$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: 2KzrNqWkTqzs3yHvjWbn/d9zRl/x7fAQJJakMgtQYws= Subject key identifier: 9F:A5:50:8E:76:C2:64:50:78:BE:C4:1B:92:7F:CD:16:A1:58:A1:12 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1271 Signing time: Sun 02 Nov 2025 19:10:22 +0000 Manifest this update: Sun 02 Nov 2025 19:10:22 +0000 Manifest next update: Sun 09 Nov 2025 19:10:22 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: tVJB04Nl2dwkEgxfXtTEO4Tjtwts5dZTm6E26dLreTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2893 (0xb4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Nov 2 19:10:22 2025 GMT Not After : Nov 9 19:10:22 2025 GMT Subject: CN=6907ac9e-7325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:56:03:c1:67:8e:53:b5:6a:c5:c0:5a:ab: a0:d6:9e:eb:29:1a:f8:75:a8:5c:44:5c:12:f5:f7: bf:be:78:08:73:e1:c7:fd:3a:69:f0:f7:77:d6:9e: cc:d1:46:55:de:20:79:bb:6e:d5:8e:e2:cc:ae:d4: d2:d7:08:b9:dc:a3:32:b4:77:8b:b2:30:2b:4f:33: c3:16:c1:8e:de:3f:b4:6a:e3:89:1c:d4:35:53:59: 78:09:ff:13:14:0e:4e:2f:1b:f2:55:ab:96:c7:ec: 43:61:85:5c:5d:b5:54:97:18:9e:f2:d9:65:3a:26: 45:86:45:95:72:66:8b:b2:76:43:4a:91:db:43:93: 91:e1:94:71:03:80:fb:84:0f:f7:2b:b9:4d:14:1a: 90:87:b8:c0:52:be:89:5e:c8:95:8f:79:98:d5:f1: 2c:f7:26:d2:c0:3f:ea:b8:74:a8:e5:54:e0:37:74: 70:24:05:34:f2:d9:0c:3f:e9:fb:7f:0f:49:a5:5d: 23:8a:85:78:59:2b:5b:4b:9f:4b:5f:ff:68:65:c5: 95:dd:32:d3:52:96:65:9d:80:01:d8:36:fc:67:bb: 3a:ff:cc:8e:c4:ce:13:0f:62:e9:0a:33:33:ea:6a: 64:c3:c6:1d:bc:d0:a1:e1:9a:42:58:4e:b2:31:07: a6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A5:50:8E:76:C2:64:50:78:BE:C4:1B:92:7F:CD:16:A1:58:A1:12 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ad:23:d9:5d:7d:ba:18:bc:ef:c8:12:a0:aa:a3:e1:ec:a6: a8:74:3a:61:cf:13:0e:bb:5c:65:92:d6:a3:49:6f:42:cc:86: 90:59:e9:c0:7a:fb:ae:61:c6:23:36:41:1b:89:82:98:09:a4: 1d:a1:12:e9:5c:6e:54:04:f1:ce:9c:9a:9a:a5:83:86:13:58: db:29:97:c0:1e:ea:4d:d1:0f:fe:cb:92:06:19:9c:24:a1:54: a2:bf:c7:56:2c:55:b8:a4:51:8b:e9:a3:62:e7:3a:7a:65:89: 44:fa:00:c8:62:73:c4:40:8c:27:4c:ec:25:d1:a9:d3:98:44: 66:36:99:be:88:7c:95:8f:d5:d0:fb:a4:f4:59:63:9b:45:cf: 51:15:e3:37:08:52:9d:8f:97:85:97:02:4d:64:13:62:3f:98: 20:b6:b8:d9:09:97:8c:e2:68:b0:77:21:66:fa:41:c6:f5:3c: ff:96:f2:fe:a2:d2:d0:f5:14:f7:2a:29:1f:ad:9f:f6:1a:9f: db:f8:fd:b4:0b:60:a5:19:8e:96:ef:37:a0:33:e3:49:4f:17: 68:92:d4:5d:98:ff:da:f4:89:33:d6:e8:d7:58:6d:bd:d0:18: d3:f2:62:bf:52:5b:fd:7f:ec:21:59:70:3f:31:a0:73:40:8d: a5:95:79:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUxMTAyMTkxMDIyWhcNMjUxMTA5MTkxMDIyWjAYMRYwFAYD VQQDEw02OTA3YWM5ZS03MzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVhWA8FnjlO1asXAWqug1p7rKRr4dahcRFwS9fe/vngIc+HH/Tpp8Pd31p7M 0UZV3iB5u27VjuLMrtTS1wi53KMytHeLsjArTzPDFsGO3j+0auOJHNQ1U1l4Cf8T FA5OLxvyVauWx+xDYYVcXbVUlxie8tllOiZFhkWVcmaLsnZDSpHbQ5OR4ZRxA4D7 hA/3K7lNFBqQh7jAUr6JXsiVj3mY1fEs9ybSwD/quHSo5VTgN3RwJAU08tkMP+n7 fw9JpV0jioV4WStbS59LX/9oZcWV3TLTUpZlnYAB2Db8Z7s6/8yOxM4TD2LpCjMz 6mpkw8YdvNCh4ZpCWE6yMQemMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+lUI52 wmRQeL7EG5J/zRahWKESMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxrSPZXX26GLzvyBKgqqPh7KaodDphzxMOu1xlktajSW9CzIaQWenA evuuYcYjNkEbiYKYCaQdoRLpXG5UBPHOnJqapYOGE1jbKZfAHupN0Q/+y5IGGZwk oVSiv8dWLFW4pFGL6aNi5zp6ZYlE+gDIYnPEQIwnTOwl0anTmERmNpm+iHyVj9XQ +6T0WWObRc9RFeM3CFKdj5eFlwJNZBNiP5ggtrjZCZeM4miwdyFm+kHG9Tz/lvL+ otLQ9RT3KikfrZ/2Gp/b+P20C2ClGY6W7zegM+NJTxdoktRdmP/a9Ikz1ujXWG29 0BjT8mK/Ulv9f+whWXA/MaBzQI2llXkW -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:22 2025 by rpki-client