$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: 07wnX3kqGXR79th+ppE2XFNlshbsHnoQy0kKZGlzUDM= Subject key identifier: 46:A1:45:E0:57:B5:BF:89:A2:5E:6F:CE:E5:68:48:E4:33:01:9C:DE Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2A55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2A4A Signing time: Wed 22 Oct 2025 14:24:35 +0000 Manifest this update: Wed 22 Oct 2025 14:24:35 +0000 Manifest next update: Wed 29 Oct 2025 14:24:35 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: Q9Hz8BI/4P4DvkRTg252ISH7S42p2Gt3GvI8u2fhpdw=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: symelOI4KiPwqS+zxOG2abXkQkOu/9Ecrvxkqaxc9Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10837 (0x2a55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Oct 22 14:24:35 2025 GMT Not After : Oct 29 14:24:35 2025 GMT Subject: CN=68f8e923-8d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:a3:29:12:be:65:58:00:5c:3a:20:6e:01: 57:9e:fa:09:06:8f:9d:54:fd:fc:bf:14:11:bc:c3: d8:d3:5f:fe:21:93:f1:d7:f3:ee:79:6d:0a:70:8b: 44:10:16:c2:88:a5:ae:00:7c:df:39:bc:e4:1a:a7: 79:a5:56:a0:33:aa:d5:87:aa:62:da:2f:52:6b:2a: 27:ec:db:5f:e0:69:ee:6c:e8:f7:60:86:50:84:87: b7:fe:6e:54:d9:d3:c3:39:0e:4d:a4:73:02:f9:2e: 96:90:6f:f0:f5:c0:db:96:87:79:2f:e8:01:dc:de: dc:38:1c:ab:87:77:7c:ea:65:89:52:cf:ae:f9:11: f2:13:cf:ee:38:cd:8d:3f:26:1e:b9:76:f5:9f:db: 84:38:0e:c3:2d:33:f8:e7:45:7d:91:df:09:e5:33: e1:31:7b:00:53:e4:92:2d:40:8e:0f:b9:0d:27:3d: c7:ef:a3:bf:88:38:cd:e0:fb:0c:92:55:7d:78:99: e3:db:2e:42:d8:f3:82:39:ab:f5:fa:52:e8:77:64: 22:95:dd:37:d6:e4:44:04:31:71:f1:17:42:1d:b7: 68:57:4e:88:4c:53:b0:15:3e:fe:17:f1:b1:6d:c1: bb:03:ca:89:54:55:3d:fa:a2:cc:4f:d6:f7:64:d9: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A1:45:E0:57:B5:BF:89:A2:5E:6F:CE:E5:68:48:E4:33:01:9C:DE X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:69:09:28:97:46:d8:21:69:38:0c:90:11:10:bd:f1:5c:6f: 38:0e:ce:49:34:48:4f:bc:3c:cc:ff:17:c3:40:08:75:b6:6a: b6:2a:d0:0f:12:41:2a:7b:50:cc:36:4f:f8:23:6b:e4:cd:70: 11:bb:84:a2:c4:2e:55:29:29:c8:26:e5:8e:39:41:9b:6f:81: dd:2e:7a:87:01:3d:1e:8c:63:85:cc:f4:73:ca:57:b9:57:f1: 1e:93:c5:b3:bb:13:2d:14:27:ab:77:00:18:77:6c:74:7c:08: c5:fa:03:2e:5a:c7:c3:cd:64:d5:d4:b3:b0:9e:bb:4c:4c:25: fc:3c:6c:49:43:ca:02:8b:ee:1c:d0:e7:d7:f9:eb:e4:09:15: 8c:c6:19:6d:dc:84:c2:2a:b1:cc:f0:5a:97:87:da:d2:e2:0d: da:ca:72:a9:41:f9:2b:dd:22:12:b0:c1:3d:67:6e:a8:b9:9c: 76:5e:5a:f5:55:a8:d1:9f:5d:d7:f8:96:69:0a:32:46:ce:84: c8:b2:ef:ec:9c:bc:a0:12:1f:c4:85:3f:10:72:7e:b9:e7:75: 37:1d:a5:69:e4:12:15:18:d3:ea:7a:f7:85:76:c9:2b:5a:0c: d6:6d:09:f4:4f:29:93:8e:b6:67:45:c4:7e:22:3b:6e:f0:81: 92:1c:c5:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjUxMDIyMTQyNDM1WhcNMjUxMDI5MTQyNDM1WjAYMRYwFAYD VQQDEw02OGY4ZTkyMy04ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKijKRK+ZVgAXDogbgFXnvoJBo+dVP38vxQRvMPY01/+IZPx1/PueW0KcItE EBbCiKWuAHzfObzkGqd5pVagM6rVh6pi2i9Sayon7Ntf4GnubOj3YIZQhIe3/m5U 2dPDOQ5NpHMC+S6WkG/w9cDblod5L+gB3N7cOByrh3d86mWJUs+u+RHyE8/uOM2N PyYeuXb1n9uEOA7DLTP450V9kd8J5TPhMXsAU+SSLUCOD7kNJz3H76O/iDjN4PsM klV9eJnj2y5C2POCOav1+lLod2Qild031uREBDFx8RdCHbdoV06ITFOwFT7+F/Gx bcG7A8qJVFU9+qLMT9b3ZNljewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEahReBX tb+Jol5vzuVoSOQzAZzeMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRaQkol0bYIWk4DJAREL3xXG84Ds5JNEhPvDzM/xfDQAh1tmq2KtAP EkEqe1DMNk/4I2vkzXARu4SixC5VKSnIJuWOOUGbb4HdLnqHAT0ejGOFzPRzyle5 V/Eek8WzuxMtFCerdwAYd2x0fAjF+gMuWsfDzWTV1LOwnrtMTCX8PGxJQ8oCi+4c 0OfX+evkCRWMxhlt3ITCKrHM8FqXh9rS4g3aynKpQfkr3SISsME9Z26ouZx2Xlr1 VajRn13X+JZpCjJGzoTIsu/snLygEh/EhT8Qcn6553U3HaVp5BIVGNPqeveFdskr WgzWbQn0TymTjrZnRcR+Ijtu8IGSHMXo -----END CERTIFICATE-----Generated at Thu Oct 23 20:12:24 2025 by rpki-client