXU+JR0nP8x2rX5xydQQ1V3disF3q88Lo4pC0mNhFuCjFi+QEQHdie2p Y50lOMOcmfhC5K7dPGoEbPYSRcGEi95Q -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:45 2025 by rpki-client