$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft File: m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json) Hash identifier: PfdkxH5RasLTpKZkYKhhh2AAwMHxnRTXyvLAFWFNq0A= Subject key identifier: 31:F9:EC:BA:87:C8:5E:FD:14:6F:E1:3A:F4:28:B8:58:B5:6A:E0:42 Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 Certificate issuer: /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft Manifest number: 44 Signing time: Mon 03 Nov 2025 07:23:17 +0000 Manifest this update: Mon 03 Nov 2025 07:23:16 +0000 Manifest next update: Mon 10 Nov 2025 07:23:16 +0000 Files and hashes: 1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: IRkTp73G7i3M+5HhL8uGbUt19EjHiQWqDT0SUNNcpiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Validity Not Before: Nov 3 07:23:16 2025 GMT Not After : Nov 10 07:23:16 2025 GMT Subject: CN=69085864-a772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:f0:fb:74:24:57:60:d7:62:8c:b3:db:36: 7c:f0:4b:75:8a:d5:16:2f:b7:a9:44:e3:7b:86:fa: dd:b6:14:c2:4d:de:9c:38:49:d5:18:02:61:05:e6: 4b:26:41:56:6a:52:5b:4f:5a:c7:8d:e7:26:e4:a9: cb:e8:74:9b:5c:0b:98:30:a4:45:17:e2:41:11:e2: 67:53:3b:9c:93:ae:a0:84:de:09:f4:7e:1e:7d:e4: 16:25:cf:bb:03:7a:f4:c6:da:45:4a:11:c5:54:09: 40:52:9f:17:d2:ca:5c:ee:42:ee:91:72:bb:7d:9a: e4:08:ea:f9:4d:52:98:fd:15:73:8c:c7:e0:ad:46: 6a:76:a2:f2:83:ad:e0:6b:c7:2f:a1:55:ec:0e:20: d5:cf:ea:99:3f:79:c0:cd:59:c8:a0:34:1e:0d:b1: fb:b0:80:ec:58:20:a2:88:a1:54:ea:bc:b3:25:9b: a7:26:fe:d8:a3:36:f6:07:1a:eb:f3:ce:33:68:42: 87:76:f1:5a:c9:e4:af:fa:04:04:cf:c5:94:54:77: 68:a4:87:70:c2:3c:45:7a:fe:3f:ba:f4:9b:bc:4f: 7a:11:40:15:d1:96:9d:1b:4b:3f:01:b2:db:c1:8f: 48:d0:83:f6:04:d7:72:96:e0:25:a0:2e:40:f1:aa: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F9:EC:BA:87:C8:5E:FD:14:6F:E1:3A:F4:28:B8:58:B5:6A:E0:42 X509v3 Authority Key Identifier: keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4d:18:ee:1e:f6:0c:37:65:22:5f:72:0a:ad:3e:a7:6d:2b: 91:d7:9b:b3:e7:83:db:3f:6e:05:42:29:54:0e:d5:f2:9b:a8: d4:ac:ea:cc:cd:7b:7f:e7:36:a7:75:13:8b:2f:2e:4e:9c:c0: e6:46:1d:3e:6d:2f:df:9f:0c:c3:8b:72:14:25:1e:19:ac:ea: df:44:c8:ea:6d:6b:a4:f4:8d:83:af:41:52:94:5e:44:22:cc: 2e:cd:3b:0b:60:53:45:01:68:f3:92:0d:87:1d:92:b1:ff:c5: fc:49:31:77:3d:27:3e:93:80:66:e3:a9:fe:46:be:30:62:98: fd:14:27:11:4e:3d:92:13:71:db:46:37:10:01:7f:2f:d6:21: 07:b4:71:79:f5:1f:5f:a7:c5:e0:ec:55:dd:0d:fa:41:16:95: 63:3e:8a:5d:13:f0:f7:54:3c:0e:be:9f:b1:76:65:1e:68:48: 18:05:63:f4:e4:fd:10:5a:76:04:43:f0:a9:0b:43:19:14:e6: b0:4b:2f:b8:26:92:dc:e5:c0:ec:07:b7:3b:0e:f1:d5:7e:11: d3:c6:22:15:11:2a:53:b0:18:a1:ac:93:64:0e:b9:d7:75:d6: 3b:2d:a2:73:88:e8:63:b3:44:0b:c8:28:65:41:f6:4b:14:d8: 1a:bb:a5:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUI0RkNEMUVEMDZBMUU0QkExQzRCRTlGMUQxMEIyOTQ1 RTkyOEMxOTAeFw0yNTExMDMwNzIzMTZaFw0yNTExMTAwNzIzMTZaMBgxFjAUBgNV BAMTDTY5MDg1ODY0LWE3NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC56/D7dCRXYNdijLPbNnzwS3WK1RYvt6lE43uG+t22FMJN3pw4SdUYAmEF5ksm QVZqUltPWseN5ybkqcvodJtcC5gwpEUX4kER4mdTO5yTrqCE3gn0fh595BYlz7sD evTG2kVKEcVUCUBSnxfSylzuQu6Rcrt9muQI6vlNUpj9FXOMx+CtRmp2ovKDreBr xy+hVewOINXP6pk/ecDNWcigNB4NsfuwgOxYIKKIoVTqvLMlm6cm/tijNvYHGuvz zjNoQod28VrJ5K/6BATPxZRUd2ikh3DCPEV6/j+69Ju8T3oRQBXRlp0bSz8BstvB j0jQg/YE13KW4CWgLkDxqpCzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMfnsuofI Xv0Ub+E69Ci4WLVq4EIwHwYDVR0jBBgwFoAUm0/NHtBqHkuhxL6fHRCylF6SjBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0VGMTdDM0Q2NTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1aHhMNmZIUkN5bEY2U2pC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTBfTkh0QnFIa3VoeEw2ZkhSQ3lsRjZTakJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0VGMTdDM0Q2NTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1 aHhMNmZIUkN5bEY2U2pCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtNGO4e9gw3ZSJfcgqtPqdtK5HXm7Png9s/bgVCKVQO1fKbqNSs6szN e3/nNqd1E4svLk6cwOZGHT5tL9+fDMOLchQlHhms6t9EyOpta6T0jYOvQVKUXkQi zC7NOwtgU0UBaPOSDYcdkrH/xfxJMXc9Jz6TgGbjqf5GvjBimP0UJxFOPZITcdtG NxABfy/WIQe0cXn1H1+nxeDsVd0N+kEWlWM+il0T8PdUPA6+n7F2ZR5oSBgFY/Tk /RBadgRD8KkLQxkU5rBLL7gmktzlwOwHtzsO8dV+EdPGIhURKlOwGKGsk2QOudd1 1jstonOI6GOzRAvIKGVB9ksU2Bq7pb4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:39 2025 by rpki-client