$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: wjXWiKy2QOc2AVHLpMEJ2v1SLCKYk7BlmsuqB7Cdb4k= Subject key identifier: 7F:53:7B:A5:3F:B1:97:7F:83:AE:FE:61:D7:A4:A6:A9:89:E7:2A:F1 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E5D Signing time: Wed 22 Oct 2025 16:20:50 +0000 Manifest this update: Wed 22 Oct 2025 16:20:50 +0000 Manifest next update: Wed 29 Oct 2025 16:20:50 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: MziYLQY9kVDDq6nQCx/3jDU6OzglrT3yOeMRurfjTqg=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: ff+yRWpZGVwQu2/+ce6wo5vQ/4ykM8fNsCLeEkORRWk=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: XJKFjiP3tvsMhs6LmvK7B6XUUWrtRbubwh2zJ/jKEZ0=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: u7p+nz5w2jpHdQPlyKnwRdRnTG51oOxdLpI/jwgWuSM=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7980 (0x1f2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Oct 22 16:20:50 2025 GMT Not After : Oct 29 16:20:50 2025 GMT Subject: CN=68f90462-8d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:0d:74:8a:9f:e8:07:bd:18:98:7a:94:be: b9:02:e2:6f:6c:12:f4:75:fa:2d:1f:7c:ea:bc:ad: fe:da:07:82:38:3d:8e:ef:b8:4e:98:52:ea:93:3c: 54:da:1d:7d:a2:ba:0f:ac:fd:1a:44:ed:a7:7d:b8: 65:34:ec:03:30:5a:dc:d5:22:01:84:ca:f9:4b:43: 2a:ca:95:a0:c3:dd:88:15:26:c4:7a:2c:77:2f:99: 7d:45:9d:01:f5:d5:e5:04:78:ed:fb:d2:c5:ef:38: 5d:a0:ee:89:e4:62:dc:a9:32:36:be:ed:7f:ce:4a: 26:08:29:ec:8e:d6:27:f1:af:f4:71:42:0e:10:3c: 60:55:20:c3:45:08:c7:7b:8c:22:22:94:79:8e:21: 08:d3:3e:ae:60:b9:34:09:7c:44:e1:f1:36:ae:d4: 85:e3:fb:e5:25:e2:aa:43:96:61:f3:c5:90:3e:e5: cd:d4:16:a8:73:5b:f9:eb:a0:b4:f4:b4:f4:ac:bb: 9a:06:01:b2:33:7c:9c:5c:22:4b:df:d6:b9:b6:99: ee:76:97:91:08:7a:b0:07:23:de:cf:4a:ab:3c:b7: 7d:34:cc:fb:ef:cb:65:5d:18:42:b0:4a:43:50:cf: 1f:76:7d:20:f5:1e:fa:28:1a:07:97:80:3a:1c:5b: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:7B:A5:3F:B1:97:7F:83:AE:FE:61:D7:A4:A6:A9:89:E7:2A:F1 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f7:45:80:f2:a1:a9:a6:6c:f6:06:42:db:2e:5b:2b:ef:e7: ec:b5:9b:ac:c6:47:d1:54:ec:50:0c:e3:db:ca:eb:2f:25:81: c7:c2:d0:0c:98:cd:eb:80:cf:94:46:9d:5c:7d:95:4c:d2:9c: af:e0:dc:65:b1:06:14:80:c4:63:d6:0f:18:f1:92:e9:3b:ba: 36:1a:a2:8d:be:7e:5e:55:05:4f:2d:db:b2:da:43:40:25:70: 32:2a:48:25:5d:31:f2:fe:9e:4f:91:be:eb:4e:8e:ee:cf:b1: 40:35:22:a6:59:20:31:8a:03:7f:ff:a3:3e:9e:b6:9f:d3:1b: 5b:1b:8d:00:3f:68:a3:37:ac:93:f0:b6:48:ce:6b:94:00:4c: 15:d9:49:58:d9:ac:86:12:fe:0c:c5:04:15:0f:62:a6:c2:92: 5a:dc:2a:29:d7:ec:59:cc:25:e9:fc:26:21:78:ca:c0:69:32: 33:50:55:1c:c3:b6:0b:a1:df:bb:2b:0e:c7:2f:c0:86:2d:ce: 72:36:4b:7a:0b:5f:03:81:35:b8:33:97:8b:f6:c7:02:00:c9: 97:f6:74:4f:28:61:48:06:a8:ec:11:f0:b0:84:8d:05:02:2a: 1a:08:02:9b:97:16:a4:ed:b2:41:48:0b:e9:f1:06:32:48:df: 03:e8:ec:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMDIyMTYyMDUwWhcNMjUxMDI5MTYyMDUwWjAYMRYwFAYD VQQDEw02OGY5MDQ2Mi04ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3wNdIqf6Ae9GJh6lL65AuJvbBL0dfotH3zqvK3+2geCOD2O77hOmFLqkzxU 2h19oroPrP0aRO2nfbhlNOwDMFrc1SIBhMr5S0MqypWgw92IFSbEeix3L5l9RZ0B 9dXlBHjt+9LF7zhdoO6J5GLcqTI2vu1/zkomCCnsjtYn8a/0cUIOEDxgVSDDRQjH e4wiIpR5jiEI0z6uYLk0CXxE4fE2rtSF4/vlJeKqQ5Zh88WQPuXN1Baoc1v566C0 9LT0rLuaBgGyM3ycXCJL39a5tpnudpeRCHqwByPez0qrPLd9NMz778tlXRhCsEpD UM8fdn0g9R76KBoHl4A6HFt4iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9Te6U/ sZd/g67+YdekpqmJ5yrxMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr90WA8qGppmz2BkLbLlsr7+fstZusxkfRVOxQDOPbyusvJYHHwtAM mM3rgM+URp1cfZVM0pyv4NxlsQYUgMRj1g8Y8ZLpO7o2GqKNvn5eVQVPLduy2kNA JXAyKkglXTHy/p5Pkb7rTo7uz7FANSKmWSAxigN//6M+nraf0xtbG40AP2ijN6yT 8LZIzmuUAEwV2UlY2ayGEv4MxQQVD2KmwpJa3Cop1+xZzCXp/CYheMrAaTIzUFUc w7YLod+7Kw7HL8CGLc5yNkt6C18DgTW4M5eL9scCAMmX9nRPKGFIBqjsEfCwhI0F AioaCAKblxak7bJBSAvp8QYySN8D6OxH -----END CERTIFICATE-----Generated at Thu Oct 23 05:55:51 2025 by rpki-client