$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: NrrrcMIBYsa+W46eAvGrE17OS14wJgfUvELxdRL5GQ8= Subject key identifier: FC:88:15:48:38:F8:B7:58:EB:0F:40:50:8C:FA:98:30:96:2C:29:74 Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 058F Signing time: Mon 13 Oct 2025 01:01:54 +0000 Manifest this update: Mon 13 Oct 2025 01:01:54 +0000 Manifest next update: Mon 20 Oct 2025 01:01:54 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: lzkzGgVe4gnFpzxRKvA/VNyfxdntMgDtpSsgRO5QgzY=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: YaJuN/RbQ16mCRlQ6uaYQckU6ARLSth70ryswPVSLNI=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: TsA8sZCq2fj3T+1DdYOMp3tDHwls5Yd56F+yj6fbzmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Oct 13 01:01:54 2025 GMT Not After : Oct 20 01:01:54 2025 GMT Subject: CN=68ec4f82-4514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:c3:0e:06:ce:b8:c9:fa:9f:91:22:9b:2a: 85:5c:1f:86:3f:5c:28:5f:f5:c4:55:60:d5:bf:4f: d4:df:82:7b:2a:91:68:46:3f:84:8e:c3:25:fa:df: 84:45:85:f5:05:e8:cb:12:fe:af:53:f4:a9:51:ae: 86:27:46:35:72:a1:be:a6:00:59:ff:68:0d:42:fa: c4:c8:8d:98:03:3b:f2:7e:55:57:68:88:b4:29:cc: aa:ad:36:cf:41:2c:a0:14:a1:90:bc:da:30:ef:cb: c9:c8:d2:bb:e5:4e:29:9c:0e:80:86:8f:7e:c9:9a: 88:fc:8b:6f:29:75:05:f8:b1:05:7c:b5:d7:bb:0d: b8:4b:36:c3:14:23:d0:1d:cd:b8:09:16:77:70:92: aa:bb:81:60:bc:e6:3c:7a:dd:9f:04:f3:b0:f0:d3: ab:3f:2f:2c:58:69:d6:ff:3e:1d:a7:35:37:61:3b: 2d:6e:89:6c:1d:34:40:20:e0:92:3b:bb:99:b9:21: 19:dd:d1:81:39:25:6f:63:90:44:2e:7d:4a:0c:4f: 3d:96:e8:1b:f8:5f:1a:93:4f:22:ab:90:cf:a3:5d: 79:2e:55:6f:53:5b:ae:fc:e8:c6:d1:41:5f:c2:45: 05:31:6e:f6:af:8d:ea:d9:10:d6:a2:88:ed:a0:68: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:88:15:48:38:F8:B7:58:EB:0F:40:50:8C:FA:98:30:96:2C:29:74 X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:47:8c:29:d3:cf:fd:ec:97:b8:ef:75:db:6a:9c:d4:3a: f1:6c:a7:f4:02:b7:04:ba:f1:54:e6:8c:03:55:20:6d:c8:e8: bf:52:89:ff:de:90:45:21:60:21:bf:67:bc:f4:2e:49:1c:d2: 85:41:43:46:c9:39:fa:1e:f5:d7:0e:20:53:c1:9d:81:0c:6e: c0:ec:78:1c:79:61:c0:b0:a8:62:a8:35:0d:02:8a:06:54:07: 52:db:88:a3:2a:cc:ba:39:2e:3d:76:fa:b9:74:ca:7e:90:92: 15:d4:13:6b:6c:74:ce:b5:6b:b5:1b:b7:cc:9a:79:74:dd:f3: 2f:ef:ae:1e:c4:64:11:f4:51:c5:61:f2:9f:cc:e1:47:15:38: 5e:b0:28:91:24:89:15:b5:f5:07:a7:37:6a:56:d8:fa:80:8a: c5:fb:58:2a:6e:ac:09:93:16:f9:7a:7c:a7:d8:50:46:d3:8e: 77:c6:d5:fd:54:09:36:e0:d2:47:f1:79:b1:c8:22:35:88:51: 1a:57:73:97:18:51:90:f9:ba:11:a5:36:76:bd:5d:7e:84:0f: 0f:9b:9a:16:ca:f4:53:22:b0:cd:18:a3:53:21:10:12:1e:60: e6:48:74:93:87:bf:00:a5:40:3c:ae:21:71:21:f8:d7:77:60: c0:a1:c1:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjUxMDEzMDEwMTU0WhcNMjUxMDIwMDEwMTU0WjAYMRYwFAYD VQQDEw02OGVjNGY4Mi00NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk7DDgbOuMn6n5EimyqFXB+GP1woX/XEVWDVv0/U34J7KpFoRj+EjsMl+t+E RYX1BejLEv6vU/SpUa6GJ0Y1cqG+pgBZ/2gNQvrEyI2YAzvyflVXaIi0KcyqrTbP QSygFKGQvNow78vJyNK75U4pnA6Aho9+yZqI/ItvKXUF+LEFfLXXuw24SzbDFCPQ Hc24CRZ3cJKqu4FgvOY8et2fBPOw8NOrPy8sWGnW/z4dpzU3YTstbolsHTRAIOCS O7uZuSEZ3dGBOSVvY5BELn1KDE89lugb+F8ak08iq5DPo115LlVvU1uu/OjG0UFf wkUFMW72r43q2RDWoojtoGhvVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyIFUg4 +LdY6w9AUIz6mDCWLCl0MB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsN0eMKdPP/eyXuO9122qc1DrxbKf0ArcEuvFU5owDVSBtyOi/Uon/ 3pBFIWAhv2e89C5JHNKFQUNGyTn6HvXXDiBTwZ2BDG7A7HgceWHAsKhiqDUNAooG VAdS24ijKsy6OS49dvq5dMp+kJIV1BNrbHTOtWu1G7fMmnl03fMv764exGQR9FHF YfKfzOFHFThesCiRJIkVtfUHpzdqVtj6gIrF+1gqbqwJkxb5enyn2FBG0453xtX9 VAk24NJH8XmxyCI1iFEaV3OXGFGQ+boRpTZ2vV1+hA8Pm5oWyvRTIrDNGKNTIRAS HmDmSHSTh78ApUA8riFxIfjXd2DAocFa -----END CERTIFICATE-----Generated at Tue Oct 14 07:51:51 2025 by rpki-client