$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: gf4kwhPYDC6Lr59StHqyBMMv/RTvGUJ2AHJ7QXR4NKY= Subject key identifier: D0:BF:F9:47:63:E5:0B:4B:65:D4:7C:08:7C:D6:FA:D9:87:D0:CA:E6 Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 016C Signing time: Mon 03 Nov 2025 03:55:19 +0000 Manifest this update: Mon 03 Nov 2025 03:55:18 +0000 Manifest next update: Mon 10 Nov 2025 03:55:18 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: MftCEvU0KPcG+ng2qAwPwCH5WFu2ZISf0dr7hZPTLm8=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: Nov 3 03:55:18 2025 GMT Not After : Nov 10 03:55:18 2025 GMT Subject: CN=690827a6-6e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:70:a2:d4:1f:b7:43:12:8d:cb:08:05:c4: 7b:cc:ad:d0:cf:eb:02:cd:c3:77:7e:0f:98:05:a8: 49:e1:ff:7e:14:0e:35:d7:96:2b:e8:e1:c6:25:b6: 5a:d0:0a:6a:7a:eb:7c:87:93:db:a1:1e:b4:13:de: 76:ea:11:1f:de:06:12:0b:f8:b8:68:bb:d7:97:bb: 6c:cb:8b:a1:4a:08:91:e3:5e:bf:40:9a:57:22:45: 6f:76:a7:c0:35:e4:87:c1:4c:29:bc:c7:b6:8c:ac: 18:62:44:55:19:41:b4:d3:0d:72:b4:fe:21:72:a6: 35:a1:14:25:35:11:1e:74:dc:2c:03:a0:be:6d:52: 36:68:9c:b7:d3:16:3b:4a:3b:b9:22:ab:48:c2:70: 6a:a2:c6:18:c1:d7:2b:01:40:81:c7:51:81:82:9d: 05:20:eb:fc:37:bc:56:20:21:a5:93:ab:f3:f4:46: 4a:21:ae:92:1a:33:30:81:38:7e:e7:7b:0d:d8:3b: ab:aa:9b:02:30:dc:8e:98:87:14:aa:98:7c:87:b0: 71:85:05:2f:39:03:f0:4e:ad:7d:0a:b6:ea:cf:5e: 35:b3:c7:3e:fb:e9:3d:1c:7a:4a:6a:95:df:94:e0: af:29:df:aa:41:fb:48:e3:d7:0a:f5:ab:a2:e4:ff: c3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BF:F9:47:63:E5:0B:4B:65:D4:7C:08:7C:D6:FA:D9:87:D0:CA:E6 X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:00:e5:1f:ca:9d:f1:4d:99:c6:c4:55:1a:e6:c6:bf:d0:9c: f0:7d:ab:5f:ac:0d:6d:7f:d3:92:d6:08:b4:12:e0:b8:9d:f8: 84:8c:0c:a0:e3:53:b8:9b:53:8f:81:f5:e8:85:52:0e:f7:45: fc:d6:26:bc:83:07:be:51:fc:66:6d:54:a7:93:48:fd:10:36: f2:f8:9e:21:e4:68:87:14:11:47:86:79:0f:e7:3f:6c:90:5a: 84:5e:3c:69:e2:cf:df:01:f1:0b:1c:ee:10:89:3c:eb:90:06: d2:3a:a9:75:9f:f8:ef:84:ad:0f:13:12:e8:d0:25:64:6f:88: 23:0e:0c:b6:7c:a2:d2:f8:0d:d8:94:2a:3f:d8:e4:83:1e:fe: 08:0c:8e:2a:ce:3a:f5:bd:6f:cb:a7:a4:02:e5:16:34:53:8b: 96:83:51:e7:e4:96:e8:61:62:2d:9b:a7:60:c4:cd:df:9c:49: 0b:69:cc:e5:05:5d:a5:f3:31:1e:a5:cc:30:ea:b7:bb:c4:f9: 7d:9e:99:96:82:20:ce:59:ed:52:c0:a3:5a:96:b8:71:41:8e: a8:f2:9d:76:6e:11:9b:20:f2:f1:2f:60:37:5a:c7:21:c6:d5: 81:30:07:9f:a1:ea:c0:e3:f0:74:b8:6d:0d:0d:56:3a:f0:15: 7f:48:8c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD RjUwMEQzRjEwHhcNMjUxMTAzMDM1NTE4WhcNMjUxMTEwMDM1NTE4WjAYMRYwFAYD VQQDEw02OTA4MjdhNi02ZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DZwotQft0MSjcsIBcR7zK3Qz+sCzcN3fg+YBahJ4f9+FA4115Yr6OHGJbZa 0Apqeut8h5PboR60E9526hEf3gYSC/i4aLvXl7tsy4uhSgiR416/QJpXIkVvdqfA NeSHwUwpvMe2jKwYYkRVGUG00w1ytP4hcqY1oRQlNREedNwsA6C+bVI2aJy30xY7 Sju5IqtIwnBqosYYwdcrAUCBx1GBgp0FIOv8N7xWICGlk6vz9EZKIa6SGjMwgTh+ 53sN2DurqpsCMNyOmIcUqph8h7BxhQUvOQPwTq19Crbqz141s8c+++k9HHpKapXf lOCvKd+qQftI49cK9aui5P/DvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC/+Udj 5QtLZdR8CHzW+tmH0MrmMB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ VzdsNXB1THk1NnJQVUEwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkAOUfyp3xTZnGxFUa5sa/0JzwfatfrA1tf9OS1gi0EuC4nfiEjAyg 41O4m1OPgfXohVIO90X81ia8gwe+UfxmbVSnk0j9EDby+J4h5GiHFBFHhnkP5z9s kFqEXjxp4s/fAfELHO4QiTzrkAbSOql1n/jvhK0PExLo0CVkb4gjDgy2fKLS+A3Y lCo/2OSDHv4IDI4qzjr1vW/Lp6QC5RY0U4uWg1Hn5JboYWItm6dgxM3fnEkLaczl BV2l8zEepcww6re7xPl9npmWgiDOWe1SwKNalrhxQY6o8p12bhGbIPLxL2A3Wsch xtWBMAefoerA4/B0uG0NDVY68BV/SIxF -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:13 2025 by rpki-client