$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft File: ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json) Hash identifier: FxGBng2W+y3uZLGEw8LfnSXNEajonnev93QzhccwITM= Subject key identifier: 76:96:24:38:17:B4:CD:FF:29:8E:3F:3D:CC:1C:3B:53:B2:D4:A4:FF Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 Certificate issuer: /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft Manifest number: 41 Signing time: Sun 19 Oct 2025 10:54:13 +0000 Manifest this update: Sun 19 Oct 2025 10:54:13 +0000 Manifest next update: Sun 26 Oct 2025 10:54:13 +0000 Files and hashes: 1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: EXa+1+vXle/jwQjuuDAHQdITqUQjuJ5dAibGFtM8ULc=) 2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: i2BhMqJuRPJPw6EpQmAJmu0/MkHReXEBSLa+rZeCZ6I=) 3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: T0dKTs8EMdDl2Inh3fwBdZE3Wa4Vfq9Mg4rvNVagedw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Validity Not Before: Oct 19 10:54:13 2025 GMT Not After : Oct 26 10:54:13 2025 GMT Subject: CN=68f4c355-4e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:a1:70:1b:15:73:12:75:5d:d7:9c:e0:34: 71:66:1b:91:54:e5:e5:71:c8:9c:34:e6:1c:55:e8: ac:1d:84:95:25:73:36:9c:ea:64:9a:09:91:f5:6a: 45:92:15:1a:61:f8:6b:9a:fd:f9:b9:88:cb:eb:c1: 5e:0f:ef:26:ab:4b:ec:15:72:d7:13:e9:cb:f7:68: cd:d1:4c:04:a2:90:dc:05:4a:b6:59:c2:a2:ad:ec: 83:24:cb:8d:a6:ba:eb:70:8d:3f:d3:0d:72:40:2a: fe:95:89:1c:cb:33:eb:60:1f:c6:68:5c:cb:0f:2b: bd:61:dc:0d:e2:71:23:e0:b9:48:b8:0b:e0:b3:ad: 32:fc:25:4b:d3:ea:6d:23:15:5e:5b:f1:4d:d9:dd: ec:59:8f:c4:24:52:ba:c8:60:c6:36:c5:13:d4:89: 26:ae:35:09:4a:05:c5:22:6e:3b:d3:f3:a4:db:c2: 5c:0f:7b:4b:5a:85:d2:25:6d:38:a9:81:17:30:56: d5:d1:35:4b:10:3b:30:91:94:66:48:41:6f:70:2a: ce:49:c5:2b:88:93:7c:d5:db:de:af:6f:0e:a7:af: ac:bf:54:df:63:5d:23:86:88:43:d6:ca:7c:88:32: de:c4:dc:38:1f:ed:2c:e8:30:04:68:5c:6c:28:3d: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:24:38:17:B4:CD:FF:29:8E:3F:3D:CC:1C:3B:53:B2:D4:A4:FF X509v3 Authority Key Identifier: keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a7:72:d8:7b:0d:a0:4a:6f:94:9c:aa:3a:21:2f:18:28:e2: 79:3c:ca:27:07:23:cc:1d:d1:25:48:d0:67:f6:27:63:04:8e: 91:94:3f:6b:90:b1:47:00:30:3b:1b:c8:ee:07:00:f1:4e:e2: a1:17:fb:70:46:2b:f1:ba:ec:3e:ea:c6:e0:a4:d5:4f:4e:b5: 9e:ab:5d:57:d4:fe:26:df:f3:6d:b5:da:6e:ca:38:8d:aa:23: 5a:18:f4:89:f2:a5:12:e0:1c:b1:18:d5:d1:b6:af:b9:a0:8f: ee:98:4d:32:4c:b8:0e:22:b5:07:e6:bc:67:e0:ba:0d:6c:29: aa:ef:a4:f2:ab:22:de:29:8d:b2:88:0c:69:e6:36:21:6e:a7: 1a:b1:db:18:b4:f3:1d:95:56:57:24:01:f0:a3:50:35:26:73: 3c:e6:a2:44:8e:a2:86:80:d5:66:2e:12:ec:5a:53:2d:85:8f: c0:d6:8c:47:e8:d6:38:50:8b:a6:4a:a3:3a:2b:b2:78:56:5b: e3:10:b4:8c:40:f3:58:ea:40:ae:cc:b5:a2:a5:37:8f:20:ba: 1f:e0:27:fb:04:cb:49:91:f9:d5:f7:5e:91:47:11:64:54:af: bc:63:7d:6a:15:16:ac:6b:e9:ba:dc:65:bc:76:59:7a:30:8e: 7c:4e:65:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Mjc2OTExMC8GA1UEBRMoOUVENTY0MjlEMUFFOUY2MDA0RkI2RkI2Nzg4RTkzRkFG NjIyNTc1OTAeFw0yNTEwMTkxMDU0MTNaFw0yNTEwMjYxMDU0MTNaMBgxFjAUBgNV BAMTDTY4ZjRjMzU1LTRlOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4F6FwGxVzEnVd15zgNHFmG5FU5eVxyJw05hxV6KwdhJUlczac6mSaCZH1akWS FRph+Gua/fm5iMvrwV4P7yarS+wVctcT6cv3aM3RTASikNwFSrZZwqKt7IMky42m uutwjT/TDXJAKv6ViRzLM+tgH8ZoXMsPK71h3A3icSPguUi4C+CzrTL8JUvT6m0j FV5b8U3Z3exZj8QkUrrIYMY2xRPUiSauNQlKBcUibjvT86TbwlwPe0tahdIlbTip gRcwVtXRNUsQOzCRlGZIQW9wKs5JxSuIk3zV296vbw6nr6y/VN9jXSOGiEPWynyI Mt7E3Dgf7SzoMARoXGwoPXB3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdpYkOBe0 zf8pjj89zBw7U7LUpP8wHwYDVR0jBBgwFoAUntVkKdGun2AE+2+2eI6T+vYiV1kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzY5LzQ2QkQ1NUMyNEI4 RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJBRS0yLTJlSTZULXZZaVYx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRWa0tkR3VuMkFFLTItMmVJNlQtdllpVjFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NzY5LzQ2QkQ1NUMyNEI4RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJB RS0yLTJlSTZULXZZaVYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEqncth7DaBKb5ScqjohLxgo4nk8yicHI8wd0SVI0Gf2J2MEjpGUP2uQ sUcAMDsbyO4HAPFO4qEX+3BGK/G67D7qxuCk1U9OtZ6rXVfU/ibf82212m7KOI2q I1oY9InypRLgHLEY1dG2r7mgj+6YTTJMuA4itQfmvGfgug1sKarvpPKrIt4pjbKI DGnmNiFupxqx2xi08x2VVlckAfCjUDUmczzmokSOooaA1WYuEuxaUy2Fj8DWjEfo 1jhQi6ZKozorsnhWW+MQtIxA81jqQK7MtaKlN48guh/gJ/sEy0mR+dX3XpFHEWRU r7xjfWoVFqxr6brcZbx2WXowjnxOZSA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:45 2025 by rpki-client