$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json) Hash identifier: cvdnMoJ2jsDHHESHyCxGbtqvIC8i5/6vVf0y7GuLNIQ= Subject key identifier: EC:7E:99:8D:37:3C:04:F9:48:1B:A3:6C:D1:B3:E2:9F:7B:18:CC:84 Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft Manifest number: 0851 Signing time: Sun 02 Nov 2025 20:43:07 +0000 Manifest this update: Sun 02 Nov 2025 20:43:06 +0000 Manifest next update: Sun 09 Nov 2025 20:43:06 +0000 Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: omRlQwIhZrt8VC0Ud+UIA2vSQKmaeNJqv5DqLYlI2Qk=) 2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: 5pc4Fgf96yhJHg1dXqyOkvTiTCFOmyYqtcguriQDwlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Nov 2 20:43:06 2025 GMT Not After : Nov 9 20:43:06 2025 GMT Subject: CN=6907c25b-49f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:92:6e:7c:17:cf:3a:f4:15:e6:7e:9d:34: 37:1f:ed:ef:a6:cf:40:24:80:2d:2f:08:13:d6:ce: 1d:03:f5:ae:cc:c9:c6:7d:99:d5:11:10:33:02:e0: 02:34:1e:4c:93:36:cf:25:35:69:84:4b:0f:5d:f1: 75:6c:ee:90:75:a5:93:1a:ed:1e:45:a0:84:9a:9b: e7:4a:49:35:ee:8b:6c:c2:45:7c:6c:c5:b7:10:c2: 4a:0c:fe:5b:4d:74:0f:ed:cd:7d:8f:49:1d:fb:f7: ad:e9:11:fd:c0:37:99:e6:46:cf:ea:01:0e:3e:a0: 8c:d4:3c:ff:05:66:95:fc:95:ac:e3:7a:a1:e1:4e: 79:09:db:2e:a1:1f:9c:f0:d3:0d:7a:2d:9c:de:3d: c3:b5:bd:ec:9b:7d:c2:13:8f:5d:f9:8e:22:1a:7a: 77:e9:83:3f:c5:c6:0f:eb:90:63:d5:3f:b1:07:0d: 5d:b4:42:8c:21:04:a6:92:47:fd:b2:fd:d9:c1:17: 74:58:70:3e:49:94:9a:94:c7:9c:d8:64:3a:89:6a: b1:6b:c6:36:52:b1:90:80:5c:fb:48:28:5b:39:78: 1d:43:2c:2e:79:0e:73:3d:0e:53:f3:cc:47:03:88: cb:cb:81:16:16:3f:c1:f3:7b:8d:72:e9:a6:12:27: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7E:99:8D:37:3C:04:F9:48:1B:A3:6C:D1:B3:E2:9F:7B:18:CC:84 X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ab:9e:81:00:de:08:77:29:28:3f:5f:93:75:1d:73:f6:46: 76:38:05:94:49:e8:8c:aa:2b:08:c8:78:ae:4c:c3:5c:2a:7e: 79:02:d4:9a:9d:50:ee:de:ad:b2:53:52:db:45:bb:7a:ca:19: 1c:79:05:0d:ee:80:dd:c1:99:59:11:dd:d8:0e:fe:0d:04:c1: 73:03:b0:dc:9d:fc:3b:1e:ec:e9:43:35:25:cf:e1:c2:bd:63: 82:6e:c3:c4:ad:8e:c0:7d:d6:89:c4:06:73:c5:28:52:90:7a: 1e:71:ab:ea:ec:fd:1c:36:7b:fb:5a:4e:39:0a:10:db:81:8c: 9f:6d:db:49:63:b3:6a:9c:f6:d2:10:89:fd:11:11:11:7c:a8: 69:51:0a:95:31:91:01:fd:41:6b:10:ec:a3:1b:53:59:77:08: f2:b2:2f:63:14:ca:aa:8e:c1:31:e3:3f:d1:1e:2b:69:05:05: d2:1c:3d:44:77:84:79:d8:da:3e:3d:db:2f:8a:a6:3e:dc:7b: 97:70:be:34:e1:11:dd:97:76:89:ab:f5:ac:7e:7e:f1:b4:23: 96:3e:c5:ba:0f:99:db:c1:96:1d:14:b5:06:1f:d8:27:1b:b3: 25:ec:16:20:af:16:82:81:27:24:8a:06:33:e9:30:9a:29:e2: ad:13:e4:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjUxMTAyMjA0MzA2WhcNMjUxMTA5MjA0MzA2WjAYMRYwFAYD VQQDEw02OTA3YzI1Yi00OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUGSbnwXzzr0FeZ+nTQ3H+3vps9AJIAtLwgT1s4dA/WuzMnGfZnVERAzAuAC NB5MkzbPJTVphEsPXfF1bO6QdaWTGu0eRaCEmpvnSkk17otswkV8bMW3EMJKDP5b TXQP7c19j0kd+/et6RH9wDeZ5kbP6gEOPqCM1Dz/BWaV/JWs43qh4U55CdsuoR+c 8NMNei2c3j3Dtb3sm33CE49d+Y4iGnp36YM/xcYP65Bj1T+xBw1dtEKMIQSmkkf9 sv3ZwRd0WHA+SZSalMec2GQ6iWqxa8Y2UrGQgFz7SChbOXgdQywueQ5zPQ5T88xH A4jLy4EWFj/B83uNcummEicvWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOx+mY03 PAT5SBujbNGz4p97GMyEMB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQzNC9EQkE4Nzg1OEU2QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0Zr QTh0Y1UtYzBWVEQ0TW5MTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAq56BAN4IdykoP1+TdR1z9kZ2OAWUSeiMqisIyHiuTMNcKn55AtSa nVDu3q2yU1LbRbt6yhkceQUN7oDdwZlZEd3YDv4NBMFzA7Dcnfw7HuzpQzUlz+HC vWOCbsPErY7AfdaJxAZzxShSkHoecavq7P0cNnv7Wk45ChDbgYyfbdtJY7NqnPbS EIn9ERERfKhpUQqVMZEB/UFrEOyjG1NZdwjysi9jFMqqjsEx4z/RHitpBQXSHD1E d4R52No+PdsviqY+3HuXcL404RHdl3aJq/Wsfn7xtCOWPsW6D5nbwZYdFLUGH9gn G7Ml7BYgrxaCgSckigYz6TCaKeKtE+Su -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:24 2025 by rpki-client