$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: 9H88G6dj4NbG4pAMc+bX+NXIJt/WBKLVm88wf0iQtLs= Subject key identifier: 42:91:6B:CA:88:6C:E6:85:06:FD:9F:F5:F2:59:68:AB:14:84:9D:95 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 0127 Signing time: Sat 25 Oct 2025 08:35:02 +0000 Manifest this update: Sat 25 Oct 2025 08:35:01 +0000 Manifest next update: Sat 01 Nov 2025 08:35:01 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: /PlHY3VL26LZf8YDebDAwiTXK7KeLOtbSJRAWslvtx8=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: 0dsUVKxnnglNpZZhhpBErhWI1oXUDVFF4BUubObFWiM=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: StZAIMtKvc+DvwzgQ26IlnkW4j9VonIWzSJOuU7IXLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 08:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Oct 25 08:35:01 2025 GMT Not After : Nov 1 08:35:01 2025 GMT Subject: CN=68fc8bb5-db8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:0f:a3:c7:93:29:a4:6f:84:f6:9a:c8:e4: 43:af:b3:51:87:e6:45:89:ae:ad:39:0b:57:8e:bc: 46:4c:b5:b4:66:20:0c:1a:88:1a:d1:de:be:3a:0a: 1b:84:b3:c4:d6:90:9e:02:d8:2e:ea:6b:ee:b2:fd: 23:62:ae:ad:11:4e:6c:d0:62:04:87:4d:11:71:d1: 63:44:91:6e:a2:a6:7a:9e:09:11:e2:fa:91:c9:23: f8:7a:10:17:d0:43:94:c3:8c:7c:d0:2a:b3:9d:e1: 70:67:e0:4b:95:49:d0:b9:90:79:a7:ee:22:be:d7: 4b:75:50:4e:35:5c:07:db:67:5e:f7:bc:26:9a:79: a0:73:d1:52:1f:bd:98:28:dd:be:06:ee:f2:5f:8c: b0:f3:71:73:d2:6e:b2:9d:2a:64:17:90:d3:40:35: d5:24:f0:bc:f2:40:0b:f4:37:72:24:f9:bb:a1:e7: f1:08:9d:a4:1c:ba:1b:37:21:26:a0:43:35:e5:fe: 4c:98:e9:d3:4f:fe:d9:be:7c:2a:2e:f5:6d:69:f0: 01:f1:78:d2:22:03:c8:c2:01:b1:78:79:56:3f:2a: d5:53:97:12:3f:84:38:a2:e0:05:0a:55:2e:50:0e: 2c:94:17:63:37:8a:9a:1e:7c:bc:ba:c8:ad:b6:4f: 5b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:91:6B:CA:88:6C:E6:85:06:FD:9F:F5:F2:59:68:AB:14:84:9D:95 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:07:22:9d:e5:79:74:27:56:e9:6b:53:03:bd:91:0b:71:63: d9:b3:ad:d7:3d:16:0d:54:9d:c8:55:1d:49:a6:39:62:1a:fe: aa:54:7b:fc:63:99:bc:31:1e:99:bd:f0:70:cc:ef:9e:95:44: 0c:42:a3:3e:f7:38:20:4c:a2:79:e5:f5:1b:59:0c:4d:7e:e6: 1c:12:cf:ba:4c:5f:39:f4:17:31:1b:f3:27:30:64:19:28:ac: a9:65:65:61:80:56:00:4a:4a:5e:5b:cb:e0:fd:f4:bb:3c:9f: ef:05:8d:66:01:5b:20:3c:8b:d7:b4:a2:2b:01:15:b5:4d:d6: fb:8e:4c:f8:7b:c5:a8:53:07:ba:30:46:ac:a5:8c:9d:ea:97: 61:43:eb:a3:d1:64:23:92:ad:e9:a1:16:3c:8f:18:32:02:b1: a6:b5:65:8c:f6:7c:70:9e:ab:6d:bd:76:01:57:b9:b1:2e:0b: 86:2a:52:c8:2e:49:d5:94:53:0e:9c:93:42:86:7a:2f:fb:77: 58:44:ad:e5:57:7a:35:50:de:b0:fd:f1:75:f6:8c:d7:ca:3c: b7:55:e5:83:1d:ab:0f:fb:55:da:da:3d:c8:61:b2:e5:70:8c: 05:4a:d5:f7:eb:f4:9f:37:fd:47:0e:df:a4:d7:26:2b:5a:9f: 7f:0e:12:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjUxMDI1MDgzNTAxWhcNMjUxMTAxMDgzNTAxWjAYMRYwFAYD VQQDEw02OGZjOGJiNS1kYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKkPo8eTKaRvhPaayORDr7NRh+ZFia6tOQtXjrxGTLW0ZiAMGoga0d6+Ogob hLPE1pCeAtgu6mvusv0jYq6tEU5s0GIEh00RcdFjRJFuoqZ6ngkR4vqRySP4ehAX 0EOUw4x80CqzneFwZ+BLlUnQuZB5p+4ivtdLdVBONVwH22de97wmmnmgc9FSH72Y KN2+Bu7yX4yw83Fz0m6ynSpkF5DTQDXVJPC88kAL9DdyJPm7oefxCJ2kHLobNyEm oEM15f5MmOnTT/7ZvnwqLvVtafAB8XjSIgPIwgGxeHlWPyrVU5cSP4Q4ouAFClUu UA4slBdjN4qaHny8usittk9bEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKRa8qI bOaFBv2f9fJZaKsUhJ2VMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0ByKd5Xl0J1bpa1MDvZELcWPZs63XPRYNVJ3IVR1JpjliGv6qVHv8 Y5m8MR6ZvfBwzO+elUQMQqM+9zggTKJ55fUbWQxNfuYcEs+6TF859BcxG/MnMGQZ KKypZWVhgFYASkpeW8vg/fS7PJ/vBY1mAVsgPIvXtKIrARW1Tdb7jkz4e8WoUwe6 MEaspYyd6pdhQ+uj0WQjkq3poRY8jxgyArGmtWWM9nxwnqttvXYBV7mxLguGKlLI LknVlFMOnJNChnov+3dYRK3lV3o1UN6w/fF19ozXyjy3VeWDHasP+1Xa2j3IYbLl cIwFStX36/SfN/1HDt+k1yYrWp9/DhJf -----END CERTIFICATE-----Generated at Sat Oct 25 22:13:34 2025 by rpki-client