$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: y62vibe78iERDBwXHhv8eSyNNxGmsneWpGvl08/q0k0= Subject key identifier: 57:8D:A5:D1:41:34:F7:39:79:FC:99:09:E5:7E:6D:2A:C4:96:BC:02 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 084B Signing time: Tue 04 Nov 2025 21:00:27 +0000 Manifest this update: Tue 04 Nov 2025 21:00:27 +0000 Manifest next update: Tue 11 Nov 2025 21:00:27 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: UvnbZfVWkGPJeZEBzFQH3KDy0+DH2tlbVZlhFGnrXBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Nov 4 21:00:27 2025 GMT Not After : Nov 11 21:00:27 2025 GMT Subject: CN=690a696b-98d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:7b:bb:ca:05:11:6b:a3:d5:28:b8:55:24: b0:c8:dc:fd:ec:19:79:ad:3c:ee:00:a7:8a:31:2e: 61:f2:56:8a:1f:61:90:0e:e6:a5:bd:39:3a:c1:7b: 1e:c4:a5:a5:24:5a:74:b3:aa:82:81:c5:df:16:c1: e3:03:0c:95:0c:88:e6:ad:9f:a1:b2:ad:b0:4a:7b: e9:83:b8:48:ed:f7:eb:57:63:0e:75:62:a1:8f:c2: eb:75:90:70:0c:7e:da:aa:51:50:ac:bf:07:96:6f: 54:7d:ce:01:a1:4f:cb:ee:4b:17:40:ee:cd:17:35: 2e:56:7f:b1:db:4d:67:12:2a:08:6d:d6:60:c2:32: 71:be:d0:a0:3c:cc:cb:8d:eb:d8:2f:8e:18:18:10: 15:f1:ba:2a:db:4f:09:55:00:34:09:44:70:65:f3: aa:cc:5d:1a:81:f0:59:93:7b:97:ef:81:a3:dd:ee: e3:ef:c6:08:57:2a:89:54:06:38:46:04:25:f3:e0: 9b:32:1f:d5:e1:37:85:8b:ef:a5:b5:c7:83:5f:88: 5f:8c:73:32:8f:f6:03:f2:cd:e3:36:ea:52:f6:81: d0:9e:da:f3:32:2a:68:d0:1c:16:4e:68:79:75:d0: 99:73:55:a7:40:5f:e0:25:85:aa:1b:38:c0:f8:64: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8D:A5:D1:41:34:F7:39:79:FC:99:09:E5:7E:6D:2A:C4:96:BC:02 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:20:a6:0d:dd:0e:f9:fc:63:e2:f8:8c:2c:20:49:ed:6b:31: 31:6d:53:c6:9b:13:45:d9:b0:71:b2:1c:47:77:66:02:39:ea: 6f:98:66:14:0b:f3:ef:4e:1e:12:30:9b:62:b4:3f:80:2e:25: 2d:b3:8f:03:d3:c9:22:3c:8c:93:80:80:f4:8a:75:d8:7f:2d: d8:3d:7b:2d:07:fc:c0:9b:57:c5:df:f7:66:bd:ef:c5:36:42: a6:e2:a2:bc:07:2c:38:0c:51:11:f1:10:ad:ee:cc:4e:a5:7d: c5:2b:29:b5:ad:54:d5:78:cc:31:44:0e:78:22:a0:d5:e0:d2: 42:2d:42:c0:9f:ff:46:66:00:4b:8d:6c:7c:70:b2:14:73:39: be:cc:e0:3a:94:c1:92:3f:d2:4c:9b:11:36:63:5f:4f:0d:9a: 03:18:23:cb:6a:08:2a:79:bc:03:dd:1d:ca:78:8a:05:84:87: 00:9b:08:a4:41:e4:2e:c3:c3:75:64:7a:f5:96:45:60:d1:5e: 3f:75:9f:54:bc:92:0f:2d:07:3e:ce:32:a2:25:e9:fa:25:7b: 75:14:b4:34:3b:ce:73:5e:64:52:e5:b8:2c:04:c3:ac:14:e1: 3e:7c:d9:ef:4e:a7:4b:05:ce:f2:a3:23:f8:31:19:21:01:a6: e4:fb:83:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUxMTA0MjEwMDI3WhcNMjUxMTExMjEwMDI3WjAYMRYwFAYD VQQDEw02OTBhNjk2Yi05OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Bp7u8oFEWuj1Si4VSSwyNz97Bl5rTzuAKeKMS5h8laKH2GQDualvTk6wXse xKWlJFp0s6qCgcXfFsHjAwyVDIjmrZ+hsq2wSnvpg7hI7ffrV2MOdWKhj8LrdZBw DH7aqlFQrL8Hlm9Ufc4BoU/L7ksXQO7NFzUuVn+x201nEioIbdZgwjJxvtCgPMzL jevYL44YGBAV8boq208JVQA0CURwZfOqzF0agfBZk3uX74Gj3e7j78YIVyqJVAY4 RgQl8+CbMh/V4TeFi++ltceDX4hfjHMyj/YD8s3jNupS9oHQntrzMipo0BwWTmh5 ddCZc1WnQF/gJYWqGzjA+GQ9rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeNpdFB NPc5efyZCeV+bSrElrwCMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSIKYN3Q75/GPi+IwsIEntazExbVPGmxNF2bBxshxHd2YCOepvmGYU C/PvTh4SMJtitD+ALiUts48D08kiPIyTgID0inXYfy3YPXstB/zAm1fF3/dmve/F NkKm4qK8Byw4DFER8RCt7sxOpX3FKym1rVTVeMwxRA54IqDV4NJCLULAn/9GZgBL jWx8cLIUczm+zOA6lMGSP9JMmxE2Y19PDZoDGCPLaggqebwD3R3KeIoFhIcAmwik QeQuw8N1ZHr1lkVg0V4/dZ9UvJIPLQc+zjKiJen6JXt1FLQ0O85zXmRS5bgsBMOs FOE+fNnvTqdLBc7yoyP4MRkhAabk+4ME -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:19 2025 by rpki-client