$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: gACIaQEbaD8g+Vh5nkNz2RbAIE5yaFEApraPkU/wTZg= Subject key identifier: 1B:51:8F:4F:4E:66:84:77:E2:BD:86:0E:BF:D0:53:9B:81:BB:46:EB Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: 82 Signing time: Wed 05 Nov 2025 06:51:48 +0000 Manifest this update: Wed 05 Nov 2025 06:51:47 +0000 Manifest next update: Wed 12 Nov 2025 06:51:47 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: 16OFCgve12mFViDo8+KZr6rfsomyau9UINEO9xaPqDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Validity Not Before: Nov 5 06:51:47 2025 GMT Not After : Nov 12 06:51:47 2025 GMT Subject: CN=690af404-2be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:28:74:1d:08:2f:fa:f9:4b:9d:cc:ee:cd: ae:e0:19:0d:43:46:5a:47:b3:02:36:13:e4:d9:76: 41:d0:ee:99:01:b1:80:35:ec:c0:1f:d8:16:3a:e5: c6:53:4c:7f:19:bd:b4:11:bd:f7:87:ec:c9:d6:0a: d7:84:66:72:56:5f:84:ec:dc:49:32:47:a8:c1:44: ef:03:4d:b7:c0:1d:ff:24:4d:6b:96:83:11:a0:82: 79:1c:0c:84:9d:9e:ab:22:f1:41:a4:18:62:5a:9a: 88:d4:2c:60:c4:e0:ea:18:fa:57:e8:14:62:05:47: 2a:d4:ba:ff:96:0e:34:bd:13:b3:92:06:b2:07:06: 42:10:be:df:a1:06:40:e9:bf:fc:ad:83:4e:9b:0c: 33:68:5d:a4:c1:9b:1d:6b:b2:e4:2f:e6:18:72:dd: de:c7:ad:3d:74:e8:9f:6d:50:3a:d1:73:59:4a:85: d0:c2:c3:bd:1e:dd:4d:8f:57:ca:3c:cf:0d:7c:7a: 33:89:1d:fb:d6:a9:a0:ef:b6:0a:5e:99:f9:89:21: a4:18:ba:c6:da:0d:64:d9:ab:7e:70:62:c2:6b:f8: 69:6e:7c:27:67:47:25:20:3f:26:2e:5a:c7:98:30: e9:ca:be:34:49:f7:a1:9a:b4:8f:7f:6a:e2:80:25: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:51:8F:4F:4E:66:84:77:E2:BD:86:0E:BF:D0:53:9B:81:BB:46:EB X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:22:c5:f1:34:c3:26:f9:4b:f7:ed:33:b1:16:73:94:f1:c4: 7e:50:5d:36:08:0f:0c:05:30:09:28:e8:a8:c8:67:86:37:13: cb:a8:5f:e7:65:94:5c:bf:49:3a:2d:df:0c:59:19:5e:e0:b7: 9d:24:f9:e0:c2:00:df:63:30:cb:af:e3:d4:72:2d:0c:ae:f6: 6b:28:ff:ab:67:c5:57:93:75:b7:f5:07:ba:97:78:64:88:22: 02:bd:0e:69:a2:58:23:c2:8f:f8:0b:08:08:63:fc:79:2b:59: c6:17:bf:1a:ce:7f:4c:80:84:ab:ed:a8:98:59:f8:e0:19:5e: 19:8a:68:63:ba:1c:8c:76:6b:33:81:33:7b:96:bf:a5:2f:7c: 84:a9:6b:c6:c7:9d:8e:39:29:4a:ea:2b:22:d9:bf:4f:41:61: 9b:46:01:79:14:5c:2f:ba:a2:2a:87:bc:93:8f:3e:21:2f:78: 8c:91:70:43:20:59:3b:44:a6:b2:bc:fc:e9:a1:1c:a9:50:12: 5e:b0:e9:04:29:8c:ef:e0:d1:65:02:6f:6e:f7:4b:8c:45:fe: 13:ac:bf:07:8a:49:c1:55:1b:49:0a:90:e5:33:c2:2b:9a:43: 4e:9e:b5:3a:b7:14:76:c3:af:e1:a6:56:f4:b9:5c:ec:fa:33: 51:87:20:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBQzcxMTAvBgNVBAUTKDM1MkQ0Q0VDMzZGOEVGQ0UwRDg1MTIwRDk3RDkxRTIy QTM1OEY1OEIwHhcNMjUxMTA1MDY1MTQ3WhcNMjUxMTEyMDY1MTQ3WjAYMRYwFAYD VQQDEw02OTBhZjQwNC0yYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAoodB0IL/r5S53M7s2u4BkNQ0ZaR7MCNhPk2XZB0O6ZAbGANezAH9gWOuXG U0x/Gb20Eb33h+zJ1grXhGZyVl+E7NxJMkeowUTvA023wB3/JE1rloMRoIJ5HAyE nZ6rIvFBpBhiWpqI1CxgxODqGPpX6BRiBUcq1Lr/lg40vROzkgayBwZCEL7foQZA 6b/8rYNOmwwzaF2kwZsda7LkL+YYct3ex609dOifbVA60XNZSoXQwsO9Ht1Nj1fK PM8NfHoziR371qmg77YKXpn5iSGkGLrG2g1k2at+cGLCa/hpbnwnZ0clID8mLlrH mDDpyr40SfehmrSPf2rigCWerQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtRj09O ZoR34r2GDr/QU5uBu0brMB8GA1UdIwQYMBaAFDUtTOw2+O/ODYUSDZfZHiKjWPWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUFDNy80MUE0NkI1MEYz OTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4NE5oUklObDlrZUlxTlk5 WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUFDNy80MUE0NkI1MEYzOTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4 NE5oUklObDlrZUlxTlk5WXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWIsXxNMMm+Uv37TOxFnOU8cR+UF02CA8MBTAJKOioyGeGNxPLqF/n ZZRcv0k6Ld8MWRle4LedJPngwgDfYzDLr+PUci0MrvZrKP+rZ8VXk3W39Qe6l3hk iCICvQ5polgjwo/4CwgIY/x5K1nGF78azn9MgISr7aiYWfjgGV4ZimhjuhyMdmsz gTN7lr+lL3yEqWvGx52OOSlK6isi2b9PQWGbRgF5FFwvuqIqh7yTjz4hL3iMkXBD IFk7RKayvPzpoRypUBJesOkEKYzv4NFlAm9u90uMRf4TrL8HiknBVRtJCpDlM8Ir mkNOnrU6txR2w6/hplb0uVzs+jNRhyBg -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:15 2025 by rpki-client