$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: 0lnIrMCcrkSwQUMsIipUfkmaFNLBnzZKu/aLqg8DjuY= Subject key identifier: 8B:C1:80:99:5B:FB:67:6F:D8:07:EE:F8:68:67:7D:E1:C1:7A:F8:B2 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 017F Signing time: Sun 19 Oct 2025 06:50:13 +0000 Manifest this update: Sun 19 Oct 2025 06:50:12 +0000 Manifest next update: Sun 26 Oct 2025 06:50:12 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: voimyqbB84zludEVtwR1zrIjJP7h4zBc16nniM2cIaw=) 2: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: KOUKQ6BoYe+OZvts9QDaZtXw/6SYWRIeerxskHjMAvw=) 3: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: ZO+BY1B+XgvoW0KKoO0apsMteX7veM0k8UtwvOCudts=) 4: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 5: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: g1HOTpLTf3sk5gSzo54dPs52/QkaTA4XgGi9Wow0trs=) 6: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 7: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 8: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Oct 19 06:50:12 2025 GMT Not After : Oct 26 06:50:12 2025 GMT Subject: CN=68f48a25-72c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:0a:f9:fb:5d:8a:f2:fc:29:33:1b:86:51: 22:58:9c:a2:d6:5e:45:fc:77:a3:e2:7f:0f:1c:b5: 83:7d:32:2f:85:9e:43:56:f8:ae:c6:11:09:cc:f0: 33:3f:f2:3f:b3:b0:5c:d5:7a:1b:16:8e:2b:3f:b2: 0a:b7:b9:4e:d4:a9:bb:41:72:ed:9c:97:55:83:67: ab:e9:68:0b:a6:a7:8f:0b:be:ea:d8:56:c5:83:3f: a7:cb:2a:3d:55:6e:94:c1:05:0e:85:b5:07:86:c7: 29:18:d0:9f:17:30:5f:7c:1f:54:8e:c8:7a:99:20: 69:1e:f2:e6:6e:e1:34:d5:38:ef:be:e3:e2:3d:32: c0:9c:1b:d5:c5:5a:d5:79:8d:a8:ba:85:36:08:75: 05:3d:56:0e:93:c6:c0:fb:a2:3c:33:2e:39:a1:97: 0d:8c:ee:4b:8c:6e:dd:ca:70:27:3f:f7:2b:9d:ab: d2:d5:ee:85:45:16:30:b7:99:6a:8c:fa:f2:c4:9e: b7:cc:31:26:2f:a0:40:91:6c:ea:59:3c:30:bd:b3: 34:ac:47:53:e4:23:5a:23:e7:63:b3:4e:0f:c3:23: c1:84:8a:8d:4a:26:b4:11:50:25:32:e0:7d:f0:b8: 88:af:36:fe:2f:b1:ff:83:4b:9b:50:2e:3e:59:7d: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:80:99:5B:FB:67:6F:D8:07:EE:F8:68:67:7D:E1:C1:7A:F8:B2 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:6c:19:aa:fd:c6:4a:67:f2:c8:0b:17:61:1a:b9:49:ee:b1: a3:c5:00:a0:0b:3b:91:49:c5:94:11:f7:76:b5:ad:60:e0:86: 1c:5f:ee:68:f2:f0:c3:e9:8b:07:9f:95:8a:c9:87:05:1f:05: 58:ab:ae:c0:b4:5f:ac:9d:31:28:98:dd:0c:6e:6b:6c:8e:44: 46:ec:86:05:c4:34:c4:8d:9d:29:8a:33:fa:4e:22:18:ae:54: 6b:df:0e:28:eb:3f:26:b7:f9:44:68:cb:82:74:5c:0a:8c:9d: 02:29:ff:b6:b4:3c:b5:79:12:16:34:9b:57:88:b5:48:bb:d9: 37:7f:35:05:6f:79:78:bb:3d:e9:ac:07:d5:ce:18:15:3a:85: ef:fc:ff:ad:7d:a6:a0:14:85:91:fd:74:c3:cd:3a:db:23:a1: 1a:34:00:6c:98:74:69:20:51:84:98:3e:5c:d8:a1:64:01:46: 1f:ee:53:9c:bf:ee:44:b6:84:d7:8b:e7:6a:0c:df:a9:be:81: 33:30:7d:7d:86:26:9c:6a:ef:54:62:40:4a:57:22:7b:84:30: b3:99:a9:31:c4:f2:9e:52:45:2b:7f:51:71:f7:fd:c6:50:ac: 67:c9:37:0a:36:39:f8:1a:b3:16:3b:9c:f1:f2:09:3d:da:5d: 87:39:9c:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUxMDE5MDY1MDEyWhcNMjUxMDI2MDY1MDEyWjAYMRYwFAYD VQQDEw02OGY0OGEyNS03MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EsK+ftdivL8KTMbhlEiWJyi1l5F/Hej4n8PHLWDfTIvhZ5DVviuxhEJzPAz P/I/s7Bc1XobFo4rP7IKt7lO1Km7QXLtnJdVg2er6WgLpqePC77q2FbFgz+nyyo9 VW6UwQUOhbUHhscpGNCfFzBffB9Ujsh6mSBpHvLmbuE01TjvvuPiPTLAnBvVxVrV eY2ouoU2CHUFPVYOk8bA+6I8My45oZcNjO5LjG7dynAnP/crnavS1e6FRRYwt5lq jPryxJ63zDEmL6BAkWzqWTwwvbM0rEdT5CNaI+djs04PwyPBhIqNSia0EVAlMuB9 8LiIrzb+L7H/g0ubUC4+WX3GVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvBgJlb +2dv2Afu+GhnfeHBeviyMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCybBmq/cZKZ/LICxdhGrlJ7rGjxQCgCzuRScWUEfd2ta1g4IYcX+5o 8vDD6YsHn5WKyYcFHwVYq67AtF+snTEomN0MbmtsjkRG7IYFxDTEjZ0pijP6TiIY rlRr3w4o6z8mt/lEaMuCdFwKjJ0CKf+2tDy1eRIWNJtXiLVIu9k3fzUFb3l4uz3p rAfVzhgVOoXv/P+tfaagFIWR/XTDzTrbI6EaNABsmHRpIFGEmD5c2KFkAUYf7lOc v+5EtoTXi+dqDN+pvoEzMH19hiacau9UYkBKVyJ7hDCzmakxxPKeUkUrf1Fx9/3G UKxnyTcKNjn4GrMWO5zx8gk92l2HOZy+ -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:23 2025 by rpki-client