$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: hE0BeEx5vVuax0z2sITRhZKYRFqhB1TleqJs8eF4Jj0= Subject key identifier: 21:87:06:23:EE:78:21:64:6B:36:93:DE:09:2F:03:6F:BB:63:A2:E9 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C65 Signing time: Wed 22 Oct 2025 19:20:34 +0000 Manifest this update: Wed 22 Oct 2025 19:20:33 +0000 Manifest next update: Wed 29 Oct 2025 19:20:33 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: ALSmj254k1hIGy90hVnG4WKCXAN23aXGs2WHBmjSZDY=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 19:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Oct 22 19:20:33 2025 GMT Not After : Oct 29 19:20:33 2025 GMT Subject: CN=68f92e81-fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:20:35:a0:64:b8:f6:75:c2:f2:9c:c0:65: bf:a7:7a:e8:f1:33:6d:a0:b6:8d:39:70:e1:d4:61: 66:03:bb:72:ad:57:3a:91:dd:6e:8b:9d:ba:c5:29: 3f:92:67:0b:92:b1:9e:0f:ae:76:92:0e:7c:30:7c: 7d:db:fe:0b:59:f7:02:02:7b:53:8a:45:46:33:86: 65:b1:bf:fb:db:c1:39:5d:db:4a:5a:22:47:aa:c6: 5c:20:15:3d:8d:94:56:fa:9e:7c:ce:64:a9:be:78: 03:61:a3:9f:fb:a7:06:13:47:a2:8b:71:24:94:1d: 52:cc:3e:ad:1d:70:b4:55:a4:ba:7a:aa:2a:d3:36: a7:e0:b5:cd:50:99:ec:2e:f1:ae:e2:83:03:ca:ea: 70:69:8c:0b:9e:d0:0c:17:c9:4c:ff:d4:7f:a7:96: 27:a8:21:32:3b:cc:ee:23:8c:70:0b:a8:02:31:b5: fa:90:c0:15:0c:d7:50:06:73:86:23:43:26:17:c2: 09:74:cf:54:82:32:e6:f0:8e:dd:82:e6:8e:8e:cb: a4:61:9d:5b:7c:15:dd:94:e3:f2:73:e9:a3:45:4b: 9b:48:84:7d:ac:e6:af:a9:8b:79:de:b6:4e:ed:72: 01:70:22:e2:77:33:52:c7:cb:e4:9b:c8:f0:26:5e: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:06:23:EE:78:21:64:6B:36:93:DE:09:2F:03:6F:BB:63:A2:E9 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:57:00:69:94:bd:1c:2b:56:8a:af:56:b5:e3:34:25:f8:1b: 50:4f:ec:56:26:09:01:c8:60:48:ab:9c:f9:47:7c:89:56:ab: c6:cf:af:70:69:4a:ef:3e:ef:a3:54:e3:0d:fa:a1:12:91:8e: 84:63:f2:51:69:03:4a:16:45:c9:14:1b:5b:96:78:5c:f9:1b: 2f:35:4f:a0:f1:86:ad:90:58:56:4f:35:44:99:ac:07:3e:8d: e4:38:ca:3f:3b:de:8a:c5:16:7e:ef:c7:46:fd:45:51:c8:bc: a9:d7:d9:a4:06:05:7e:9f:43:c4:a4:57:52:b9:ba:3e:eb:0e: db:b3:70:f2:d2:e8:dc:0f:20:1a:91:71:ba:b6:b6:12:2c:97: c5:a2:e0:92:07:a3:75:88:23:01:74:33:4d:e8:f6:76:fa:7e: 21:08:4d:53:ca:29:92:db:59:3f:bc:f4:83:9c:4a:52:58:46: 62:9e:1f:89:36:69:58:bf:46:72:8d:1d:c2:9b:82:7d:b2:ff: c4:35:29:fe:5c:8c:59:0f:92:32:8a:35:d4:b2:76:fe:1a:9c: b6:ec:e4:60:1f:b0:ed:b5:21:bc:83:59:ea:7a:27:78:4b:19: af:cf:00:7e:3e:fa:2c:91:f2:72:b9:de:ce:7c:2d:aa:6a:ff: f8:a9:8d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUxMDIyMTkyMDMzWhcNMjUxMDI5MTkyMDMzWjAYMRYwFAYD VQQDEw02OGY5MmU4MS1mYTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDogNaBkuPZ1wvKcwGW/p3ro8TNtoLaNOXDh1GFmA7tyrVc6kd1ui526xSk/ kmcLkrGeD652kg58MHx92/4LWfcCAntTikVGM4Zlsb/728E5XdtKWiJHqsZcIBU9 jZRW+p58zmSpvngDYaOf+6cGE0eii3EklB1SzD6tHXC0VaS6eqoq0zan4LXNUJns LvGu4oMDyupwaYwLntAMF8lM/9R/p5YnqCEyO8zuI4xwC6gCMbX6kMAVDNdQBnOG I0MmF8IJdM9UgjLm8I7dguaOjsukYZ1bfBXdlOPyc+mjRUubSIR9rOavqYt53rZO 7XIBcCLidzNSx8vkm8jwJl5zDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGHBiPu eCFkazaT3gkvA2+7Y6LpMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGVwBplL0cK1aKr1a14zQl+BtQT+xWJgkByGBIq5z5R3yJVqvGz69w aUrvPu+jVOMN+qESkY6EY/JRaQNKFkXJFBtblnhc+RsvNU+g8YatkFhWTzVEmawH Po3kOMo/O96KxRZ+78dG/UVRyLyp19mkBgV+n0PEpFdSubo+6w7bs3Dy0ujcDyAa kXG6trYSLJfFouCSB6N1iCMBdDNN6PZ2+n4hCE1TyimS21k/vPSDnEpSWEZinh+J NmlYv0ZyjR3Cm4J9sv/ENSn+XIxZD5IyijXUsnb+Gpy27ORgH7DttSG8g1nqeid4 SxmvzwB+PvoskfJyud7OfC2qav/4qY0c -----END CERTIFICATE-----Generated at Fri Oct 24 09:09:55 2025 by rpki-client