$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft File: nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json) Hash identifier: FieOVNfZRp4hezR6c7EmhganZQ2Q1XGBlD2Mfgedujk= Subject key identifier: 4B:77:7E:03:45:81:D8:84:02:BA:4B:E0:28:78:A7:3A:85:33:A3:3C Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71 Certificate issuer: /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft Manifest number: 04A6 Signing time: Wed 05 Nov 2025 00:03:21 +0000 Manifest this update: Wed 05 Nov 2025 00:03:21 +0000 Manifest next update: Wed 12 Nov 2025 00:03:21 +0000 Files and hashes: 1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: K32vZh88lMuDYkm2Zq9cJkoBBOj4ORMts6hNRVSijBA=) 2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: KOxvpAve/GDsWOamZ1PG3jAU4MwWgXyKqq+f/Ul6wII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71 Validity Not Before: Nov 5 00:03:21 2025 GMT Not After : Nov 12 00:03:21 2025 GMT Subject: CN=690a9449-b6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:69:47:db:27:2d:90:64:d4:d4:05:3f:84: 92:76:d0:29:a0:76:06:9b:9b:83:3f:14:42:3b:e7: 75:35:91:52:9c:49:cd:0d:0b:a9:b6:12:9e:1e:ea: 5e:e5:bf:01:e4:9e:3d:34:12:3a:8a:60:d0:91:4b: 8e:53:e3:2d:3b:a2:5d:7f:65:14:b3:82:32:a2:f9: fd:e3:f7:b3:9d:04:95:7c:7c:b6:3a:f1:2e:67:a1: 40:d7:bf:3f:f2:d9:90:4c:53:04:a3:d0:b9:c1:64: f2:16:65:ae:75:dd:74:d7:c3:eb:4a:cc:89:08:51: b4:a8:26:96:ea:ff:66:98:de:c5:25:1c:14:06:57: d3:39:fe:21:8d:cc:68:a8:c0:e5:e8:b8:da:f0:f9: 5d:7a:40:50:10:b6:ae:03:81:df:a0:00:8c:e7:06: e7:39:06:68:31:e6:fe:fe:59:59:4f:ef:23:57:1d: 06:f6:18:6f:b6:de:75:7b:8f:ad:b7:8b:4e:f5:d3: b9:dc:61:6a:6e:71:eb:2d:ca:22:63:5d:25:15:07: ed:18:d7:9e:a9:44:e7:ae:59:0e:43:a1:4f:d4:3e: 19:51:26:6e:a4:df:26:84:24:87:9a:e1:4c:c6:9a: 54:d0:58:b8:a5:4e:f1:73:24:1f:85:27:fc:8a:bd: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:77:7E:03:45:81:D8:84:02:BA:4B:E0:28:78:A7:3A:85:33:A3:3C X509v3 Authority Key Identifier: keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:fd:22:ae:e2:90:8d:cb:22:fc:08:51:1b:ba:07:2a:da:2b: 59:f7:a0:82:a8:c1:65:f7:ff:79:84:5b:6b:78:46:d9:cb:52: 58:ec:9d:25:03:7c:c0:74:68:cd:fa:65:6a:2f:15:8b:15:74: 25:8c:62:df:7d:63:2b:3f:7f:6d:86:5f:6c:d4:51:e9:a1:b8: 4b:30:c6:ed:c7:37:e3:3a:11:12:6c:3a:93:17:c1:ab:ab:68: 40:a9:8d:08:b7:be:c9:55:4c:d8:e6:a4:3a:fc:ed:2c:a3:5a: fb:7c:cb:63:3e:4d:69:5c:5f:03:20:cf:d5:43:98:5a:82:fc: 7f:7c:ea:22:aa:ee:b5:23:b3:b3:71:9e:7d:bf:1f:26:45:c1: 9c:9e:9b:84:2a:93:a7:87:a1:17:c7:2b:38:be:91:1c:85:03: 8f:a2:b6:cf:d2:81:10:00:09:5e:db:15:5e:20:c8:60:9d:4a: 52:a6:c3:78:da:a8:2e:96:a6:e0:65:77:06:50:cc:d5:8a:d3: 9b:3e:4c:35:ef:0c:d8:90:3b:27:1d:ea:cc:8f:0e:cb:86:6c: a8:f1:56:cf:22:57:e3:28:d2:ba:d3:14:8e:79:fe:71:76:56: cf:28:c3:6c:bc:51:15:94:ea:c2:c9:2a:d9:72:48:59:9a:e1: de:92:23:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY0NTAxMTAvBgNVBAUTKDlDREY4Q0U5MEJGNzlGOEMxNDhEMUY3NjFGOTk0RDgy MUIyNDlDNzEwHhcNMjUxMTA1MDAwMzIxWhcNMjUxMTEyMDAwMzIxWjAYMRYwFAYD VQQDEw02OTBhOTQ0OS1iNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwVpR9snLZBk1NQFP4SSdtApoHYGm5uDPxRCO+d1NZFSnEnNDQupthKeHupe 5b8B5J49NBI6imDQkUuOU+MtO6Jdf2UUs4Iyovn94/eznQSVfHy2OvEuZ6FA178/ 8tmQTFMEo9C5wWTyFmWudd1018PrSsyJCFG0qCaW6v9mmN7FJRwUBlfTOf4hjcxo qMDl6Lja8PldekBQELauA4HfoACM5wbnOQZoMeb+/llZT+8jVx0G9hhvtt51e4+t t4tO9dO53GFqbnHrLcoiY10lFQftGNeeqUTnrlkOQ6FP1D4ZUSZupN8mhCSHmuFM xppU0Fi4pU7xcyQfhSf8ir0pawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEt3fgNF gdiEArpL4Ch4pzqFM6M8MB8GA1UdIwQYMBaAFJzfjOkL95+MFI0fdh+ZTYIbJJxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ1MC9COTgxNzFEQTUz NDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240d1VqUjkySDVsTmdoc2tu SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25OLU02UXYzbjR3VWpSOTJINWxOZ2hza25IRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjQ1MC9COTgxNzFEQTUzNDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240 d1VqUjkySDVsTmdoc2tuSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR/SKu4pCNyyL8CFEbugcq2itZ96CCqMFl9/95hFtreEbZy1JY7J0l A3zAdGjN+mVqLxWLFXQljGLffWMrP39thl9s1FHpobhLMMbtxzfjOhESbDqTF8Gr q2hAqY0It77JVUzY5qQ6/O0so1r7fMtjPk1pXF8DIM/VQ5hagvx/fOoiqu61I7Oz cZ59vx8mRcGcnpuEKpOnh6EXxys4vpEchQOPorbP0oEQAAle2xVeIMhgnUpSpsN4 2qgulqbgZXcGUMzVitObPkw17wzYkDsnHerMjw7Lhmyo8VbPIlfjKNK60xSOef5x dlbPKMNsvFEVlOrCySrZckhZmuHekiMq -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:46 2025 by rpki-client