$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: Mncvfd+8siHhX01dhJtabn/ELHQpXfTTwcnuVwzpf9Q= Subject key identifier: 85:D9:C0:2E:E6:E2:D4:CF:1C:60:64:A4:5F:F3:FD:CD:AD:6D:CC:5D Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0178 Signing time: Mon 03 Nov 2025 03:46:46 +0000 Manifest this update: Mon 03 Nov 2025 03:46:46 +0000 Manifest next update: Mon 10 Nov 2025 03:46:46 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: pXYHJEHB8ZfyTofM6xLauX2kvM50YYUUYnCFeJwzcBs=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: OCKBcCjdkySUCtOriC+2k74TemAnMuuorEBugP8GmLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Nov 3 03:46:46 2025 GMT Not After : Nov 10 03:46:46 2025 GMT Subject: CN=690825a6-b669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:2b:6d:4f:01:7f:96:0f:31:2e:91:ee:6d: 10:1f:da:c2:a8:03:44:0a:b0:68:26:05:53:5a:5f: 1e:23:73:90:25:79:c1:20:6c:21:29:48:0b:b7:1d: 50:af:4f:b7:53:ac:26:61:4c:8a:3f:0c:93:15:bc: 04:78:f2:60:b8:a2:31:34:b0:e9:11:ea:d6:89:17: d2:3f:31:64:9f:df:8b:94:6a:97:89:71:2e:63:5c: f0:ba:7e:be:2c:df:12:e1:a4:5d:bd:6e:35:1c:b1: 76:bd:2e:e6:80:96:a3:73:60:1d:35:56:1e:f7:36: 72:c7:35:c9:ec:27:f6:98:8d:d4:7b:45:51:92:a4: 2e:0f:fd:cd:0e:94:e3:d0:41:3d:b0:66:79:1a:88: f3:b0:d0:2a:6d:13:fc:4b:74:40:2d:b0:32:17:93: 3a:29:23:6a:a8:a6:a5:41:fb:75:07:bf:d0:aa:66: ef:52:61:ff:9b:d6:90:4c:46:99:d6:b2:54:22:09: 82:cc:c3:0c:bd:7c:e2:80:d8:37:95:40:e2:0a:29: d5:b2:f7:4e:57:7b:5d:d8:7e:05:d2:68:c9:1d:2c: 59:cd:6b:06:6b:45:91:11:74:8b:cf:61:ec:2d:9b: 7a:43:cf:45:1c:12:64:91:07:2e:c6:98:2e:1c:9f: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:C0:2E:E6:E2:D4:CF:1C:60:64:A4:5F:F3:FD:CD:AD:6D:CC:5D X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9f:12:8a:40:96:df:9f:93:57:fb:5e:64:e1:67:0a:a7:7b: e6:74:c1:dc:47:3f:02:c7:03:a9:d9:ca:e1:1c:45:f3:17:17: 72:63:63:71:2e:9d:be:4a:37:40:e9:af:c8:74:1a:72:bd:c6: 06:15:b1:af:2d:c1:0d:65:4f:65:68:9c:a9:88:83:86:e9:3e: 68:90:f9:f7:a3:6b:eb:45:a8:8d:dc:7f:a4:15:74:13:2e:30: b1:71:fc:7d:71:55:80:ff:8b:de:02:40:02:e8:8e:62:4e:60: 4c:36:1c:97:aa:10:84:ae:13:4c:37:75:00:f8:6f:0b:5b:e0: 39:1f:a8:27:63:e3:92:c8:a4:7f:a2:81:f0:d2:fc:59:c1:dc: 18:39:63:f9:0d:48:e0:1f:22:7f:e0:66:13:79:09:4e:e9:db: 6b:73:94:34:b4:3a:72:1f:6c:fe:36:89:63:6e:eb:5f:6c:88: a0:1b:c7:2f:1a:b8:01:51:b9:e2:3d:c0:b6:82:6a:4e:05:e6: d8:c9:be:c5:86:73:27:c8:b9:17:53:17:49:bb:81:29:03:ee: 49:e4:ed:4b:af:c2:e4:87:19:dd:ae:f6:ea:7e:4a:30:bc:d6: f7:94:dd:d6:ab:38:a8:c2:e9:46:c0:a1:28:fb:bd:43:e5:f5: 66:0b:22:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUxMTAzMDM0NjQ2WhcNMjUxMTEwMDM0NjQ2WjAYMRYwFAYD VQQDEw02OTA4MjVhNi1iNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudcrbU8Bf5YPMS6R7m0QH9rCqANECrBoJgVTWl8eI3OQJXnBIGwhKUgLtx1Q r0+3U6wmYUyKPwyTFbwEePJguKIxNLDpEerWiRfSPzFkn9+LlGqXiXEuY1zwun6+ LN8S4aRdvW41HLF2vS7mgJajc2AdNVYe9zZyxzXJ7Cf2mI3Ue0VRkqQuD/3NDpTj 0EE9sGZ5GojzsNAqbRP8S3RALbAyF5M6KSNqqKalQft1B7/QqmbvUmH/m9aQTEaZ 1rJUIgmCzMMMvXzigNg3lUDiCinVsvdOV3td2H4F0mjJHSxZzWsGa0WREXSLz2Hs LZt6Q89FHBJkkQcuxpguHJ9w7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXZwC7m 4tTPHGBkpF/z/c2tbcxdMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOnxKKQJbfn5NX+15k4WcKp3vmdMHcRz8CxwOp2crhHEXzFxdyY2Nx Lp2+SjdA6a/IdBpyvcYGFbGvLcENZU9laJypiIOG6T5okPn3o2vrRaiN3H+kFXQT LjCxcfx9cVWA/4veAkAC6I5iTmBMNhyXqhCErhNMN3UA+G8LW+A5H6gnY+OSyKR/ ooHw0vxZwdwYOWP5DUjgHyJ/4GYTeQlO6dtrc5Q0tDpyH2z+NoljbutfbIigG8cv GrgBUbniPcC2gmpOBebYyb7FhnMnyLkXUxdJu4EpA+5J5O1Lr8Lkhxndrvbqfkow vNb3lN3WqziowulGwKEo+71D5fVmCyK8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:15 2025 by rpki-client