$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: bWphbyd0sAnhLvGlY/XSRIhxOVb72XzdWyuPvGC7JiU= Subject key identifier: 00:45:91:CC:01:D4:2A:52:AF:43:4A:AD:D0:79:AF:F3:9C:4D:DC:BD Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: 0100 Signing time: Wed 05 Nov 2025 05:15:31 +0000 Manifest this update: Wed 05 Nov 2025 05:15:31 +0000 Manifest next update: Wed 12 Nov 2025 05:15:31 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: jLMsR/7OPR6eTdA1eENe0Xzz2SNtQnqj4mjb6uHRtjY=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Nov 5 05:15:31 2025 GMT Not After : Nov 12 05:15:31 2025 GMT Subject: CN=690add73-cc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:69:8f:39:07:6a:1a:6f:c4:3d:e5:54:b2: b7:71:15:82:4f:fe:33:a9:4e:01:ed:62:c3:b8:13: 66:ed:30:4e:e5:35:3a:be:5f:5c:fe:db:4c:e8:9d: 83:f7:a2:1b:0b:ee:84:4d:b0:d7:a3:29:f3:55:7c: a5:f2:88:75:1b:6f:f5:67:bf:c6:a8:7f:39:dd:5d: 45:4f:5e:f0:cb:45:9f:02:60:7c:a6:d4:d7:e4:f4: 22:cf:b6:a8:73:99:24:8c:f8:5e:7d:18:51:69:e6: 59:35:76:2e:cf:0e:1b:38:a5:5b:76:d0:20:6d:17: 67:6d:cc:cc:19:2d:f5:70:11:2a:05:dc:d3:c4:a1: f9:1a:43:41:81:7e:78:5c:e9:2d:b2:76:17:50:e7: 69:56:92:bd:7b:e1:a3:fe:1d:a5:db:5c:d8:97:65: 08:55:0e:c6:c7:11:17:fe:5a:17:6b:2a:7e:4d:53: b3:4f:aa:35:f4:59:2a:46:be:b4:11:35:fc:eb:f6: d2:a5:8b:45:d2:88:bc:87:25:4e:2c:d2:d1:b4:ca: 7d:9e:26:24:1e:03:4f:97:8a:b3:9d:65:9c:3f:89: 51:47:df:ea:71:b9:3a:23:c1:2e:26:08:5a:1f:70: 67:8a:00:47:e7:46:d8:17:f9:17:05:0a:16:d9:89: 06:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:45:91:CC:01:D4:2A:52:AF:43:4A:AD:D0:79:AF:F3:9C:4D:DC:BD X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:1b:3b:05:0b:e5:48:d3:8f:f7:98:71:5b:d6:83:c5:c6:bb: 45:af:3f:77:c2:69:20:b9:9d:e9:0e:75:74:28:23:81:eb:b8: 5b:4e:b8:c0:16:de:56:79:d9:02:a0:ba:b9:87:37:4e:08:4e: f6:96:91:b4:dc:5d:cc:50:2f:22:e5:b4:68:21:c2:c0:5f:bd: 0d:75:66:83:d9:9a:7d:c0:af:eb:ca:c3:d1:36:6f:68:ee:d4: 7b:b1:7d:57:2a:9b:ce:7a:21:d7:a6:a5:f6:68:98:08:08:fe: a6:c1:6d:64:6d:12:a2:8a:37:92:51:d6:df:8b:2a:d4:23:9e: 6b:d1:6f:98:c7:60:57:e7:53:62:ee:1f:bc:2c:76:f1:82:13: 7f:df:e2:ad:4b:42:0d:6b:f8:81:39:d6:59:3e:19:b7:76:df: da:88:6b:7c:fd:33:8f:42:02:fb:06:e0:e5:e9:9d:9a:89:c5: 39:55:01:05:69:d1:e6:7a:cf:e4:48:4b:2c:a6:0f:07:4c:bd: a5:46:5a:33:7c:c9:93:ca:2c:85:21:0e:19:13:f3:e1:86:86: 97:a9:85:9e:ca:eb:0c:ba:e0:d4:a7:7a:7a:3c:7a:f8:17:50: 2a:2f:7b:47:94:72:1c:1c:9a:63:92:1f:cc:1e:42:8a:b5:7f: 9f:12:be:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjUxMTA1MDUxNTMxWhcNMjUxMTEyMDUxNTMxWjAYMRYwFAYD VQQDEw02OTBhZGQ3My1jYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7dpjzkHahpvxD3lVLK3cRWCT/4zqU4B7WLDuBNm7TBO5TU6vl9c/ttM6J2D 96IbC+6ETbDXoynzVXyl8oh1G2/1Z7/GqH853V1FT17wy0WfAmB8ptTX5PQiz7ao c5kkjPhefRhRaeZZNXYuzw4bOKVbdtAgbRdnbczMGS31cBEqBdzTxKH5GkNBgX54 XOktsnYXUOdpVpK9e+Gj/h2l21zYl2UIVQ7GxxEX/loXayp+TVOzT6o19FkqRr60 ETX86/bSpYtF0oi8hyVOLNLRtMp9niYkHgNPl4qznWWcP4lRR9/qcbk6I8EuJgha H3BnigBH50bYF/kXBQoW2YkGiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABFkcwB 1CpSr0NKrdB5r/OcTdy9MB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0GzsFC+VI04/3mHFb1oPFxrtFrz93wmkguZ3pDnV0KCOB67hbTrjA Ft5WedkCoLq5hzdOCE72lpG03F3MUC8i5bRoIcLAX70NdWaD2Zp9wK/rysPRNm9o 7tR7sX1XKpvOeiHXpqX2aJgICP6mwW1kbRKiijeSUdbfiyrUI55r0W+Yx2BX51Ni 7h+8LHbxghN/3+KtS0INa/iBOdZZPhm3dt/aiGt8/TOPQgL7BuDl6Z2aicU5VQEF adHmes/kSEsspg8HTL2lRlozfMmTyiyFIQ4ZE/PhhoaXqYWeyusMuuDUp3p6PHr4 F1AqL3tHlHIcHJpjkh/MHkKKtX+fEr55 -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:40 2025 by rpki-client