$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: jgtghv04ogqnFT1ERL3YeMSin18n3q7JjYZnIUa3vDM= Subject key identifier: 2C:29:12:33:E1:96:28:1F:2A:6E:26:DE:4F:32:1E:E4:7F:4E:47:19 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 05DC Signing time: Tue 04 Nov 2025 23:04:55 +0000 Manifest this update: Tue 04 Nov 2025 23:04:54 +0000 Manifest next update: Tue 11 Nov 2025 23:04:54 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: 82gQxpYprPeY2Oq1PtqwqFjSo8NywTTXdJn9+LZB3Lc=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 91y/zfPKe4toYeLlym6g8YBWRWa9in1N6/DuRedfMc4=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: OIkPyY1gexI0QB7Mc75F4AkfEDtSi4kbvtIlfRRk1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1513 (0x5e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Nov 4 23:04:54 2025 GMT Not After : Nov 11 23:04:54 2025 GMT Subject: CN=690a8696-c72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:2a:72:3c:22:27:75:25:40:a0:b2:f8:e5: f4:a7:7f:e7:52:83:32:e6:14:7c:5a:3b:40:4b:c2: 41:2c:e3:00:3b:cf:68:3b:93:61:68:15:75:a6:0e: f4:38:35:bc:6e:9f:bb:d9:bd:c9:81:44:35:47:0a: 9b:c1:2a:93:cb:85:7f:85:a3:85:a0:31:cd:cb:88: 50:23:08:89:c2:63:a6:05:fe:46:ef:da:9f:5d:17: 0b:f1:66:45:c7:ba:e9:d0:c4:99:ed:7c:91:b7:09: 0c:0b:a0:6b:12:9f:cc:f7:03:ea:b0:79:51:c0:f5: b8:5c:63:14:70:de:e8:c1:77:e2:79:0f:3d:61:09: 5f:17:13:41:1a:60:83:c3:bf:96:08:57:26:35:b3: 19:5a:62:0b:6c:54:cd:d8:fc:06:c1:f4:8f:35:97: 6a:7e:ba:1d:7d:63:6e:4c:e7:cd:ca:3d:06:50:3c: d7:64:e4:fd:00:ea:d5:69:46:6f:bb:db:f9:97:5d: b8:e3:98:9a:e9:8b:28:a7:66:6b:79:fd:05:c9:3b: fa:1d:39:08:ac:12:be:08:82:b7:dd:a2:6c:90:67: 89:f7:64:d3:4c:72:66:9e:cf:1b:27:0d:8e:a5:d7: c3:95:73:ce:00:1d:c8:64:66:99:f3:11:c7:cd:ad: 1e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:29:12:33:E1:96:28:1F:2A:6E:26:DE:4F:32:1E:E4:7F:4E:47:19 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c4:0f:a9:ee:63:ac:e3:3f:45:ca:01:e3:df:31:43:41:57: 2f:be:c3:f7:17:59:ee:22:3f:4b:d2:10:19:98:62:cc:b0:1f: a9:12:56:01:2d:9f:62:b8:7a:6c:ec:c2:d3:f7:31:7c:b7:ec: 41:98:72:05:5b:e2:a6:ea:d5:d1:65:33:70:a5:6b:64:d9:83: 8b:e7:80:d0:3e:83:28:93:24:bb:4a:93:97:64:20:c1:30:31: 6c:7c:ec:cf:fa:92:1f:73:f4:d3:8b:c0:b5:b2:e3:22:1b:58: 4e:d2:26:26:a0:35:c1:54:01:40:03:b1:10:89:1a:8a:e0:ec: b3:82:fe:e1:75:05:ee:d3:62:a7:36:1a:51:8e:49:46:8f:56: 72:3e:d6:de:75:0c:4e:df:8c:7f:83:c1:13:e4:b1:9f:70:50: 2a:87:8f:39:19:09:45:d0:eb:2b:28:29:d1:b7:22:db:59:71: 89:b8:9e:06:4b:ec:c4:96:26:24:32:63:b9:3b:4d:61:ef:4a: 40:9a:de:c6:e0:12:2b:0b:d5:2d:89:c4:72:9f:92:69:72:96: cc:f7:2a:d3:f3:c1:d2:3d:e1:78:86:58:02:1c:c3:4f:50:c6: 75:cd:f7:41:2a:c5:f0:85:0a:15:80:1f:af:85:19:19:68:e0: e3:ca:27:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUxMTA0MjMwNDU0WhcNMjUxMTExMjMwNDU0WjAYMRYwFAYD VQQDEw02OTBhODY5Ni1jNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv64qcjwiJ3UlQKCy+OX0p3/nUoMy5hR8WjtAS8JBLOMAO89oO5NhaBV1pg70 ODW8bp+72b3JgUQ1RwqbwSqTy4V/haOFoDHNy4hQIwiJwmOmBf5G79qfXRcL8WZF x7rp0MSZ7XyRtwkMC6BrEp/M9wPqsHlRwPW4XGMUcN7owXfieQ89YQlfFxNBGmCD w7+WCFcmNbMZWmILbFTN2PwGwfSPNZdqfrodfWNuTOfNyj0GUDzXZOT9AOrVaUZv u9v5l12445ia6Ysop2Zref0FyTv6HTkIrBK+CIK33aJskGeJ92TTTHJmns8bJw2O pdfDlXPOAB3IZGaZ8xHHza0edQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwpEjPh ligfKm4m3k8yHuR/TkcZMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwxA+p7mOs4z9FygHj3zFDQVcvvsP3F1nuIj9L0hAZmGLMsB+pElYB LZ9iuHps7MLT9zF8t+xBmHIFW+Km6tXRZTNwpWtk2YOL54DQPoMokyS7SpOXZCDB MDFsfOzP+pIfc/TTi8C1suMiG1hO0iYmoDXBVAFAA7EQiRqK4Oyzgv7hdQXu02Kn NhpRjklGj1ZyPtbedQxO34x/g8ET5LGfcFAqh485GQlF0OsrKCnRtyLbWXGJuJ4G S+zEliYkMmO5O01h70pAmt7G4BIrC9UticRyn5JpcpbM9yrT88HSPeF4hlgCHMNP UMZ1zfdBKsXwhQoVgB+vhRkZaODjyicZ -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:35 2025 by rpki-client