$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: PT+uRSWkAnnK4+cz7VDuT4tsjRakBRJOzxeUnEUjMvI= Subject key identifier: B7:93:B9:17:59:3D:63:66:59:49:99:66:95:C0:F2:5C:F0:18:AF:81 Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0C3E Signing time: Sat 18 Oct 2025 19:26:55 +0000 Manifest this update: Sat 18 Oct 2025 19:26:54 +0000 Manifest next update: Sat 25 Oct 2025 19:26:54 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: sEZuYgSsXFjzdWMdlA26PpbY/Q+nTAUVvk6m2zQZUNQ=) 2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=) 3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Validity Not Before: Oct 18 19:26:54 2025 GMT Not After : Oct 25 19:26:54 2025 GMT Subject: CN=68f3e9fe-ae06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:4f:94:de:eb:c8:2d:b6:6c:c4:1f:71:9c: 71:ca:8b:b2:99:20:0d:eb:5b:fb:5a:02:5d:fb:f4: 42:3f:b1:d7:61:13:6c:da:81:c3:75:f1:70:71:ae: 3e:d7:a0:db:de:e3:9b:30:c7:54:ed:fe:13:c7:6e: fa:70:f2:d6:e5:52:da:c8:3f:6f:1a:4e:f4:81:c0: 08:a4:aa:11:f7:13:af:98:c7:e7:3a:8e:72:37:bb: 15:54:ff:d9:50:18:89:c3:dc:1b:ca:d8:a6:39:d9: a9:b5:91:e2:89:01:f9:61:f5:99:28:f1:13:f2:c1: f3:6a:d2:ff:df:d7:af:f5:4c:84:cb:0b:ba:78:75: 81:0f:3c:29:5b:c6:5e:ad:95:e8:4f:80:bc:64:1d: 74:40:0c:c0:40:77:03:ff:51:b3:2e:ca:18:f6:5b: 37:d3:65:1b:21:45:34:3e:3f:d9:0d:f8:cb:de:55: e7:33:7f:93:31:47:90:f2:18:05:0d:14:61:1d:1e: 5b:a0:0f:22:d1:27:01:82:e7:4c:a3:07:6b:a8:60: 33:00:06:ed:86:44:5b:1b:9d:b3:db:44:0e:1b:cd: 94:6d:ae:e4:87:b1:37:45:4c:ac:5e:57:7a:3a:d0: f2:e9:99:c8:87:f8:f0:64:c8:bb:21:d0:29:a7:c3: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:93:B9:17:59:3D:63:66:59:49:99:66:95:C0:F2:5C:F0:18:AF:81 X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3b:98:d7:29:dc:3f:1c:14:8c:69:e8:88:d6:eb:f2:ff:fc: db:63:af:89:6a:d5:06:96:7a:f1:59:48:e7:c2:ad:42:9a:7b: d6:fd:f0:fd:a9:c6:cc:cb:3b:ca:b3:d4:e1:7c:c7:5a:72:c4: 6c:c9:11:4a:15:27:f6:fa:6c:98:33:fe:53:5f:8d:24:89:09: 63:57:cf:fd:0a:6d:78:bc:e2:5e:50:2e:67:42:0f:8b:1b:7c: d8:07:8f:2a:68:93:cc:ba:75:4a:58:b8:9c:fe:7f:45:a6:e0: 1e:97:f8:18:8e:8c:15:34:e5:82:a0:01:85:67:e6:ad:c9:e2: a1:5a:55:a6:e7:4d:cd:88:ea:e0:fb:e8:11:17:d8:c2:18:8e: 66:5a:8d:e5:65:09:d2:de:9f:9e:09:8c:cc:7e:de:1b:7c:4c: d2:a2:ea:fc:38:71:83:ab:11:09:4e:3b:60:a8:2f:b6:4e:a1: 39:7f:fd:8d:bd:ae:86:4d:f8:2c:6c:10:78:fc:bc:4f:a3:09: 56:b6:a5:c8:02:c2:9e:0e:e9:17:15:23:0f:2f:77:bb:4b:dc: 78:1d:f6:fc:54:8a:98:68:ab:de:53:45:2b:77:ae:aa:37:95: cf:de:5d:89:1b:e9:00:b9:26:ca:b7:fa:4d:0d:78:fc:f4:66: b3:34:db:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjUxMDE4MTkyNjU0WhcNMjUxMDI1MTkyNjU0WjAYMRYwFAYD VQQDEw02OGYzZTlmZS1hZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmf5PlN7ryC22bMQfcZxxyouymSAN61v7WgJd+/RCP7HXYRNs2oHDdfFwca4+ 16Db3uObMMdU7f4Tx276cPLW5VLayD9vGk70gcAIpKoR9xOvmMfnOo5yN7sVVP/Z UBiJw9wbytimOdmptZHiiQH5YfWZKPET8sHzatL/39ev9UyEywu6eHWBDzwpW8Ze rZXoT4C8ZB10QAzAQHcD/1GzLsoY9ls302UbIUU0Pj/ZDfjL3lXnM3+TMUeQ8hgF DRRhHR5boA8i0ScBgudMowdrqGAzAAbthkRbG52z20QOG82Uba7kh7E3RUysXld6 OtDy6ZnIh/jwZMi7IdApp8OsrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeTuRdZ PWNmWUmZZpXA8lzwGK+BMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOO5jXKdw/HBSMaeiI1uvy//zbY6+JatUGlnrxWUjnwq1CmnvW/fD9 qcbMyzvKs9ThfMdacsRsyRFKFSf2+myYM/5TX40kiQljV8/9Cm14vOJeUC5nQg+L G3zYB48qaJPMunVKWLic/n9FpuAel/gYjowVNOWCoAGFZ+atyeKhWlWm503NiOrg ++gRF9jCGI5mWo3lZQnS3p+eCYzMft4bfEzSour8OHGDqxEJTjtgqC+2TqE5f/2N va6GTfgsbBB4/LxPowlWtqXIAsKeDukXFSMPL3e7S9x4Hfb8VIqYaKveU0Urd66q N5XP3l2JG+kAuSbKt/pNDXj89GazNNt1 -----END CERTIFICATE-----Generated at Mon Oct 20 05:49:00 2025 by rpki-client