$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: VJRKpG3hTzvcPTqsB/CMHoQC6Av5yzUskuNOhvcASts= Subject key identifier: 75:6B:A0:97:29:73:2A:C4:D7:4E:40:4D:93:F4:AA:3A:A0:2E:37:B5 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 0954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 094C Signing time: Sun 02 Nov 2025 20:07:11 +0000 Manifest this update: Sun 02 Nov 2025 20:07:11 +0000 Manifest next update: Sun 09 Nov 2025 20:07:11 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: 2vOK+Mr8w7jlGFMktLd0OaswfYbMvvLBYAYw9ST3X78=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: Dqc2A2nNp9iRWlHOyQUrLEGAECqLcbkzGYQ/tB1zbpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2388 (0x954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Nov 2 20:07:11 2025 GMT Not After : Nov 9 20:07:11 2025 GMT Subject: CN=6907b9ef-22ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:db:be:83:d3:d1:2c:a7:ae:e5:88:59:0e: 64:77:8b:15:b5:54:eb:b9:c0:cb:b8:8a:ac:14:66: 7e:29:af:4c:6e:5c:27:f6:59:cb:cc:64:27:d9:5e: b5:20:32:49:b6:c6:90:60:9a:70:24:ac:ee:ae:b8: d3:df:39:bb:a6:83:05:f1:c2:53:4e:d0:fd:73:fa: 3a:d2:cd:7c:cc:4c:bb:1d:12:a3:62:db:00:76:86: 2d:c0:14:a0:e7:59:39:4f:99:12:4a:4a:63:46:49: d1:52:d0:78:14:5c:d0:03:50:33:19:28:66:6f:b8: 11:f4:23:25:1c:06:39:97:75:7b:bd:9c:aa:be:a9: 03:d3:26:7c:a5:b3:77:25:06:51:fb:b6:31:3f:6d: dc:2d:f2:56:4c:9c:11:24:1c:b7:60:d8:3a:b9:ea: 53:39:e1:89:b9:11:6a:5c:6f:cc:f9:63:71:6c:db: 57:26:ea:dc:87:16:3f:52:a1:e4:c3:64:23:de:07: c1:70:99:db:ee:a9:45:65:16:0d:13:4b:d6:39:eb: 9e:48:e6:6e:99:c6:59:f5:73:f4:a5:41:7b:cd:a9: 1c:8e:4d:ca:84:c9:9f:8d:bc:29:d8:89:04:8d:69: b3:92:2e:e3:b4:51:0c:25:eb:9c:d5:aa:6f:22:1e: 46:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6B:A0:97:29:73:2A:C4:D7:4E:40:4D:93:F4:AA:3A:A0:2E:37:B5 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:91:20:09:64:67:c8:9f:59:9a:39:d7:13:c0:f8:ec:e6:87: ae:87:ea:1a:00:e4:56:c4:e3:53:02:a7:d0:1e:b0:96:01:71: 11:56:06:bc:ad:f4:11:ff:38:61:15:9a:a6:fd:3f:f8:eb:2b: 1c:25:43:34:e7:0e:d1:55:39:e0:63:07:06:8d:ef:06:1f:15: f7:3e:c6:bd:ce:19:29:13:7d:c9:2a:ad:00:9f:10:30:27:1d: 9e:98:92:bf:f4:d0:94:1d:c3:28:1e:b6:5d:e4:d4:c2:87:1f: 68:48:f0:44:34:be:3e:ce:40:c7:7c:69:7c:e5:d4:c8:53:c7: 24:84:23:d4:c4:e3:22:56:ef:ec:3a:de:c1:9b:f6:01:61:82: 2e:58:1c:bf:9f:1f:4f:32:6b:4a:dd:89:fa:d5:0c:60:cb:1f: e8:65:84:30:cd:a9:7c:78:9c:dc:94:0b:b2:3a:ee:4a:3d:d8: 24:50:ca:89:96:28:00:2f:b2:e6:80:dd:88:7a:18:c2:a8:01: 0b:cb:55:52:e9:1c:87:ce:b0:0f:a5:b5:d9:3a:9b:4f:88:5b: e2:12:65:26:c2:35:d6:e2:53:91:d8:2c:d2:7a:14:85:32:36: 4c:3c:ef:2b:7a:5e:82:b1:71:e3:2c:ce:17:86:4b:90:ee:18: d9:e5:08:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjUxMTAyMjAwNzExWhcNMjUxMTA5MjAwNzExWjAYMRYwFAYD VQQDEw02OTA3YjllZi0yMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRzbvoPT0SynruWIWQ5kd4sVtVTrucDLuIqsFGZ+Ka9Mblwn9lnLzGQn2V61 IDJJtsaQYJpwJKzurrjT3zm7poMF8cJTTtD9c/o60s18zEy7HRKjYtsAdoYtwBSg 51k5T5kSSkpjRknRUtB4FFzQA1AzGShmb7gR9CMlHAY5l3V7vZyqvqkD0yZ8pbN3 JQZR+7YxP23cLfJWTJwRJBy3YNg6uepTOeGJuRFqXG/M+WNxbNtXJurchxY/UqHk w2Qj3gfBcJnb7qlFZRYNE0vWOeueSOZumcZZ9XP0pUF7zakcjk3KhMmfjbwp2IkE jWmzki7jtFEMJeuc1apvIh5G4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVroJcp cyrE105ATZP0qjqgLje1MB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKkSAJZGfIn1maOdcTwPjs5oeuh+oaAORWxONTAqfQHrCWAXERVga8 rfQR/zhhFZqm/T/46yscJUM05w7RVTngYwcGje8GHxX3Psa9zhkpE33JKq0AnxAw Jx2emJK/9NCUHcMoHrZd5NTChx9oSPBENL4+zkDHfGl85dTIU8ckhCPUxOMiVu/s Ot7Bm/YBYYIuWBy/nx9PMmtK3Yn61Qxgyx/oZYQwzal8eJzclAuyOu5KPdgkUMqJ ligAL7LmgN2IehjCqAELy1VS6RyHzrAPpbXZOptPiFviEmUmwjXW4lOR2CzSehSF MjZMPO8rel6CsXHjLM4XhkuQ7hjZ5Qh0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:42 2025 by rpki-client