$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json) Hash identifier: LXeTbl/B1FnHOP6+9SH/YHkiEUnsEHwZ/4tCkNxFHH8= Subject key identifier: DC:33:CE:73:36:D2:77:E9:3A:23:FC:8D:E5:00:EE:4F:8E:EC:BC:0C Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft Manifest number: 3F Signing time: Sun 19 Oct 2025 03:12:12 +0000 Manifest this update: Sun 19 Oct 2025 03:12:11 +0000 Manifest next update: Sun 26 Oct 2025 03:12:11 +0000 Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: /5tml5zlHvyTjBI4u3r3BwEzSHqOyT4MZ3SD6ohzm2M=) 2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: Krc4hrUxizB7HZBQVnd3e8NynO1iw8BpxC+SzV7uUy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Validity Not Before: Oct 19 03:12:11 2025 GMT Not After : Oct 26 03:12:11 2025 GMT Subject: CN=68f4570b-2701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:c7:de:d0:61:72:cc:ac:39:bb:56:c6:ee: a2:40:91:43:2d:92:8e:31:4b:28:59:28:94:60:8d: 60:67:76:61:81:b6:f7:2a:5b:4c:c5:a1:2c:ac:b6: 73:d9:b5:68:2b:ae:e3:54:a9:12:f3:b7:d3:02:61: cf:14:ba:69:4c:9f:f6:e2:b0:38:5d:db:30:e1:da: ca:a9:da:a4:04:a4:d7:76:9e:e5:27:58:5e:ac:2e: 90:ca:2c:c4:f9:e6:1e:8d:e7:d8:05:4b:40:f4:ff: 2b:18:b8:93:77:34:6a:5c:bc:66:15:b5:8b:33:3b: 79:ee:bd:90:ab:d3:02:13:da:b1:0d:26:12:16:a6: 21:78:73:81:10:6f:1d:ca:a2:92:a7:dc:6d:be:78: 53:28:be:9f:31:34:fb:af:95:7d:44:75:10:32:e7: 3c:0a:f6:fd:0d:1b:25:c7:1a:e0:9e:c1:29:86:86: 67:22:32:4f:71:3b:0c:46:2c:13:6c:94:57:ca:81: 3b:47:43:3e:cb:6e:de:0b:81:ed:25:76:15:c7:cb: 37:ed:00:54:cb:96:3c:83:84:35:06:84:65:3a:e0: c0:fb:46:a3:50:0e:71:5f:42:8b:47:92:a6:6d:50: b0:54:48:56:13:c1:ca:5e:8b:9b:1e:67:70:f2:37: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:33:CE:73:36:D2:77:E9:3A:23:FC:8D:E5:00:EE:4F:8E:EC:BC:0C X509v3 Authority Key Identifier: keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7f:77:ef:5c:03:85:43:99:91:0e:26:82:60:b6:8f:3b:53: 57:95:f5:e4:f0:8d:6c:01:5b:42:11:00:93:77:ee:21:10:6c: db:08:f7:5b:ae:12:6e:8d:9c:4e:ee:36:85:2f:db:33:d2:89: 23:06:da:49:8e:b2:d4:00:8b:6b:2d:04:06:cb:d2:4d:1d:cc: 82:4c:3d:19:3e:7d:0b:75:33:a9:31:12:c6:6f:a5:4f:ba:bb: 90:e8:be:f2:41:ba:82:39:b5:51:e7:31:58:86:df:09:d4:69: 82:c0:84:b8:1c:c6:13:62:d9:f8:48:38:f5:98:ca:35:9e:a7: 25:0d:3f:4e:44:ca:08:c9:11:1a:a2:62:67:9a:43:4d:e0:24: a0:94:e0:c0:e0:82:a2:f3:20:a9:d0:d0:80:ab:01:0d:f4:66: c6:cd:94:ce:c0:a3:80:b9:e6:6b:02:b3:cc:fd:b1:19:74:41: 0f:91:e3:58:4b:15:59:b4:fa:b7:f1:ba:f1:82:d9:37:57:e6: 72:64:8a:c2:0b:6a:79:5e:b0:e0:09:e4:4d:17:eb:bd:a6:9c: 84:7f:c2:6d:51:dd:3b:74:b2:16:a7:04:4e:cd:fd:b1:67:c4: ca:32:f9:b1:cd:2e:f0:d0:4c:33:12:78:f8:b7:4c:12:55:67: 42:6b:5a:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDQyQTExMC8GA1UEBRMoMzU0RTMyQjlERTBFNTY5QTE5NTFBOTdCOTMyMDE5RjY4 OEEzNTBBQzAeFw0yNTEwMTkwMzEyMTFaFw0yNTEwMjYwMzEyMTFaMBgxFjAUBgNV BAMTDTY4ZjQ1NzBiLTI3MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVsMfe0GFyzKw5u1bG7qJAkUMtko4xSyhZKJRgjWBndmGBtvcqW0zFoSystnPZ tWgrruNUqRLzt9MCYc8UumlMn/bisDhd2zDh2sqp2qQEpNd2nuUnWF6sLpDKLMT5 5h6N59gFS0D0/ysYuJN3NGpcvGYVtYszO3nuvZCr0wIT2rENJhIWpiF4c4EQbx3K opKn3G2+eFMovp8xNPuvlX1EdRAy5zwK9v0NGyXHGuCewSmGhmciMk9xOwxGLBNs lFfKgTtHQz7Lbt4Lge0ldhXHyzftAFTLljyDhDUGhGU64MD7RqNQDnFfQotHkqZt ULBUSFYTwcpei5seZ3DyN+ZLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3DPOczbS d+k6I/yN5QDuT47svAwwHwYDVR0jBBgwFoAUNU4yud4OVpoZUal7kyAZ9oijUKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NDJBLzU1RUJCODU4NEUz QjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlU0eXVkNE9WcG9aVWFsN2t5QVo5b2lqVUt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 NDJBLzU1RUJCODU4NEUzQjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBv WlVhbDdreUFaOW9palVLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF5/d+9cA4VDmZEOJoJgto87U1eV9eTwjWwBW0IRAJN37iEQbNsI91uu Em6NnE7uNoUv2zPSiSMG2kmOstQAi2stBAbL0k0dzIJMPRk+fQt1M6kxEsZvpU+6 u5DovvJBuoI5tVHnMViG3wnUaYLAhLgcxhNi2fhIOPWYyjWepyUNP05EygjJERqi YmeaQ03gJKCU4MDggqLzIKnQ0ICrAQ30ZsbNlM7Ao4C55msCs8z9sRl0QQ+R41hL FVm0+rfxuvGC2TdX5nJkisILanlesOAJ5E0X672mnIR/wm1R3Tt0shanBE7N/bFn xMoy+bHNLvDQTDMSePi3TBJVZ0JrWjA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:26 2025 by rpki-client