$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: 2y9F8ZiiJ1h57smBj7ucVWUCCVV9pzCsTA0rJXGICPM= Subject key identifier: 05:D0:82:53:B6:41:95:DA:9A:7F:7B:90:FA:55:7C:16:2A:97:D8:4E Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 018F Signing time: Mon 03 Nov 2025 03:34:45 +0000 Manifest this update: Mon 03 Nov 2025 03:34:45 +0000 Manifest next update: Mon 10 Nov 2025 03:34:45 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: cegyAN70AsMyHzgenlcDognnmf7YyDRk2dvzS07gUZ0=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: Yi/JWAwchMRWPqpLJdHipgAcW0bADt8JjtD1zk/5zPg=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: 6zc+rZhJnF4vpcd6GmjdYSDq7wBWKRzyhnCBcHAGEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Nov 3 03:34:45 2025 GMT Not After : Nov 10 03:34:45 2025 GMT Subject: CN=690822d5-e73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:da:d9:65:6f:bc:eb:d5:f1:51:c6:df:f5: 0d:73:81:76:40:99:4e:42:0f:15:6a:7c:9c:e4:ea: 1a:13:95:de:86:60:68:b1:cb:0d:99:64:95:2f:91: bf:ef:0c:e3:36:ce:10:73:60:08:c6:23:ae:d2:ec: ae:5e:b9:a2:ca:cc:4d:eb:0d:e4:ef:a4:53:17:1e: ba:b6:9b:03:13:33:ba:8b:3e:48:c1:da:fd:d8:7f: fb:cc:12:1a:0e:f4:46:ec:b8:30:c5:c2:dc:e3:20: f6:28:59:1e:a5:63:f4:52:88:b9:bf:cb:21:fb:46: 81:a2:03:85:3b:b6:60:20:3f:fb:6e:b3:df:2c:7a: 2c:95:d8:c5:60:83:b4:79:55:34:dd:8e:3c:e2:e7: 92:af:67:0b:ef:cd:83:86:17:6c:65:30:07:07:a4: 78:57:8f:e0:ec:25:67:34:e1:0d:6a:cd:4c:49:63: 66:9a:51:cd:d2:da:4a:ea:2b:78:92:09:6f:11:5d: b4:01:e2:90:78:f0:3b:15:1b:e5:19:6b:4d:44:49: 1e:f5:36:83:e9:d8:b4:d5:4d:4a:36:25:15:e6:00: 1c:bb:2a:f1:5f:03:c2:40:20:38:d0:b7:50:4e:55: ae:40:77:b6:38:8d:ab:d2:8a:9f:75:e5:c2:3c:94: ab:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D0:82:53:B6:41:95:DA:9A:7F:7B:90:FA:55:7C:16:2A:97:D8:4E X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:07:68:48:6b:54:28:60:18:a6:5b:2d:cf:6a:7a:dc:ca:6b: 33:83:7c:b6:e5:6f:b2:4e:8d:cf:5c:fc:07:28:9d:41:f1:ea: 94:5a:c4:92:bc:9c:b8:ea:6a:7c:e7:ee:02:d3:c4:59:b0:9d: 38:66:43:0f:26:73:45:c6:90:df:69:41:e7:49:45:15:3d:4c: 0b:68:b7:6d:31:d4:26:3a:f1:98:da:c2:81:dd:c7:ab:d6:ff: c2:f3:72:b1:28:32:e0:71:2a:3d:8f:99:a8:e5:73:13:c5:6d: d8:b1:1a:63:42:7e:a0:72:2e:11:b2:36:f1:eb:0a:3b:1a:6c: f1:e5:c8:87:51:c1:98:c1:4f:b7:ae:d8:f1:47:32:3e:cb:f1: 87:ed:cb:ee:d8:71:b0:f1:58:ef:b6:00:82:86:8b:24:9c:10: 15:8c:72:fa:1c:f8:88:8a:ff:2d:b2:7f:2b:1d:22:23:f4:e6: 17:99:49:16:e0:b9:65:1b:2e:fa:b8:13:f5:5c:46:81:7d:0a: 17:c3:82:fc:05:5f:2f:22:ad:4d:f7:f8:fb:f6:ed:07:34:46: ee:f4:5d:f4:75:fc:be:4b:ce:d8:cd:57:86:4e:5b:37:c9:75: e1:f9:47:fc:cd:20:24:c2:b2:ee:fb:ab:52:f5:84:67:60:b2: 2d:9a:d3:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUxMTAzMDMzNDQ1WhcNMjUxMTEwMDMzNDQ1WjAYMRYwFAYD VQQDEw02OTA4MjJkNS1lNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXja2WVvvOvV8VHG3/UNc4F2QJlOQg8Vanyc5OoaE5XehmBoscsNmWSVL5G/ 7wzjNs4Qc2AIxiOu0uyuXrmiysxN6w3k76RTFx66tpsDEzO6iz5Iwdr92H/7zBIa DvRG7LgwxcLc4yD2KFkepWP0Uoi5v8sh+0aBogOFO7ZgID/7brPfLHosldjFYIO0 eVU03Y484ueSr2cL782DhhdsZTAHB6R4V4/g7CVnNOENas1MSWNmmlHN0tpK6it4 kglvEV20AeKQePA7FRvlGWtNREke9TaD6di01U1KNiUV5gAcuyrxXwPCQCA40LdQ TlWuQHe2OI2r0oqfdeXCPJSr8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXQglO2 QZXamn97kPpVfBYql9hOMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuB2hIa1QoYBimWy3Panrcymszg3y25W+yTo3PXPwHKJ1B8eqUWsSS vJy46mp85+4C08RZsJ04ZkMPJnNFxpDfaUHnSUUVPUwLaLdtMdQmOvGY2sKB3cer 1v/C83KxKDLgcSo9j5mo5XMTxW3YsRpjQn6gci4Rsjbx6wo7Gmzx5ciHUcGYwU+3 rtjxRzI+y/GH7cvu2HGw8VjvtgCChosknBAVjHL6HPiIiv8tsn8rHSIj9OYXmUkW 4LllGy76uBP1XEaBfQoXw4L8BV8vIq1N9/j79u0HNEbu9F30dfy+S87YzVeGTls3 yXXh+Uf8zSAkwrLu+6tS9YRnYLItmtMs -----END CERTIFICATE-----Generated at Mon Nov 3 13:15:28 2025 by rpki-client