$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: 5+9JsdGOrJDw0MGBrR7F+ZaU4ctH/8XUJ8X4Ti2ajf0= Subject key identifier: 7C:50:35:2E:31:43:5C:22:8D:4C:0D:13:0B:B0:34:BA:3A:09:79:45 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 34D1 Signing time: Sun 02 Nov 2025 15:10:02 +0000 Manifest this update: Sun 02 Nov 2025 15:10:02 +0000 Manifest next update: Sun 09 Nov 2025 15:10:02 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: NPglUbgDzBHJQNRGEmfvvXKTHY6oSGiDVuXapChXlo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Nov 2 15:10:02 2025 GMT Not After : Nov 9 15:10:02 2025 GMT Subject: CN=6907744a-fa31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:25:06:d0:2f:d5:7e:7c:ad:fd:f9:80:70: 9e:fe:c5:15:7f:f7:62:6b:5d:e9:e3:d5:b9:ed:bb: b8:4e:48:76:0e:6d:38:ee:43:39:0a:3d:4f:f1:b7: a9:bd:94:e4:7d:77:1b:98:50:0d:38:f3:17:35:dc: bd:54:24:b8:fb:a1:ca:01:f2:38:fb:77:7f:16:cd: 0c:65:6a:47:e7:3d:13:74:66:bb:33:fc:60:6a:92: c5:28:97:9b:4d:0b:8f:28:0a:9b:e3:a6:aa:6e:c7: f6:d1:55:bd:45:1f:4d:eb:65:06:5d:2b:f3:69:a2: 7b:78:07:8b:bb:9f:6e:f1:3c:32:e8:5f:a8:15:0f: 57:fe:e3:63:0f:49:f4:23:48:89:ed:b4:69:52:71: c1:cd:1f:71:9b:53:67:e2:03:00:31:b8:ef:c4:bd: bf:b4:26:f5:54:ea:ea:e8:0a:97:96:03:f5:04:8b: 23:83:84:4f:87:38:37:8f:fe:02:be:aa:25:10:0d: 26:38:a5:1e:ad:f0:d6:ac:8b:28:1e:fa:37:94:f1: 77:ee:3b:4e:22:ea:6f:8a:ec:13:80:68:c9:f7:e9: 21:d7:03:3f:af:6c:ac:12:3c:79:df:96:f8:e9:b8: 72:0b:6c:08:f1:ae:86:ae:5c:0e:4d:30:db:11:a4: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:50:35:2E:31:43:5C:22:8D:4C:0D:13:0B:B0:34:BA:3A:09:79:45 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:1c:61:17:40:d7:10:e1:c6:d1:7d:b6:b5:c9:df:09:5e:03: 49:d5:71:dd:57:65:45:80:cf:d8:62:ce:f1:4f:bc:b9:3b:a0: ea:a3:44:58:d6:f7:a1:42:b5:63:5e:8b:1c:ff:72:b1:3b:b6: df:41:4b:3c:08:f2:41:f9:6c:3a:e4:1f:a9:0d:7c:5e:f1:4d: 9a:9f:d6:97:48:9e:2d:ad:08:db:4c:b4:3a:65:fc:db:a0:f9: 91:6d:69:07:44:65:2e:c2:df:03:d3:74:b9:7d:45:1e:b1:77: 6e:3e:25:93:54:fa:c9:4f:54:bb:9a:8b:a9:a2:fe:b7:70:7f: 4f:c1:3a:0e:15:65:15:d2:2b:49:6e:56:d1:b1:e1:65:ec:2f: 59:ba:1d:f4:55:1f:62:53:03:6a:dc:11:be:31:12:be:5a:e3: 6a:d6:c6:1b:00:b4:14:45:c9:e8:13:81:72:fa:51:99:39:e3: 7b:d6:56:07:c5:fe:d6:ef:b6:b2:79:c5:52:be:32:4a:54:65: 4f:c6:cb:61:63:86:a1:b5:09:c9:2d:b2:dc:80:34:ad:ac:14: 73:cb:50:3b:af:9d:63:7d:3e:c4:1f:b2:63:01:41:34:29:33: 06:a8:30:db:1b:d0:ea:91:4b:41:46:a9:91:88:72:1c:5d:67: 3d:75:e6:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUxMTAyMTUxMDAyWhcNMjUxMTA5MTUxMDAyWjAYMRYwFAYD VQQDEw02OTA3NzQ0YS1mYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gElBtAv1X58rf35gHCe/sUVf/dia13p49W57bu4Tkh2Dm047kM5Cj1P8bep vZTkfXcbmFANOPMXNdy9VCS4+6HKAfI4+3d/Fs0MZWpH5z0TdGa7M/xgapLFKJeb TQuPKAqb46aqbsf20VW9RR9N62UGXSvzaaJ7eAeLu59u8Twy6F+oFQ9X/uNjD0n0 I0iJ7bRpUnHBzR9xm1Nn4gMAMbjvxL2/tCb1VOrq6AqXlgP1BIsjg4RPhzg3j/4C vqolEA0mOKUerfDWrIsoHvo3lPF37jtOIupviuwTgGjJ9+kh1wM/r2ysEjx535b4 6bhyC2wI8a6GrlwOTTDbEaSzoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxQNS4x Q1wijUwNEwuwNLo6CXlFMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4HGEXQNcQ4cbRfba1yd8JXgNJ1XHdV2VFgM/YYs7xT7y5O6Dqo0RY 1vehQrVjXosc/3KxO7bfQUs8CPJB+Ww65B+pDXxe8U2an9aXSJ4trQjbTLQ6Zfzb oPmRbWkHRGUuwt8D03S5fUUesXduPiWTVPrJT1S7moupov63cH9PwToOFWUV0itJ blbRseFl7C9Zuh30VR9iUwNq3BG+MRK+WuNq1sYbALQURcnoE4Fy+lGZOeN71lYH xf7W77ayecVSvjJKVGVPxsthY4ahtQnJLbLcgDStrBRzy1A7r51jfT7EH7JjAUE0 KTMGqDDbG9DqkUtBRqmRiHIcXWc9deYp -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:03 2025 by rpki-client