$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: NNnkCaVHLuPTSCEw7plEhD80Rdr/dV940I31f75sSIE= Subject key identifier: 2B:A3:D4:33:23:78:2C:93:E6:05:C8:5E:36:FD:AD:98:A7:3D:D8:7F Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 013A Signing time: Mon 03 Nov 2025 04:46:38 +0000 Manifest this update: Mon 03 Nov 2025 04:46:37 +0000 Manifest next update: Mon 10 Nov 2025 04:46:37 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: wlPkQGzi2sZInx5pbVGAJUZyc5qVfP1MjRjxnhaAWXQ=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: TiDsN2FNPwgHeiELsvw5/2Nk6unCe1gkLq5nmI7beNI=) 4: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Nov 3 04:46:37 2025 GMT Not After : Nov 10 04:46:37 2025 GMT Subject: CN=690833ae-c6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:24:b1:6c:70:41:87:15:3d:8c:5f:0d:6b: 0d:5f:53:7a:de:6d:7f:b3:35:1b:a6:d3:87:60:1c: c0:0b:30:04:86:b2:c5:dd:f0:2e:2a:92:35:71:03: a8:21:50:2e:f9:c6:21:3b:c6:8f:8d:50:55:15:84: 0d:29:db:c9:85:9a:bc:c8:68:5b:3c:e6:11:e0:0c: 79:c3:23:1b:fd:d0:04:64:d6:d4:ee:a2:b7:7d:66: 35:37:f8:1a:fc:f3:28:a4:54:d0:34:d3:8c:68:e6: 27:c6:55:9a:ba:37:db:23:1d:f8:9c:7f:0a:94:b0: 09:22:33:0f:fc:54:59:c3:55:fa:c7:0a:d9:43:dd: e1:8d:4f:e1:8b:f5:1c:f8:a0:6c:93:49:42:a4:91: ea:10:7b:e8:25:85:32:40:98:a1:56:c1:da:ef:c0: 58:b0:b1:7a:ab:b3:95:ee:2a:a3:f1:f8:b6:7c:73: 0b:44:e5:d8:47:cb:70:a8:c2:c8:68:14:b8:3e:e0: c2:3e:39:78:9e:7b:41:d4:31:b5:15:ed:59:c5:dd: b0:59:78:f3:66:1f:d4:e7:63:7e:c4:40:5c:4f:42: dd:08:73:5e:a0:bc:fc:5c:9a:b6:41:41:08:2f:73: 43:c7:c9:e0:bb:f7:c8:ac:70:d3:4d:0c:ca:4a:84: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A3:D4:33:23:78:2C:93:E6:05:C8:5E:36:FD:AD:98:A7:3D:D8:7F X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:25:64:e4:de:17:79:dd:3b:6a:33:6c:46:39:89:66:bb:f9: c0:01:7a:49:59:1f:e0:f9:19:31:0b:74:8f:5a:66:ce:42:a5: dc:83:8e:4c:be:49:a2:1e:c9:28:67:89:d9:ef:ed:16:d7:2e: cc:3e:ad:fb:29:59:e6:30:d1:a3:45:d5:57:f3:76:41:bd:5b: ad:80:90:d1:0a:e3:b8:77:b3:fd:e9:f3:0b:f3:e7:8e:be:49: 35:f3:db:c3:4b:77:65:6c:2f:30:f2:52:00:39:c8:75:4a:c0: 2b:5c:24:f2:0c:5b:9b:5b:8b:db:94:e8:a4:03:fa:55:f1:af: 6a:18:20:71:25:4d:f8:fd:17:69:de:bd:cb:bd:96:e3:1c:13: 66:aa:ab:11:e6:87:36:49:d1:d5:b6:0e:7f:d8:8f:38:a0:26: 0b:10:07:68:5f:96:32:c8:04:1e:6f:5a:c5:37:66:72:4a:5e: 41:bf:d9:1c:eb:44:19:46:f0:68:4a:b3:56:5b:12:58:11:41: 09:b2:0f:b2:eb:27:ec:14:69:4e:15:ea:23:1d:4d:f3:47:65: 9d:d8:2f:7f:90:91:49:89:1e:5f:f0:91:0b:52:e4:b1:8a:e1: 89:2e:8f:04:d3:f5:12:2e:3f:f2:eb:cc:e2:0d:d6:b8:76:2c: 7c:a8:7e:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUxMTAzMDQ0NjM3WhcNMjUxMTEwMDQ0NjM3WjAYMRYwFAYD VQQDEw02OTA4MzNhZS1jNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RwksWxwQYcVPYxfDWsNX1N63m1/szUbptOHYBzACzAEhrLF3fAuKpI1cQOo IVAu+cYhO8aPjVBVFYQNKdvJhZq8yGhbPOYR4Ax5wyMb/dAEZNbU7qK3fWY1N/ga /PMopFTQNNOMaOYnxlWaujfbIx34nH8KlLAJIjMP/FRZw1X6xwrZQ93hjU/hi/Uc +KBsk0lCpJHqEHvoJYUyQJihVsHa78BYsLF6q7OV7iqj8fi2fHMLROXYR8twqMLI aBS4PuDCPjl4nntB1DG1Fe1Zxd2wWXjzZh/U52N+xEBcT0LdCHNeoLz8XJq2QUEI L3NDx8ngu/fIrHDTTQzKSoQWbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuj1DMj eCyT5gXIXjb9rZinPdh/MB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDJWTk3hd53TtqM2xGOYlmu/nAAXpJWR/g+RkxC3SPWmbOQqXcg45M vkmiHskoZ4nZ7+0W1y7MPq37KVnmMNGjRdVX83ZBvVutgJDRCuO4d7P96fML8+eO vkk189vDS3dlbC8w8lIAOch1SsArXCTyDFubW4vblOikA/pV8a9qGCBxJU34/Rdp 3r3LvZbjHBNmqqsR5oc2SdHVtg5/2I84oCYLEAdoX5YyyAQeb1rFN2ZySl5Bv9kc 60QZRvBoSrNWWxJYEUEJsg+y6yfsFGlOFeojHU3zR2Wd2C9/kJFJiR5f8JELUuSx iuGJLo8E0/USLj/y68ziDda4dix8qH6N -----END CERTIFICATE-----Generated at Mon Nov 3 13:48:17 2025 by rpki-client