$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: ctrVKs1lgbKXTWL3UWt4w49DqY/Xv5iv+ZsI+kH0gM0= Subject key identifier: 7E:BA:41:D1:24:03:F2:4E:42:C8:9E:BE:44:05:D9:C1:21:ED:9B:B0 Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 04EA Signing time: Mon 03 Nov 2025 00:04:50 +0000 Manifest this update: Mon 03 Nov 2025 00:04:50 +0000 Manifest next update: Mon 10 Nov 2025 00:04:50 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: g/pmlDGfSM+PMoa7/bp2/jh1rJjUW40wUjoMwZNk65c=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Nov 3 00:04:50 2025 GMT Not After : Nov 10 00:04:50 2025 GMT Subject: CN=6907f1a2-9bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:fc:63:b2:db:d6:68:aa:f0:cb:f4:c5:bf: a9:42:1c:5c:f8:8b:d4:7c:cf:c7:b6:a7:dd:25:b7: 00:9d:a4:64:a3:4f:14:7a:98:74:f3:34:64:bc:0c: 9b:35:50:1d:35:87:f2:ac:ff:3a:c0:f1:e2:4d:fb: a6:01:11:b6:d0:1c:aa:04:d9:1c:76:fb:1d:5c:4b: 13:19:20:33:71:0e:98:1e:cb:5b:9e:d6:66:6c:48: 42:e2:fc:a9:27:78:fa:5f:ce:35:cd:b3:b4:3e:55: 9c:32:dc:85:1f:50:8d:27:35:e7:1b:18:00:df:34: c9:ca:66:76:dc:9c:f0:f1:6f:06:f2:9b:c3:28:9a: 78:7d:69:d0:c8:2c:64:b1:65:f9:d3:ce:47:0d:49: b4:41:d2:f0:a1:14:7d:22:8f:e5:3c:eb:ca:85:a1: 3f:54:60:61:6c:51:f5:f2:1a:38:ab:3b:d4:2e:e9: 35:1a:53:3d:5e:5d:a1:68:19:4c:fb:e5:ae:92:73: fe:09:0e:50:8f:88:bf:5e:11:ff:db:ed:9e:6c:ad: 07:24:22:cb:71:9e:00:02:c2:2a:c3:6b:cf:ce:f3: cb:30:9e:b1:b5:7e:1d:20:de:8f:0f:92:72:5b:91: b8:46:5b:09:87:0a:2d:2c:6a:bc:c0:a9:07:c2:c3: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BA:41:D1:24:03:F2:4E:42:C8:9E:BE:44:05:D9:C1:21:ED:9B:B0 X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:5f:ff:41:d1:c7:f1:9f:0d:79:d3:05:72:e0:92:c2:3c:95: 1c:11:1e:c4:18:3d:cf:23:9a:38:78:dc:1f:de:df:11:04:c9: da:5c:7a:aa:a4:06:c7:0d:f5:c2:d7:cb:42:6d:10:3b:39:58: 9a:73:3c:3e:94:aa:6d:a4:6e:b2:7b:60:2d:7c:c2:49:c5:db: 1e:39:49:c8:af:19:be:ae:00:ee:b6:5f:2a:94:d8:78:c6:30: 42:04:be:76:64:94:fc:17:e8:9b:f3:c4:a2:0a:4a:48:f6:92: e9:ef:98:33:00:95:5e:b0:d0:1c:fd:a8:87:41:0a:0e:df:da: 60:4c:b0:25:69:6f:6f:67:00:d6:be:e2:8b:d9:6e:0e:1c:51: bc:fa:87:5b:f9:31:26:b5:cb:da:9f:7a:d4:23:38:99:76:76: 27:ec:00:99:ec:c6:34:6a:be:9c:a4:d3:91:ef:b4:d8:45:84: aa:7a:66:b6:8e:54:d1:bd:73:2e:4e:14:c9:eb:4f:5d:6f:cf: 62:a9:82:64:f9:1c:b7:8b:39:0b:2f:f1:f4:f1:73:89:b1:f5: 1d:a8:cb:bb:3e:d2:06:0b:f8:e1:d2:26:c2:93:e5:f6:fe:c5: 13:0f:7c:e0:9c:63:92:d1:6e:61:e6:c5:16:29:e6:83:3a:c0: 59:1f:78:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTExMDMwMDA0NTBaFw0yNTExMTAwMDA0NTBaMBgxFjAUBgNV BAMTDTY5MDdmMWEyLTliZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgo/xjstvWaKrwy/TFv6lCHFz4i9R8z8e2p90ltwCdpGSjTxR6mHTzNGS8DJs1 UB01h/Ks/zrA8eJN+6YBEbbQHKoE2Rx2+x1cSxMZIDNxDpgey1ue1mZsSELi/Kkn ePpfzjXNs7Q+VZwy3IUfUI0nNecbGADfNMnKZnbcnPDxbwbym8Momnh9adDILGSx ZfnTzkcNSbRB0vChFH0ij+U868qFoT9UYGFsUfXyGjirO9Qu6TUaUz1eXaFoGUz7 5a6Sc/4JDlCPiL9eEf/b7Z5srQckIstxngACwirDa8/O88swnrG1fh0g3o8PknJb kbhGWwmHCi0sarzAqQfCwxHtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfrpB0SQD 8k5CyJ6+RAXZwSHtm7AwHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAVf/0HRx/GfDXnTBXLgksI8lRwRHsQYPc8jmjh43B/e3xEEydpceqqk BscN9cLXy0JtEDs5WJpzPD6Uqm2kbrJ7YC18wknF2x45ScivGb6uAO62XyqU2HjG MEIEvnZklPwX6JvzxKIKSkj2kunvmDMAlV6w0Bz9qIdBCg7f2mBMsCVpb29nANa+ 4ovZbg4cUbz6h1v5MSa1y9qfetQjOJl2difsAJnsxjRqvpyk05HvtNhFhKp6ZraO VNG9cy5OFMnrT11vz2KpgmT5HLeLOQsv8fTxc4mx9R2oy7s+0gYL+OHSJsKT5fb+ xRMPfOCcY5LRbmHmxRYp5oM6wFkfeNM= -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:28 2025 by rpki-client