$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: QNf8P/NKSOiK4dZsFSinRoyrNAlqaQ23asERuviPxl4= Subject key identifier: 1A:95:AA:F5:46:53:5D:9D:7F:9C:6F:2E:87:51:E7:C0:95:09:8E:8E Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0160 Signing time: Wed 17 Sep 2025 04:34:56 +0000 Manifest this update: Wed 17 Sep 2025 04:34:56 +0000 Manifest next update: Wed 24 Sep 2025 04:34:56 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: pF77U8HLnZOJ/zAeK5dtvGFa9XGYxUDuEXEfXkPJtPA=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: OCKBcCjdkySUCtOriC+2k74TemAnMuuorEBugP8GmLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Sep 17 04:34:56 2025 GMT Not After : Sep 24 04:34:56 2025 GMT Subject: CN=68ca3a70-836a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:ed:45:43:0a:83:11:18:2b:cb:53:54:89: 0e:3f:e8:bc:dd:a1:26:7e:1a:e9:f2:df:e5:28:a7: 34:89:bf:fd:67:72:72:d2:42:5c:c8:c9:18:64:aa: 66:c1:7d:43:7a:3d:e2:0a:f0:5a:0f:e9:a6:89:6b: f6:58:f3:fa:a6:de:4f:cf:9d:a6:0a:7a:4a:e6:2f: 7c:c5:9e:99:53:8b:23:d2:99:f5:a9:de:b4:d0:dc: 5d:33:c7:f1:f8:e9:9d:da:c1:3e:d0:14:48:14:c5: 0a:65:b8:c2:d6:86:31:39:8b:f9:b1:0b:6e:5a:7d: 54:b2:c3:45:34:0e:81:fa:2d:ab:38:f4:49:34:1c: 6e:a9:99:b8:5f:82:32:34:d8:f7:8c:fb:05:a9:f5: 18:73:54:2e:50:8e:0d:2e:a9:d3:19:f7:20:e1:3a: 59:ca:76:ac:1a:c8:d9:21:25:65:33:c8:c1:b5:f8: 7c:18:bf:12:63:68:a8:6a:72:82:93:a8:0c:0a:cb: 73:e5:21:10:57:78:d2:87:7f:48:9e:34:6f:01:d0: e9:2d:98:96:7a:c3:43:f9:bc:e2:49:2b:78:a2:60: 6a:11:41:1a:1d:b1:59:8a:3f:90:a7:1d:74:66:70: ff:2f:36:bc:00:e8:15:1b:2e:78:45:3e:10:40:d5: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:95:AA:F5:46:53:5D:9D:7F:9C:6F:2E:87:51:E7:C0:95:09:8E:8E X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c2:2c:85:d3:ff:6b:d8:47:38:8b:64:b9:23:33:0c:ed:21: 80:fd:63:7b:f4:cd:1a:05:02:3e:7e:2c:1c:8c:0e:f4:60:77: 77:f0:28:54:44:8d:3f:e1:7b:a4:b9:85:fc:f0:ac:aa:d1:ad: c4:6d:90:d9:df:47:96:d3:08:44:40:0e:2c:0c:a5:fc:0c:b2: fc:4e:42:80:2a:70:95:01:ac:a4:63:b6:3e:43:06:9a:96:06: 67:2c:50:0f:b1:37:29:b2:7b:ea:24:bd:ed:1e:68:75:42:3f: 83:5c:90:1c:a1:25:d8:d0:f2:2d:0c:de:a6:6d:d2:3f:d3:12: 36:6a:77:72:19:c1:27:26:08:8d:94:c6:6c:7b:8a:e2:94:8f: c9:e9:1e:c2:e2:e5:5e:0c:3b:dd:fb:3c:e2:cb:6f:e0:48:11: 65:40:1d:21:f0:d9:eb:70:91:b5:46:dd:a6:8f:db:7a:26:ed: 8d:da:df:0a:2c:44:7f:f0:8c:52:f3:76:1f:b3:41:ff:ed:e4: 52:19:53:12:1d:1d:01:b4:73:e0:77:aa:f6:dc:ef:98:a6:a2: 09:df:41:07:d7:55:6e:d9:23:36:d0:df:d1:a1:af:af:d0:4e: cd:02:48:8e:5b:69:25:75:47:a5:cf:6b:eb:ab:11:17:71:ab: df:c1:17:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwOTE3MDQzNDU2WhcNMjUwOTI0MDQzNDU2WjAYMRYwFAYD VQQDEw02OGNhM2E3MC04MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z3tRUMKgxEYK8tTVIkOP+i83aEmfhrp8t/lKKc0ib/9Z3Jy0kJcyMkYZKpm wX1Dej3iCvBaD+mmiWv2WPP6pt5Pz52mCnpK5i98xZ6ZU4sj0pn1qd600NxdM8fx +Omd2sE+0BRIFMUKZbjC1oYxOYv5sQtuWn1UssNFNA6B+i2rOPRJNBxuqZm4X4Iy NNj3jPsFqfUYc1QuUI4NLqnTGfcg4TpZynasGsjZISVlM8jBtfh8GL8SY2ioanKC k6gMCstz5SEQV3jSh39InjRvAdDpLZiWesND+bziSSt4omBqEUEaHbFZij+Qpx10 ZnD/Lza8AOgVGy54RT4QQNUSdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqVqvVG U12df5xvLodR58CVCY6OMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlwiyF0/9r2Ec4i2S5IzMM7SGA/WN79M0aBQI+fiwcjA70YHd38ChU RI0/4XukuYX88Kyq0a3EbZDZ30eW0whEQA4sDKX8DLL8TkKAKnCVAaykY7Y+Qwaa lgZnLFAPsTcpsnvqJL3tHmh1Qj+DXJAcoSXY0PItDN6mbdI/0xI2andyGcEnJgiN lMZse4rilI/J6R7C4uVeDDvd+zziy2/gSBFlQB0h8NnrcJG1Rt2mj9t6Ju2N2t8K LER/8IxS83Yfs0H/7eRSGVMSHR0BtHPgd6r23O+YpqIJ30EH11Vu2SM20N/Roa+v 0E7NAkiOW2kldUelz2vrqxEXcavfwRc4 -----END CERTIFICATE-----Generated at Fri Sep 19 00:52:05 2025 by rpki-client