$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: GLmBB3KKDE79WYiAsUlst/N6+6MxAHlN0BZMDA7Uq9o= Subject key identifier: 8F:43:FB:93:63:1E:0D:1C:F8:0E:2B:5B:38:E9:0F:22:66:34:65:27 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 015B Signing time: Thu 06 Nov 2025 23:52:42 +0000 Manifest this update: Thu 06 Nov 2025 23:52:41 +0000 Manifest next update: Thu 13 Nov 2025 23:52:41 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: URcOkKpuxmuOVAxGRfCT8l/VtuHrRLRaAlgd72ON+KY=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 23:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Nov 6 23:52:41 2025 GMT Not After : Nov 13 23:52:41 2025 GMT Subject: CN=690d34ca-07b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:d3:a0:91:ab:b0:4b:d3:88:91:57:a4:ee: 22:83:c4:0d:29:05:12:13:77:3c:66:23:f8:3a:96: da:98:cc:a2:19:24:b7:7c:a5:05:5d:aa:38:eb:46: 82:c0:c2:a0:0a:d9:33:0a:fb:ab:d5:22:77:b3:26: 99:08:5d:cf:0e:54:b3:79:36:03:28:24:00:05:8a: 65:b0:12:fb:de:88:2b:34:c4:f6:55:74:0c:33:95: 5f:b4:f8:fa:e9:3c:80:94:b6:89:f8:8f:5e:2f:1d: 6b:3d:f5:a3:56:5e:ec:82:26:55:e2:74:26:b7:a2: c7:bf:2f:92:38:17:27:88:37:f9:30:d9:a9:35:bf: 55:95:9b:e7:8c:9d:36:63:f8:7b:c6:46:8d:08:22: 46:02:ed:b2:b1:36:c7:03:1b:02:43:36:a5:00:ef: db:cf:38:eb:5e:f2:c9:66:19:61:e0:ef:fa:4a:f4: 02:fa:41:8d:97:a4:19:e4:77:fa:1b:be:13:eb:91: 30:e3:63:84:ed:cb:ef:e3:cc:95:b6:34:a0:85:da: 7a:5b:b5:21:76:4d:48:0d:7e:b1:21:4b:ec:bc:33: fa:22:81:79:2c:9c:d9:11:fc:d2:b8:96:cf:a5:13: f9:85:0d:eb:66:70:27:9f:f7:cb:0c:cc:4b:f6:da: 58:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:43:FB:93:63:1E:0D:1C:F8:0E:2B:5B:38:E9:0F:22:66:34:65:27 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fd:12:3c:f8:64:0a:80:4b:39:1a:df:ac:de:39:ba:63:bb: 24:3e:d5:ad:57:8a:3c:a9:0a:d0:14:80:c8:fb:5c:0a:65:f7: 7a:d6:e2:39:bc:e8:7b:29:61:66:2c:54:b1:5e:7e:53:40:f1: 92:5d:52:e2:1e:df:1b:e3:c1:2d:67:f9:4b:4f:6b:c3:98:14: 77:47:21:7c:96:96:2e:c3:96:53:83:64:83:df:8a:9f:c1:05: e6:b2:6f:63:e6:fc:ea:01:f3:c8:d3:f7:49:25:54:30:06:a3: 12:55:29:c5:13:b1:4e:ab:e8:0f:a2:77:5b:21:e5:ed:c4:aa: 61:ff:14:e8:3c:a1:aa:ac:c6:31:de:ec:61:90:31:d2:3a:99: 80:5c:98:34:16:47:a7:28:a2:e1:48:68:b4:31:6b:bf:2e:82: f0:39:3d:02:0d:20:d4:ec:59:cb:6e:da:2c:9d:1c:a4:fe:c3: 63:73:19:10:eb:11:d7:ad:7b:a8:f5:79:05:6e:1a:ee:b6:8d: 67:7d:09:e2:c0:05:69:ae:6c:cc:a8:75:ec:c1:c0:a3:38:1b: e2:4c:ca:36:07:c3:6b:9d:34:a1:d4:ed:c0:ff:4e:04:c1:a3: bb:bb:85:a2:0e:84:96:99:a7:dd:5b:95:f6:02:88:62:25:66: 7a:89:cd:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUxMTA2MjM1MjQxWhcNMjUxMTEzMjM1MjQxWjAYMRYwFAYD VQQDEw02OTBkMzRjYS0wN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIDToJGrsEvTiJFXpO4ig8QNKQUSE3c8ZiP4OpbamMyiGSS3fKUFXao460aC wMKgCtkzCvur1SJ3syaZCF3PDlSzeTYDKCQABYplsBL73ogrNMT2VXQMM5VftPj6 6TyAlLaJ+I9eLx1rPfWjVl7sgiZV4nQmt6LHvy+SOBcniDf5MNmpNb9VlZvnjJ02 Y/h7xkaNCCJGAu2ysTbHAxsCQzalAO/bzzjrXvLJZhlh4O/6SvQC+kGNl6QZ5Hf6 G74T65Ew42OE7cvv48yVtjSghdp6W7Uhdk1IDX6xIUvsvDP6IoF5LJzZEfzSuJbP pRP5hQ3rZnAnn/fLDMxL9tpYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9D+5Nj Hg0c+A4rWzjpDyJmNGUnMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH/RI8+GQKgEs5Gt+s3jm6Y7skPtWtV4o8qQrQFIDI+1wKZfd61uI5 vOh7KWFmLFSxXn5TQPGSXVLiHt8b48EtZ/lLT2vDmBR3RyF8lpYuw5ZTg2SD34qf wQXmsm9j5vzqAfPI0/dJJVQwBqMSVSnFE7FOq+gPondbIeXtxKph/xToPKGqrMYx 3uxhkDHSOpmAXJg0FkenKKLhSGi0MWu/LoLwOT0CDSDU7FnLbtosnRyk/sNjcxkQ 6xHXrXuo9XkFbhruto1nfQniwAVprmzMqHXswcCjOBviTMo2B8NrnTSh1O3A/04E waO7u4WiDoSWmafdW5X2AohiJWZ6ic2K -----END CERTIFICATE-----Generated at Fri Nov 7 12:07:29 2025 by rpki-client