$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: YBG6TIk0ytu1WhJ/Kh5OwXNVXXwKncHNP/HkRugUmZk= Subject key identifier: E9:89:5E:05:9F:03:09:44:B8:51:F7:BC:3D:AC:A3:D0:14:16:FA:AE Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 079E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0795 Signing time: Sun 02 Nov 2025 21:27:10 +0000 Manifest this update: Sun 02 Nov 2025 21:27:09 +0000 Manifest next update: Sun 09 Nov 2025 21:27:09 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: iu57zfprO4EUEho2OYtH7Um2msZW5xDCqNuBCLbYRlE=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: QxeWRQMKmf7TJD4WLtGbHv118KvpecTV8OOHHwq8cdw=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: YwH6tW2wnqbHDFkrMa51ak141hU9452AG57RT759KqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Nov 2 21:27:09 2025 GMT Not After : Nov 9 21:27:09 2025 GMT Subject: CN=6907ccae-9019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:8c:cf:9e:66:ab:d0:1b:c0:20:21:38:69: f6:5b:46:e2:e5:25:ff:98:f1:66:0b:44:1d:eb:64: d8:2e:ac:99:c5:8b:e4:19:8a:00:1a:28:ee:75:57: ff:52:54:a8:18:7f:07:19:ca:bc:f3:a5:dc:09:91: 57:36:cc:72:29:58:86:e6:92:e5:41:e8:85:e3:0f: d8:84:f6:03:2c:18:10:7f:f7:ca:20:c9:6d:dd:8a: a7:48:7b:8e:c0:7b:ed:2e:93:0b:af:b5:ce:36:88: 10:7a:c6:54:7e:2b:c0:71:3d:79:86:bf:97:3c:61: 15:e7:0e:73:ca:56:f7:53:f8:2a:7e:f3:21:32:15: 29:90:1c:2d:f1:99:13:64:26:8b:73:42:c5:64:54: dd:f0:74:dd:70:ca:81:14:9e:6c:ec:34:45:4c:3a: 4a:a7:ce:5a:0f:8c:a8:d4:ec:dd:69:b0:c5:60:42: 00:d2:40:a7:7e:be:5f:21:6f:f6:b6:b5:c9:6e:f9: 92:8e:ed:f8:48:89:82:46:3f:80:46:3c:61:96:12: c6:c6:98:86:8d:68:ec:ce:db:c2:ab:61:c6:60:82: 21:9f:06:85:53:b7:c2:f9:a3:81:f7:f5:33:31:c5: b0:ce:2b:3d:e3:40:76:e9:2f:06:05:ef:51:31:e5: aa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:89:5E:05:9F:03:09:44:B8:51:F7:BC:3D:AC:A3:D0:14:16:FA:AE X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:87:31:7a:6a:e1:ee:de:78:b7:91:56:98:a9:47:8c:99:28: b2:bf:35:c5:02:53:db:fb:e5:af:d7:79:ec:88:75:4b:76:7b: 4a:6c:bb:20:f3:63:c9:6a:31:fb:8d:57:ef:92:39:ac:d7:b2: ae:01:40:59:8f:6a:dd:e8:0f:08:5f:22:09:ac:39:e3:46:76: 11:03:07:5f:71:95:fa:5f:0a:ca:5e:3a:59:23:17:a6:91:37: 8e:58:f1:be:36:4a:0c:e7:cb:69:de:e8:38:58:6e:78:6d:0c: 8f:45:0f:2d:4a:40:3d:04:fb:75:ec:35:60:1e:b1:04:b7:06: 34:29:89:62:88:a7:61:81:fd:56:14:6f:27:13:68:d2:8e:12: 65:14:eb:5c:e8:23:81:e3:13:fc:29:67:01:d0:3b:2c:4e:92: cf:15:76:ee:8f:9b:b8:00:1c:5a:fe:f0:50:a7:ee:0f:8c:b1: 7b:41:89:e8:21:aa:08:c8:e2:79:9a:12:4e:f1:33:d2:d7:a7: 16:ea:8a:1d:99:ba:9b:b5:c9:81:d7:da:76:43:e4:fd:41:5b: 60:5d:54:b6:8f:f4:99:c4:8b:21:f1:53:51:1b:f8:6a:6f:fe: dc:ae:43:d4:11:a0:de:8c:96:7c:5f:72:12:c8:49:29:93:6b: fc:da:bb:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUxMTAyMjEyNzA5WhcNMjUxMTA5MjEyNzA5WjAYMRYwFAYD VQQDEw02OTA3Y2NhZS05MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaKMz55mq9AbwCAhOGn2W0bi5SX/mPFmC0Qd62TYLqyZxYvkGYoAGijudVf/ UlSoGH8HGcq886XcCZFXNsxyKViG5pLlQeiF4w/YhPYDLBgQf/fKIMlt3YqnSHuO wHvtLpMLr7XONogQesZUfivAcT15hr+XPGEV5w5zylb3U/gqfvMhMhUpkBwt8ZkT ZCaLc0LFZFTd8HTdcMqBFJ5s7DRFTDpKp85aD4yo1OzdabDFYEIA0kCnfr5fIW/2 trXJbvmSju34SImCRj+ARjxhlhLGxpiGjWjsztvCq2HGYIIhnwaFU7fC+aOB9/Uz McWwzis940B26S8GBe9RMeWqtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmJXgWf AwlEuFH3vD2so9AUFvquMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdhzF6auHu3ni3kVaYqUeMmSiyvzXFAlPb++Wv13nsiHVLdntKbLsg 82PJajH7jVfvkjms17KuAUBZj2rd6A8IXyIJrDnjRnYRAwdfcZX6XwrKXjpZIxem kTeOWPG+NkoM58tp3ug4WG54bQyPRQ8tSkA9BPt17DVgHrEEtwY0KYliiKdhgf1W FG8nE2jSjhJlFOtc6COB4xP8KWcB0DssTpLPFXbuj5u4ABxa/vBQp+4PjLF7QYno IaoIyOJ5mhJO8TPS16cW6oodmbqbtcmB19p2Q+T9QVtgXVS2j/SZxIsh8VNRG/hq b/7crkPUEaDejJZ8X3ISyEkpk2v82rux -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:43 2025 by rpki-client