$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft File: npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json) Hash identifier: m3r6OiUF9Ou1z3kIdj52jkgz1c7QP3eOzNSgNmBsikc= Subject key identifier: 52:77:1A:F2:46:30:20:85:E0:2A:4B:E1:BB:1B:D1:43:84:38:51:A3 Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF Certificate issuer: /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft Manifest number: 09 Signing time: Sun 19 Oct 2025 11:39:57 +0000 Manifest this update: Sun 19 Oct 2025 11:39:57 +0000 Manifest next update: Sun 26 Oct 2025 11:39:57 +0000 Files and hashes: 1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: zCDE3gDwMQPexOH6RBx3KPAw68VG7sqhZXVOtt6Fqtk=) 2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: UIqdJutuJDlhfZ5sjZNc55vuXujNjCHWgG438Kpp1wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Validity Not Before: Oct 19 11:39:57 2025 GMT Not After : Oct 26 11:39:57 2025 GMT Subject: CN=68f4ce0d-3854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:4e:d3:37:fd:64:44:d8:d7:5e:1f:1c:32: 0b:48:7b:02:e9:48:6d:a0:15:07:c1:c8:41:0c:7d: 4e:24:48:09:8c:54:bb:13:79:27:a1:b8:71:33:55: 44:65:fc:8d:e3:6e:2c:7f:21:3d:59:a6:fd:9a:e7: 84:8e:d0:24:d8:9c:15:fd:ca:06:ee:5d:f7:cc:f3: 2b:3b:40:dc:18:f9:47:7c:e7:9c:25:a8:ad:ce:17: c7:cb:51:9c:71:85:29:17:c8:88:b3:39:3a:af:4e: 1c:81:73:ab:a0:e1:fc:ef:5d:2c:6d:83:32:bd:a1: 5f:75:45:8d:42:14:f9:3b:a1:c3:44:77:21:5e:a6: 1b:bd:e9:2d:c0:5a:7e:30:0e:c2:3a:04:54:a2:83: f6:71:a1:63:e7:2a:8a:57:5b:e0:81:cb:bb:ad:65: bf:5a:3f:e6:fb:cf:7d:f3:d8:f2:73:2d:91:c7:13: 02:ee:62:35:21:49:4d:42:c5:fb:bd:c5:cf:35:65: 69:30:bc:7e:35:bd:4d:d0:44:1f:43:d6:3a:fc:52: ed:3f:17:67:f1:02:d6:bf:47:94:03:20:5c:c7:45: de:fd:31:bc:00:34:15:6f:ec:5a:76:f7:9c:63:ae: 42:88:b5:7b:8f:a6:1a:03:19:4d:e6:27:ec:58:11: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:77:1A:F2:46:30:20:85:E0:2A:4B:E1:BB:1B:D1:43:84:38:51:A3 X509v3 Authority Key Identifier: keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:af:a2:f9:19:fd:cd:a8:bc:cb:4e:43:a8:7c:5b:ef:77:4d: ab:df:af:6f:91:73:da:8f:00:de:6b:91:5b:35:62:46:d4:62: b7:a3:14:b9:65:9c:56:05:db:27:d7:57:ce:bc:dd:11:43:1d: 04:29:50:25:2d:91:81:bd:c4:c5:1a:6e:86:43:57:bf:4b:4b: db:33:1b:63:d5:13:be:b2:d9:6b:d1:bc:e1:61:cb:39:4c:7f: 8a:1c:7a:2e:2a:5d:13:39:e7:64:23:49:37:a5:34:bf:aa:f9: 98:1c:41:6c:81:8f:ef:29:8f:78:7d:de:06:0c:85:da:4d:08: 0d:e0:f2:1b:91:02:c3:67:d1:20:27:79:af:62:3f:23:fb:3e: bc:fe:2e:4b:64:98:c8:62:dd:ad:eb:98:75:94:dd:a0:99:7a: 4d:b3:5a:e5:6f:fd:36:99:ba:ce:8d:55:e7:d7:f3:23:92:b6: 13:a0:2a:0c:e5:2b:36:98:ce:62:2d:64:15:89:5b:4f:ca:a0: 73:f7:3d:75:4c:a7:42:25:df:a4:87:bb:7a:49:a7:b3:d1:36: 62:18:2a:ed:46:24:ba:45:e0:dd:76:35:87:af:ca:da:4e:58: f0:36:81:82:82:d4:c2:ea:83:08:59:9c:1d:c5:ed:c1:1c:63: 3f:c4:24:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJBOTExMC8GA1UEBRMoOUU5Q0M4MEU1QTk4NEMxQTFGRDQxQTFEMzE0NjkyNjBB MjEyREFERjAeFw0yNTEwMTkxMTM5NTdaFw0yNTEwMjYxMTM5NTdaMBgxFjAUBgNV BAMTDTY4ZjRjZTBkLTM4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcLE7TN/1kRNjXXh8cMgtIewLpSG2gFQfByEEMfU4kSAmMVLsTeSehuHEzVURl /I3jbix/IT1Zpv2a54SO0CTYnBX9ygbuXffM8ys7QNwY+Ud855wlqK3OF8fLUZxx hSkXyIizOTqvThyBc6ug4fzvXSxtgzK9oV91RY1CFPk7ocNEdyFephu96S3AWn4w DsI6BFSig/ZxoWPnKopXW+CBy7utZb9aP+b7z33z2PJzLZHHEwLuYjUhSU1Cxfu9 xc81ZWkwvH41vU3QRB9D1jr8Uu0/F2fxAta/R5QDIFzHRd79MbwANBVv7Fp295xj rkKItXuPphoDGU3mJ+xYEVz3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUnca8kYw IIXgKkvhuxvRQ4Q4UaMwHwYDVR0jBBgwFoAUnpzIDlqYTBof1BodMUaSYKIS2t8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzYyMDk3RTg0QTc3 NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJvZjFCb2RNVWFTWUtJUzJ0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnB6SURscVlUQm9mMUJvZE1VYVNZS0lTMnQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkE5LzYyMDk3RTg0QTc3NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJv ZjFCb2RNVWFTWUtJUzJ0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWvovkZ/c2ovMtOQ6h8W+93Tavfr2+Rc9qPAN5rkVs1YkbUYrejFLll nFYF2yfXV8683RFDHQQpUCUtkYG9xMUaboZDV79LS9szG2PVE76y2WvRvOFhyzlM f4ocei4qXRM552QjSTelNL+q+ZgcQWyBj+8pj3h93gYMhdpNCA3g8huRAsNn0SAn ea9iPyP7Prz+LktkmMhi3a3rmHWU3aCZek2zWuVv/TaZus6NVefX8yOSthOgKgzl KzaYzmItZBWJW0/KoHP3PXVMp0Il36SHu3pJp7PRNmIYKu1GJLpF4N12NYevytpO WPA2gYKC1MLqgwhZnB3F7cEcYz/EJFI= -----END CERTIFICATE-----Generated at Sun Oct 19 14:22:43 2025 by rpki-client