$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: FQ6bx8NGcKIAvAWTt9alpmABccDUnRGB5KlBwAYyLnE= Subject key identifier: A0:AA:52:24:58:70:19:96:DA:4D:CB:AE:00:C5:3A:FA:78:44:CD:39 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2AA1 Signing time: Sun 02 Nov 2025 15:33:38 +0000 Manifest this update: Sun 02 Nov 2025 15:33:38 +0000 Manifest next update: Sun 09 Nov 2025 15:33:38 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: R877bSmkCoscNWYB5wZuylfh+/GcFXHcyKiV3DDPV/4=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Ey/Kmg1iRRIttYY5811s3SHGsRnkg9ROhR5r3BngPPg=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: foVnGp/jqxcrwmjuMi9JIuJxuKPFhTJXYXUK/5x/qrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10977 (0x2ae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Nov 2 15:33:38 2025 GMT Not After : Nov 9 15:33:38 2025 GMT Subject: CN=690779d2-463f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:e2:9a:da:38:43:91:68:f7:a0:6e:ba:05: 59:ec:d9:96:90:45:48:57:8f:29:d9:b4:4c:4e:d5: f2:48:0b:15:37:11:39:4e:1f:34:0b:6d:c8:91:87: 6c:7a:6d:b9:65:6b:fa:64:68:68:f3:04:ac:77:26: d8:d0:e7:a1:80:7d:ad:07:79:41:6f:cb:fa:28:42: 46:81:cf:b4:db:c2:13:85:00:3b:42:f1:70:ee:2f: 61:71:7e:18:5c:99:b8:e4:51:3b:0e:ba:e6:ec:b1: d5:e8:25:ac:f8:ca:29:07:bd:c5:b4:8c:af:e9:49: e6:66:c5:3a:18:61:cb:fe:a3:0e:25:ec:95:1d:bd: 9d:0c:52:2e:b9:f5:1e:4e:ce:00:e5:e9:61:c4:4a: 90:cf:c0:7f:c4:a2:25:a6:04:fe:0a:02:62:6e:33: 31:01:48:d9:98:9f:46:14:9a:19:ee:23:0d:5b:f2: 8d:d2:d6:07:0f:5c:7d:0d:ef:d1:5a:8c:44:e8:07: 4f:2f:06:9e:ef:e3:f2:71:97:b4:3c:59:04:2c:19: 5b:0e:93:1a:90:31:f4:58:8c:d7:15:0e:8a:ad:63: ce:e7:96:cd:34:48:87:5c:4c:d3:d6:5f:54:92:8b: 08:94:3c:28:73:9f:bd:3e:ba:3e:18:2c:9d:d1:79: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AA:52:24:58:70:19:96:DA:4D:CB:AE:00:C5:3A:FA:78:44:CD:39 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bd:cb:42:2b:af:57:ac:61:44:b0:23:78:28:6c:c0:9b:b9: 8a:c9:19:a7:d1:a0:99:1a:a0:9c:88:2f:66:1d:c9:5f:73:0d: e5:98:10:d9:c6:0a:65:4b:e7:d6:71:eb:91:ab:b9:97:53:2f: 32:38:2e:e9:db:c1:a7:80:e7:5e:c7:7a:0b:3d:53:ab:ee:3e: 5f:26:a2:93:12:6d:f2:5c:d5:6c:2f:18:39:d8:fc:0b:49:39: 7b:9e:66:47:7b:89:fb:77:0d:7b:78:3b:96:84:73:04:53:00: a0:e7:29:14:67:ba:a3:31:8c:7f:e4:e7:a5:20:0e:a8:d6:3e: d0:97:56:9b:3b:b4:c6:00:94:f6:a9:a6:21:da:1b:0a:01:68: b0:ec:43:67:77:ab:32:ca:f9:6c:e7:43:71:fb:1b:f2:0c:1e: 43:12:61:3a:5a:61:b4:dd:36:53:17:ea:14:b8:ab:f3:2f:5c: d3:1b:24:04:f2:89:bf:25:3e:75:8a:8e:ca:ea:1e:c0:4e:2b: f2:36:e3:6f:ee:ac:f8:37:36:de:f1:3a:55:4f:6a:53:fd:30: 75:b6:37:05:e1:61:13:c6:d8:37:3c:70:0b:9c:c1:69:c4:64: 72:75:c2:4b:56:ed:eb:04:0f:c4:31:c9:93:80:a4:0f:b2:29: cc:97:b5:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUxMTAyMTUzMzM4WhcNMjUxMTA5MTUzMzM4WjAYMRYwFAYD VQQDEw02OTA3NzlkMi00NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj7imto4Q5Fo96BuugVZ7NmWkEVIV48p2bRMTtXySAsVNxE5Th80C23IkYds em25ZWv6ZGho8wSsdybY0OehgH2tB3lBb8v6KEJGgc+028IThQA7QvFw7i9hcX4Y XJm45FE7Drrm7LHV6CWs+MopB73FtIyv6UnmZsU6GGHL/qMOJeyVHb2dDFIuufUe Ts4A5elhxEqQz8B/xKIlpgT+CgJibjMxAUjZmJ9GFJoZ7iMNW/KN0tYHD1x9De/R WoxE6AdPLwae7+PycZe0PFkELBlbDpMakDH0WIzXFQ6KrWPO55bNNEiHXEzT1l9U kosIlDwoc5+9Pro+GCyd0Xl3+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCqUiRY cBmW2k3LrgDFOvp4RM05MB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCevctCK69XrGFEsCN4KGzAm7mKyRmn0aCZGqCciC9mHclfcw3lmBDZ xgplS+fWceuRq7mXUy8yOC7p28GngOdex3oLPVOr7j5fJqKTEm3yXNVsLxg52PwL STl7nmZHe4n7dw17eDuWhHMEUwCg5ykUZ7qjMYx/5OelIA6o1j7Ql1abO7TGAJT2 qaYh2hsKAWiw7ENnd6syyvls50Nx+xvyDB5DEmE6WmG03TZTF+oUuKvzL1zTGyQE 8om/JT51io7K6h7ATivyNuNv7qz4Nzbe8TpVT2pT/TB1tjcF4WETxtg3PHALnMFp xGRydcJLVu3rBA/EMcmTgKQPsinMl7VO -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:37 2025 by rpki-client