$ rpki-client -vvf rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft File: nqxU6fn1nmg49IRgQhBWMwZtII4.mft (raw, json) Hash identifier: Xue7HhahiooABJbFeCeUwI1zBA4xc+7nQguK84IB/sM= Subject key identifier: 0B:3D:F2:1D:DF:9F:9A:07:9E:1F:B8:E5:6E:D1:C0:74:46:E3:55:FC Authority key identifier: 9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E Certificate issuer: /CN=A91570D9/serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft Manifest number: 2C Signing time: Mon 03 Nov 2025 07:41:32 +0000 Manifest this update: Mon 03 Nov 2025 07:41:31 +0000 Manifest next update: Mon 10 Nov 2025 07:41:31 +0000 Files and hashes: 1: nqxU6fn1nmg49IRgQhBWMwZtII4.crl (hash: MAvBm6Jv64MM4FxVxMIOd6zGkWQXN17P5eR22MaFywA=) 2: AA3F24B67D8011F083953324C4F9AE02.roa (hash: oUOKfGpowL+63AVr56ivCHHAJRNhENKlNPtv0dg5ub8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570D9, serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Validity Not Before: Nov 3 07:41:31 2025 GMT Not After : Nov 10 07:41:31 2025 GMT Subject: CN=69085cac-13e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:01:51:a7:33:37:a2:75:94:9d:24:8f:9d: f6:29:b4:ab:d1:26:41:0c:a7:b5:57:0e:d9:98:8c: a2:3b:d1:d7:7d:74:ea:b6:02:d4:35:c9:98:29:5d: 71:83:7a:72:be:19:8e:94:81:cd:0b:2d:89:76:fc: 31:73:ca:52:68:0c:f7:11:c6:e0:88:54:d9:c4:51: a0:93:1c:d3:fe:2c:32:6a:0d:31:87:77:24:90:18: 91:3a:21:43:fd:0a:db:5c:72:7c:37:9e:63:0e:82: e4:d7:78:43:fc:c9:22:4b:28:f2:00:a8:6f:ca:67: 68:ee:5c:4b:16:aa:72:4a:27:a9:65:fe:11:4a:47: 22:e0:2d:1e:3c:5f:4c:c1:c5:af:c7:37:10:a9:85: b5:42:ea:6b:2a:f9:ad:49:81:38:53:5e:b3:ce:bd: d2:a7:db:7c:ca:5c:ae:07:f5:18:26:2a:45:0e:2c: 5c:c7:24:6e:0a:71:6f:24:71:e7:7b:94:cf:42:ef: 31:f0:bc:e9:91:b6:06:c4:5b:86:51:9b:e7:f1:00: 74:7a:57:69:40:b9:9c:89:12:ad:58:38:40:2e:31: 6e:86:d0:db:60:f5:47:bd:64:75:c1:b6:0c:01:38: 33:e5:5e:7e:65:0f:ac:5d:c5:72:2a:1d:99:32:2c: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3D:F2:1D:DF:9F:9A:07:9E:1F:B8:E5:6E:D1:C0:74:46:E3:55:FC X509v3 Authority Key Identifier: keyid:9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c8:87:74:60:d3:9d:ab:b8:c8:8d:49:91:81:0b:94:69:34: 7a:81:83:a9:8c:46:66:d2:1d:f1:e3:89:e2:ab:2b:5f:ee:ce: f4:18:bf:bd:26:dc:d8:2b:55:d6:e3:b5:93:0e:2a:56:32:77: af:ae:0e:f3:97:08:9d:8d:af:da:5e:d8:b5:59:f5:c0:77:9f: ee:34:f9:b8:23:7f:ef:31:4b:68:5f:99:a6:8f:9b:13:d9:13: 58:16:36:f5:73:f9:f4:b5:d0:d4:ad:61:59:43:53:e1:a2:d6: 6f:6f:47:64:cb:77:5f:87:92:e9:25:9a:96:fb:18:11:ea:75: 59:8c:66:41:9a:73:4d:47:97:ea:fd:d6:a6:4f:a5:c4:b3:17: 7f:20:9f:f3:65:44:f3:63:27:3c:36:ea:94:0f:7e:50:00:cb: 8f:a4:47:8d:a6:42:b6:96:8a:52:4a:df:54:98:18:8a:05:80: 0a:29:0c:44:a8:cf:51:59:00:f7:fe:46:b2:7b:37:9c:aa:4c: 4e:17:58:45:20:26:ad:5c:cc:41:fa:aa:ac:03:78:e7:85:8d: 20:f3:4b:ba:3e:db:4f:eb:a3:c6:c9:1f:f3:76:cb:8d:4f:0a: 03:82:8a:25:48:4e:a6:fa:0f:0e:0a:6c:1f:79:2c:c9:29:85: 08:f0:c1:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzBEOTExMC8GA1UEBRMoOUVBQzU0RTlGOUY1OUU2ODM4RjQ4NDYwNDIxMDU2MzMw NjZEMjA4RTAeFw0yNTExMDMwNzQxMzFaFw0yNTExMTAwNzQxMzFaMBgxFjAUBgNV BAMTDTY5MDg1Y2FjLTEzZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvcAFRpzM3onWUnSSPnfYptKvRJkEMp7VXDtmYjKI70dd9dOq2AtQ1yZgpXXGD enK+GY6Ugc0LLYl2/DFzylJoDPcRxuCIVNnEUaCTHNP+LDJqDTGHdySQGJE6IUP9 Cttccnw3nmMOguTXeEP8ySJLKPIAqG/KZ2juXEsWqnJKJ6ll/hFKRyLgLR48X0zB xa/HNxCphbVC6msq+a1JgThTXrPOvdKn23zKXK4H9RgmKkUOLFzHJG4KcW8kced7 lM9C7zHwvOmRtgbEW4ZRm+fxAHR6V2lAuZyJEq1YOEAuMW6G0Ntg9Ue9ZHXBtgwB ODPlXn5lD6xdxXIqHZkyLKpxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCz3yHd+f mgeeH7jlbtHAdEbjVfwwHwYDVR0jBBgwFoAUnqxU6fn1nmg49IRgQhBWMwZtII4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MEQ5LzJFQ0IyRkZBN0Q4 MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1nNDlJUmdRaEJXTXdadElJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnF4VTZmbjFubWc0OUlSZ1FoQldNd1p0SUk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MEQ5LzJFQ0IyRkZBN0Q4MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1n NDlJUmdRaEJXTXdadElJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbIh3Rg052ruMiNSZGBC5RpNHqBg6mMRmbSHfHjieKrK1/uzvQYv70m 3NgrVdbjtZMOKlYyd6+uDvOXCJ2Nr9pe2LVZ9cB3n+40+bgjf+8xS2hfmaaPmxPZ E1gWNvVz+fS10NStYVlDU+Gi1m9vR2TLd1+Hkuklmpb7GBHqdVmMZkGac01Hl+r9 1qZPpcSzF38gn/NlRPNjJzw26pQPflAAy4+kR42mQraWilJK31SYGIoFgAopDESo z1FZAPf+RrJ7N5yqTE4XWEUgJq1czEH6qqwDeOeFjSDzS7o+20/ro8bJH/N2y41P CgOCiiVITqb6Dw4KbB95LMkphQjwwXM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:04 2025 by rpki-client