$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft File: NpQoPSE6XlZ5WORs29gStcxynXE.mft (raw, json) Hash identifier: lQHIcumt7+w8AzrZBWhb+W1Cy2QnV6V/WunlykqYLBo= Subject key identifier: AF:AD:B4:90:6D:7C:D6:23:C8:5A:CB:E1:81:4F:0B:0A:68:CB:E0:48 Authority key identifier: 36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 Certificate issuer: /CN=A91A2F88/serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft Manifest number: 033F Signing time: Wed 05 Nov 2025 01:07:38 +0000 Manifest this update: Wed 05 Nov 2025 01:07:37 +0000 Manifest next update: Wed 12 Nov 2025 01:07:37 +0000 Files and hashes: 1: NpQoPSE6XlZ5WORs29gStcxynXE.crl (hash: QLr+pZlEsOmGFiQA2XChkuEgE4QvPgralRYIbyI1QL8=) 2: 54467164E0A711EC8F4D5B5FC4F9AE02.roa (hash: HwkSTw7raizrXpljDXnHXfZQCr+VPlFOvS2ci48bY0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F88, serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Validity Not Before: Nov 5 01:07:37 2025 GMT Not After : Nov 12 01:07:37 2025 GMT Subject: CN=690aa35a-c1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:55:7e:3d:fc:e5:53:de:fe:84:59:47:a8: fa:66:14:4c:f0:8f:58:d5:f0:45:db:a8:b9:91:74: 83:c8:57:38:45:75:27:40:70:d7:3f:1d:07:b0:9b: cc:b8:87:fc:f5:d7:cf:80:38:5a:0e:28:73:1d:d2: 46:eb:a1:65:de:c6:b6:3f:08:8a:cc:ea:07:de:7b: b0:9c:99:11:89:24:ff:1c:86:85:7b:ed:e2:d0:a1: 52:19:e1:29:ff:43:8b:69:1b:af:e3:91:86:97:08: cb:ee:24:0d:06:10:53:d6:f7:9f:16:7c:47:80:d0: 23:cb:4c:9d:fc:15:d3:8f:1e:5b:b6:0b:28:87:e2: a4:00:a1:9c:de:b3:5e:f5:34:fb:57:be:e2:16:98: 72:b0:83:62:3a:09:cc:28:79:26:53:4e:c5:e4:e0: e4:0e:6f:8d:5f:46:44:83:76:98:13:77:5d:6c:90: e6:57:8a:0d:c6:9b:01:24:38:6f:7c:f9:8a:22:4f: 53:e7:2a:5e:44:74:14:fe:79:94:60:7a:cf:2b:62: ed:6c:6b:fa:fd:74:13:d5:41:31:e0:11:be:52:cd: 10:d8:6a:a0:fa:91:61:a1:f7:6f:e8:05:59:17:3a: 78:6c:0c:d0:c3:9c:da:63:aa:46:2f:8a:54:f5:96: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AD:B4:90:6D:7C:D6:23:C8:5A:CB:E1:81:4F:0B:0A:68:CB:E0:48 X509v3 Authority Key Identifier: keyid:36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:50:fe:ac:0e:41:6b:86:97:dc:38:26:1b:5f:0a:c8:1b:f2: 95:59:a3:2c:c2:19:aa:57:7e:83:d8:13:60:26:c6:bb:3d:23: 5b:03:60:a7:a4:da:2f:49:3e:86:88:b7:4f:87:d0:39:4b:e6: 7f:4f:22:b2:a7:f9:33:46:2d:b7:e7:a8:85:6a:cd:13:62:8f: 8e:d1:95:90:69:69:38:26:d0:d4:5a:5a:97:23:2f:43:0f:49: c9:39:2d:7c:f6:01:ab:1b:f0:83:a7:f5:54:f1:3b:c4:f2:2f: 0d:59:99:48:a0:3a:0c:c1:1e:03:e8:39:4e:58:b4:ae:a2:dd: 7e:61:e4:aa:8c:c3:63:85:1b:03:f9:29:dc:6f:fa:86:26:60: f2:9e:af:d6:89:46:f7:ee:d4:f6:18:b8:9e:69:28:ba:c0:3c: 22:cf:0e:01:72:63:5e:89:74:f5:86:83:63:79:c2:ae:1b:c1: d7:60:56:86:cb:a7:09:5c:e3:1a:ed:14:81:9f:df:02:0c:22: 06:da:a8:fc:67:02:2a:c6:ae:fe:96:54:f8:27:b1:98:fc:f2: ce:56:9b:18:00:0d:58:9a:f3:6d:ca:e0:91:ec:34:c3:f3:c3: 62:cb:9e:57:1e:d7:ee:d0:b0:d0:d1:ca:16:cb:56:ee:38:7e: 97:3f:ab:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGODgxMTAvBgNVBAUTKDM2OTQyODNEMjEzQTVFNTY3OTU4RTQ2Q0RCRDgxMkI1 Q0M3MjlENzEwHhcNMjUxMTA1MDEwNzM3WhcNMjUxMTEyMDEwNzM3WjAYMRYwFAYD VQQDEw02OTBhYTM1YS1jMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzlVfj385VPe/oRZR6j6ZhRM8I9Y1fBF26i5kXSDyFc4RXUnQHDXPx0HsJvM uIf89dfPgDhaDihzHdJG66Fl3sa2PwiKzOoH3nuwnJkRiST/HIaFe+3i0KFSGeEp /0OLaRuv45GGlwjL7iQNBhBT1vefFnxHgNAjy0yd/BXTjx5btgsoh+KkAKGc3rNe 9TT7V77iFphysINiOgnMKHkmU07F5ODkDm+NX0ZEg3aYE3ddbJDmV4oNxpsBJDhv fPmKIk9T5ypeRHQU/nmUYHrPK2LtbGv6/XQT1UEx4BG+Us0Q2Gqg+pFhofdv6AVZ Fzp4bAzQw5zaY6pGL4pU9ZbU0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+ttJBt fNYjyFrL4YFPCwpoy+BIMB8GA1UdIwQYMBaAFDaUKD0hOl5WeVjkbNvYErXMcp1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkY4OC80QzdEQTNDMEUw QTMxMUVDOEY5QzBFNThDNEY5QUUwMi9OcFFvUFNFNlhsWjVXT1JzMjlnU3RjeHlu WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wUW9QU0U2WGxaNVdPUnMyOWdTdGN4eW5YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkY4OC80QzdEQTNDMEUwQTMxMUVDOEY5QzBFNThDNEY5QUUwMi9OcFFvUFNFNlhs WjVXT1JzMjlnU3RjeHluWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiUP6sDkFrhpfcOCYbXwrIG/KVWaMswhmqV36D2BNgJsa7PSNbA2Cn pNovST6GiLdPh9A5S+Z/TyKyp/kzRi2356iFas0TYo+O0ZWQaWk4JtDUWlqXIy9D D0nJOS189gGrG/CDp/VU8TvE8i8NWZlIoDoMwR4D6DlOWLSuot1+YeSqjMNjhRsD +Sncb/qGJmDynq/WiUb37tT2GLieaSi6wDwizw4BcmNeiXT1hoNjecKuG8HXYFaG y6cJXOMa7RSBn98CDCIG2qj8ZwIqxq7+llT4J7GY/PLOVpsYAA1YmvNtyuCR7DTD 88Niy55XHtfu0LDQ0coWy1buOH6XP6tG -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:41 2025 by rpki-client