$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: 8t/UyvN5PkYRec1YMaInmdRqaVVx7idnPG2eLwLsJDo= Subject key identifier: 7B:93:B1:25:68:33:D6:06:75:5F:B4:8D:F2:CF:B3:F3:72:0F:30:A7 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 097D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 08DF Signing time: Sun 02 Nov 2025 20:49:06 +0000 Manifest this update: Sun 02 Nov 2025 20:49:06 +0000 Manifest next update: Sun 09 Nov 2025 20:49:06 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: gM0X2cVQYxpEL+FI18bNZkum4K8K5N53FOMZPiSG9XU=) 2: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: clywZEJBg6KMkDyy39k1K/Vi/9GWbE2Gjn5u83tI7EA=) 3: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: KgLz5HsW8UOR0Qo+kzG0XV7/s9WwfN/Pyvk3BeK3Mjg=) 4: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: nishm19kJAUoMzUdI5PQjs6o7A+9DfxQluFhtxQoO5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Nov 2 20:49:06 2025 GMT Not After : Nov 9 20:49:06 2025 GMT Subject: CN=6907c3c2-e355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:73:bc:8d:5c:d2:9f:76:84:15:4f:86:82: 10:0e:95:20:db:b1:0d:d6:86:14:47:e3:84:ba:31: a5:8e:d6:89:d1:c4:a7:cb:15:bb:61:8e:47:cb:36: b4:2e:ab:d7:79:e9:c7:08:1b:45:8d:0a:67:ff:36: f6:27:9c:62:ae:24:0f:ed:90:51:60:87:bb:3d:6f: 89:2c:98:5f:f1:aa:9f:c7:7f:6f:db:46:58:d9:4e: b6:83:19:1c:c4:38:d5:0a:dd:d0:f0:6d:dc:89:d0: 98:9e:98:80:2e:d3:41:a2:ed:c6:a8:24:a9:f1:b9: 55:a0:08:81:68:a3:fc:de:26:1d:73:19:9d:71:98: 09:54:f2:b7:dd:40:c4:d0:1c:31:2c:d3:0b:2f:0f: 61:cf:89:0c:ea:64:fd:04:b7:4d:1c:1a:60:fe:5d: 3b:76:bd:94:50:7b:d9:c2:46:06:9d:3f:60:5b:55: de:df:d3:7d:30:61:85:0b:56:2b:df:f9:47:24:b8: 2a:b4:d4:df:aa:44:88:74:8e:f0:27:97:e7:3b:72: 8a:95:e8:2f:25:05:7d:35:7b:0e:9f:58:8f:89:27: c5:05:19:1b:ab:68:af:c4:4d:c5:ec:a4:c7:cf:aa: a5:9b:18:b5:35:a9:e4:d1:09:06:35:2a:4a:37:df: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:93:B1:25:68:33:D6:06:75:5F:B4:8D:F2:CF:B3:F3:72:0F:30:A7 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7b:c1:b3:24:83:ab:65:80:54:31:a0:34:30:0b:b8:79:3b: eb:87:6e:6d:d8:87:23:28:31:bc:3d:8d:0e:4a:b7:f6:32:6b: e2:b1:6f:25:e8:7d:6b:5b:0c:83:e0:bd:5a:9b:b9:c3:33:2a: 28:be:c4:3b:bb:48:9a:4c:bb:d2:c9:7b:a3:27:f9:92:59:c9: 0f:11:ec:3e:8f:77:6f:df:8b:05:71:b5:06:63:2e:55:18:50: fb:69:89:b8:83:67:79:34:a3:88:73:a1:ec:f1:61:8d:48:fd: 35:0f:ae:26:3a:92:c7:d5:19:01:7d:8a:47:47:9f:ac:c0:2d: 68:31:16:0e:68:62:c1:f0:7c:c2:f5:a8:14:17:2c:50:0b:f0: 69:07:f7:bd:8b:e5:4f:ed:b1:b8:29:81:ef:25:16:25:44:db: 82:42:95:5c:90:39:ea:c6:25:79:59:b8:44:63:d5:51:27:16: 9b:36:08:2c:25:0c:e7:ae:ad:62:3a:8f:a3:2a:24:b2:b0:fb: 60:fa:a7:81:b6:d8:5d:5f:23:9d:fa:d7:e0:e4:9a:b5:a3:6f: ba:ca:8b:d1:06:4a:b8:54:c4:c0:30:f4:86:4e:e6:30:eb:53: 89:9d:df:f4:70:cb:2c:e5:1b:8c:8e:ad:6b:f3:91:19:44:c6: 09:f1:98:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUxMTAyMjA0OTA2WhcNMjUxMTA5MjA0OTA2WjAYMRYwFAYD VQQDEw02OTA3YzNjMi1lMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzZzvI1c0p92hBVPhoIQDpUg27EN1oYUR+OEujGljtaJ0cSnyxW7YY5Hyza0 LqvXeenHCBtFjQpn/zb2J5xiriQP7ZBRYIe7PW+JLJhf8aqfx39v20ZY2U62gxkc xDjVCt3Q8G3cidCYnpiALtNBou3GqCSp8blVoAiBaKP83iYdcxmdcZgJVPK33UDE 0BwxLNMLLw9hz4kM6mT9BLdNHBpg/l07dr2UUHvZwkYGnT9gW1Xe39N9MGGFC1Yr 3/lHJLgqtNTfqkSIdI7wJ5fnO3KKlegvJQV9NXsOn1iPiSfFBRkbq2ivxE3F7KTH z6qlmxi1Nank0QkGNSpKN99jJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuTsSVo M9YGdV+0jfLPs/NyDzCnMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGe8GzJIOrZYBUMaA0MAu4eTvrh25t2IcjKDG8PY0OSrf2MmvisW8l 6H1rWwyD4L1am7nDMyoovsQ7u0iaTLvSyXujJ/mSWckPEew+j3dv34sFcbUGYy5V GFD7aYm4g2d5NKOIc6Hs8WGNSP01D64mOpLH1RkBfYpHR5+swC1oMRYOaGLB8HzC 9agUFyxQC/BpB/e9i+VP7bG4KYHvJRYlRNuCQpVckDnqxiV5WbhEY9VRJxabNggs JQznrq1iOo+jKiSysPtg+qeBtthdXyOd+tfg5Jq1o2+6yovRBkq4VMTAMPSGTuYw 61OJnd/0cMss5RuMjq1r85EZRMYJ8Zhk -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:18 2025 by rpki-client