$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft File: NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json) Hash identifier: AFv2f4ZkeuUHYGO7KB6TntpvspUzVzcyAm+SvtATiG8= Subject key identifier: 7D:6C:C4:B6:82:74:F6:16:4B:21:AA:98:B4:73:80:DE:5D:70:56:1F Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft Manifest number: 8B Signing time: Wed 05 Nov 2025 06:49:54 +0000 Manifest this update: Wed 05 Nov 2025 06:49:53 +0000 Manifest next update: Wed 12 Nov 2025 06:49:53 +0000 Files and hashes: 1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: OF6EXd7TwdalDCbvArYO4ni+7PkOlCgMEptNm1jyywA=) 2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: KZxky345FbSXUrOq6QK1EajrLW8GtjyV/j47aC9IQ2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Validity Not Before: Nov 5 06:49:53 2025 GMT Not After : Nov 12 06:49:53 2025 GMT Subject: CN=690af391-cab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:e9:e8:eb:dc:d7:bc:7c:33:0d:34:f4:bf: ae:e3:22:bb:25:3f:4e:64:ee:73:76:0e:50:7a:28: 6d:4c:cb:b0:63:b0:73:fe:28:1c:a4:6c:b8:da:5b: 31:f7:e1:0c:52:ad:d9:ca:65:41:82:f1:0c:c0:5d: a3:8b:15:7e:fa:1e:bc:3d:34:a2:a0:40:12:39:32: 4b:c2:71:a2:e1:cd:13:9e:1b:6f:6e:3a:d3:58:81: f5:4f:98:a6:60:e9:62:b3:af:13:95:79:b7:77:55: ee:ec:8b:c9:a1:4a:e4:07:db:e6:c9:f1:0c:98:6f: d6:1c:af:01:3b:75:ea:ad:1a:1d:b3:82:a9:5d:2c: a4:6d:14:80:fa:0b:ca:c3:89:fd:ea:72:e2:24:52: fc:1f:f6:f9:67:2d:af:98:ed:a0:b4:2e:77:d4:a1: 66:12:7a:ef:5c:09:6d:74:d7:36:b3:27:b6:2e:2e: c0:9d:90:b4:39:39:92:e6:81:de:5a:16:70:d4:28: f0:8e:c4:bb:a4:13:6e:49:66:bf:53:20:ac:55:42: 54:57:11:67:f7:7e:5f:11:02:94:3a:2a:72:6f:b0: 0e:40:da:60:a9:2a:11:bd:7d:d7:b6:60:30:39:52: d2:14:25:2d:1e:72:d3:7e:65:fe:f9:7d:74:ad:e3: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6C:C4:B6:82:74:F6:16:4B:21:AA:98:B4:73:80:DE:5D:70:56:1F X509v3 Authority Key Identifier: keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7f:76:85:f0:d4:71:e7:1c:47:0e:6a:3f:59:2f:70:7d:26: 9d:e4:98:a6:24:bb:c7:b5:3d:c0:e2:94:e8:c3:08:1a:eb:27: 72:34:d6:9a:17:ee:24:f5:4a:5b:a5:c0:9a:93:5a:b4:e3:6c: 11:a8:18:4a:0e:cd:46:b4:ca:59:79:68:46:08:83:b6:aa:8e: 42:09:e5:56:6c:c0:91:2b:33:ad:14:6d:45:10:46:7b:2d:f2: 13:9a:70:c9:91:09:8f:72:e5:10:8a:55:5c:b8:c4:d3:e2:4c: 89:07:22:59:e8:78:16:43:4f:64:95:c1:f1:d5:70:27:8e:2d: bd:ae:0b:10:04:0f:86:f8:b6:a5:fa:55:3c:a8:92:f4:08:13: 02:31:1e:67:c6:49:06:72:7c:2e:06:8d:18:58:b0:02:ce:5d: 50:84:d4:1c:1a:2b:34:6d:b4:94:9b:7f:6d:40:4f:ed:e4:9c: 09:55:56:89:57:27:cc:c2:cc:b7:a7:90:4d:fe:ed:ad:8f:c3: 1b:e3:f3:cf:87:cb:8d:64:46:dc:db:72:8d:8f:55:98:2a:92: a3:b9:b5:6c:4e:6e:98:97:6a:24:ec:d4:8a:63:e7:e3:21:04: a8:85:26:b5:09:cf:1f:c3:3d:82:22:ea:f5:71:cd:c2:ba:36: 1f:93:d6:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDNzIxMTAvBgNVBAUTKDM2MTZFMDFEQTMzMTdGMDlFRUNBOThFN0JDNzU0Q0JD OTkwRDdENjgwHhcNMjUxMTA1MDY0OTUzWhcNMjUxMTEyMDY0OTUzWjAYMRYwFAYD VQQDEw02OTBhZjM5MS1jYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyifp6Ovc17x8Mw009L+u4yK7JT9OZO5zdg5QeihtTMuwY7Bz/igcpGy42lsx 9+EMUq3ZymVBgvEMwF2jixV++h68PTSioEASOTJLwnGi4c0TnhtvbjrTWIH1T5im YOlis68TlXm3d1Xu7IvJoUrkB9vmyfEMmG/WHK8BO3XqrRods4KpXSykbRSA+gvK w4n96nLiJFL8H/b5Zy2vmO2gtC531KFmEnrvXAltdNc2sye2Li7AnZC0OTmS5oHe WhZw1CjwjsS7pBNuSWa/UyCsVUJUVxFn935fEQKUOipyb7AOQNpgqSoRvX3XtmAw OVLSFCUtHnLTfmX++X10reMsywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1sxLaC dPYWSyGqmLRzgN5dcFYfMB8GA1UdIwQYMBaAFDYW4B2jMX8J7sqY57x1TLyZDX1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkM3Mi85RDVCNTE1NkVD RjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3bnV5cGpudkhWTXZKa05m V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oYmdIYU14ZndudXlwam52SFZNdkprTmZXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkM3Mi85RDVCNTE1NkVDRjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3 bnV5cGpudkhWTXZKa05mV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuf3aF8NRx5xxHDmo/WS9wfSad5JimJLvHtT3A4pTowwga6ydyNNaa F+4k9UpbpcCak1q042wRqBhKDs1GtMpZeWhGCIO2qo5CCeVWbMCRKzOtFG1FEEZ7 LfITmnDJkQmPcuUQilVcuMTT4kyJByJZ6HgWQ09klcHx1XAnji29rgsQBA+G+Lal +lU8qJL0CBMCMR5nxkkGcnwuBo0YWLACzl1QhNQcGis0bbSUm39tQE/t5JwJVVaJ VyfMwsy3p5BN/u2tj8Mb4/PPh8uNZEbc23KNj1WYKpKjubVsTm6Yl2ok7NSKY+fj IQSohSa1Cc8fwz2CIur1cc3CujYfk9Yw -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:59 2025 by rpki-client