$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: C6M5RZOQAel0ID3gL4Xv38OT0NpSqxn7pLGTdFNvtOI= Subject key identifier: 5E:5B:92:8F:BD:A0:8C:BC:10:9A:C9:26:7A:52:15:20:8E:7F:60:7F Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 03DB Signing time: Sun 19 Oct 2025 02:31:52 +0000 Manifest this update: Sun 19 Oct 2025 02:31:51 +0000 Manifest next update: Sun 26 Oct 2025 02:31:51 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: OS7rg/sh6oGwYRk+VSMWotI35J8LpCMRo/dnmnJeVZg=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: l5UPW8luctznfhC7jBJpvRQP7pkTfMgJK+ognjXHfwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Oct 19 02:31:51 2025 GMT Not After : Oct 26 02:31:51 2025 GMT Subject: CN=68f44d97-a4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:33:aa:e9:76:8f:c5:f4:38:69:e9:47:4f: 3b:af:07:8f:43:29:39:38:43:a4:c5:44:db:7d:4f: 70:6d:44:e1:b9:20:dd:6f:89:94:0e:7e:05:8d:31: 2b:a7:c6:c6:cb:d3:46:8b:14:90:a5:4b:52:00:73: 34:c4:8b:21:a3:8b:4f:8f:9c:b3:49:8c:80:b1:80: 2c:90:02:75:d6:17:bc:f3:57:c3:c7:49:c5:cf:b2: 1f:e6:06:8e:1a:34:17:05:05:6b:e8:2f:32:3f:ae: e9:ea:3a:0c:18:95:ab:d4:86:61:08:d8:bb:26:4f: 22:af:96:52:80:88:31:a0:43:dc:bf:de:70:37:b9: 8a:37:77:04:cd:49:59:d3:25:58:cb:10:59:dd:dc: 57:5e:f6:9e:fa:72:44:83:2a:2b:2f:76:8d:9f:4d: 1e:cf:3a:ee:67:67:ea:b1:3c:40:ef:1a:5f:d8:91: ce:1b:33:60:fa:01:c4:67:34:b6:98:46:a3:84:9c: d5:41:7b:26:a7:75:cd:2b:f8:4a:59:64:10:d4:5d: e2:a7:71:90:cc:2b:98:cf:2b:b9:74:16:73:99:11: df:f6:81:2b:db:74:63:ac:69:b0:4a:2a:39:fa:22: df:79:dc:28:11:7c:5c:dd:31:a3:7d:7b:97:56:67: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:92:8F:BD:A0:8C:BC:10:9A:C9:26:7A:52:15:20:8E:7F:60:7F X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a4:65:31:91:94:7f:d8:2a:db:6a:c5:68:b0:39:99:cc:33: 64:b1:94:91:b8:a8:78:1f:62:fd:63:79:2e:e2:49:cb:3b:86: 50:dc:a9:1e:68:a1:ba:89:ee:20:7c:73:99:1e:8e:13:93:c2: b1:93:f7:21:4d:2c:b3:da:52:ee:8c:31:22:ef:f2:40:94:70: 2a:c8:bd:61:20:54:c8:2c:bf:27:76:8b:2c:00:67:87:5e:37: 04:8e:e7:f8:0f:51:30:f7:f5:e9:a0:8b:a0:18:3e:9c:43:0d: 29:02:88:3c:d5:15:a3:b3:26:55:c3:88:1c:cf:6c:3c:9c:82: e4:3a:92:f1:a3:86:dc:b8:79:b0:be:b7:12:ec:b2:4d:fe:77: c2:b5:dd:2a:79:a2:9c:36:09:27:5d:d6:69:fb:f6:13:58:b6: b4:88:ce:04:8e:88:c0:34:27:7b:4e:80:65:f8:67:6d:ba:0b: fa:b3:0d:7b:89:97:ca:a5:e4:3c:7c:c8:6f:3a:75:56:0e:84: 83:f8:d4:90:c2:fe:89:19:55:80:de:c8:59:7f:48:a9:37:54: 17:3f:78:df:0d:5b:54:76:80:bc:9b:db:6f:9b:91:f9:76:68: bb:d9:08:87:6c:ea:f4:e1:96:9a:5d:ad:b6:87:4e:ac:3d:98: df:07:ea:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUxMDE5MDIzMTUxWhcNMjUxMDI2MDIzMTUxWjAYMRYwFAYD VQQDEw02OGY0NGQ5Ny1hNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Fszqul2j8X0OGnpR087rwePQyk5OEOkxUTbfU9wbUThuSDdb4mUDn4FjTEr p8bGy9NGixSQpUtSAHM0xIsho4tPj5yzSYyAsYAskAJ11he881fDx0nFz7If5gaO GjQXBQVr6C8yP67p6joMGJWr1IZhCNi7Jk8ir5ZSgIgxoEPcv95wN7mKN3cEzUlZ 0yVYyxBZ3dxXXvae+nJEgyorL3aNn00ezzruZ2fqsTxA7xpf2JHOGzNg+gHEZzS2 mEajhJzVQXsmp3XNK/hKWWQQ1F3ip3GQzCuYzyu5dBZzmRHf9oEr23RjrGmwSio5 +iLfedwoEXxc3TGjfXuXVmf7swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5bko+9 oIy8EJrJJnpSFSCOf2B/MB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABpGUxkZR/2CrbasVosDmZzDNksZSRuKh4H2L9Y3ku4knLO4ZQ3Kke aKG6ie4gfHOZHo4Tk8Kxk/chTSyz2lLujDEi7/JAlHAqyL1hIFTILL8ndossAGeH XjcEjuf4D1Ew9/XpoIugGD6cQw0pAog81RWjsyZVw4gcz2w8nILkOpLxo4bcuHmw vrcS7LJN/nfCtd0qeaKcNgknXdZp+/YTWLa0iM4EjojANCd7ToBl+Gdtugv6sw17 iZfKpeQ8fMhvOnVWDoSD+NSQwv6JGVWA3shZf0ipN1QXP3jfDVtUdoC8m9tvm5H5 dmi72QiHbOr04ZaaXa22h06sPZjfB+p+ -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:52 2025 by rpki-client