$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json) Hash identifier: I/Pr1m63pnhA98z+J2YjK3oc6cuFTxIfHdDLO4Sb3X0= Subject key identifier: 81:32:6A:3B:22:93:99:A7:66:DD:AB:0A:C9:ED:A2:F1:69:9F:67:CE Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft Manifest number: 0149 Signing time: Sun 19 Oct 2025 06:59:47 +0000 Manifest this update: Sun 19 Oct 2025 06:59:46 +0000 Manifest next update: Sun 26 Oct 2025 06:59:46 +0000 Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: TAxJGfctohi55SXjANlOZohOOXh97boQ1rvcnUQ8ajY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Validity Not Before: Oct 19 06:59:46 2025 GMT Not After : Oct 26 06:59:46 2025 GMT Subject: CN=68f48c63-658f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:7e:28:f3:4c:06:9e:9e:12:19:1a:d5:a5: 07:98:9b:75:38:f7:92:53:0a:9e:23:59:fc:76:3b: b5:2c:ee:82:83:3f:7a:52:0d:27:fa:0f:41:56:35: 04:38:43:0f:e7:96:63:24:fd:62:08:73:96:db:64: 8c:02:ce:28:6f:06:ec:d2:5e:87:d8:12:eb:ca:b0: 08:17:c4:0e:9d:be:75:88:fc:c4:01:60:f5:2b:a5: bf:66:b1:0b:18:4e:35:16:53:9a:30:ab:a2:b3:3b: 20:91:1a:b4:72:3b:19:6c:52:81:46:70:29:5a:01: a5:a1:5b:8a:4f:5f:7f:d7:4c:cd:ad:56:ea:4b:bb: 52:ad:6f:f7:d5:2c:15:ff:06:c8:0a:45:30:1c:ed: d1:f6:ec:0a:73:49:54:c8:0f:bb:77:1a:64:c0:c2: e0:9f:4e:89:c0:30:71:92:cf:3e:7a:7d:a6:ad:8a: dd:50:f3:d2:bf:7c:d1:c9:99:22:0e:26:0d:12:f6: 9d:d6:96:8d:f6:1e:4a:0a:d9:2f:52:3b:be:8c:fd: c6:f9:5c:9b:fd:6e:ac:b4:94:77:d7:0c:01:fc:cc: 61:39:5d:6c:6f:e2:6c:be:09:cf:7f:b4:bf:26:21: 63:7e:e0:7d:4c:78:a9:47:a8:52:23:d6:f9:f5:56: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:32:6A:3B:22:93:99:A7:66:DD:AB:0A:C9:ED:A2:F1:69:9F:67:CE X509v3 Authority Key Identifier: keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6b:6e:f2:df:0f:e0:a7:aa:bf:3e:41:a6:78:fc:18:19:e7: 3c:c1:15:80:f8:06:80:0b:db:37:bb:73:2f:5c:c7:3d:33:cd: 2a:7e:c1:c5:7e:9f:31:e5:2c:ef:da:68:61:2c:a7:34:90:3c: 65:57:62:14:41:2b:0f:50:e3:91:fe:0e:8f:56:ae:7b:f5:b3: a2:e4:0f:35:43:58:be:b6:ff:80:b8:6f:6d:02:04:6a:b2:32: 2b:ba:a2:f7:ab:02:9c:64:c3:7c:90:51:45:f6:50:67:3c:9d: 63:c8:25:a6:b9:16:27:b5:59:bd:22:79:e1:fc:68:71:52:ed: f8:a8:22:0c:db:22:5b:a7:ad:51:08:e3:15:9d:1e:72:ab:5f: c0:df:70:54:e5:1c:18:b8:40:79:56:4b:6f:80:e1:49:22:77: ec:ad:a9:13:1e:30:f2:9e:b0:39:87:93:8b:9b:5e:67:db:69: 11:09:48:61:4d:a2:de:e3:cb:1d:64:69:97:a7:75:b8:8f:8b: d6:b7:f7:ca:dc:04:9d:0e:53:d4:ba:9f:5d:90:91:d3:48:55: 17:e4:a5:88:46:a3:c1:39:96:a9:d2:ff:be:9d:2b:48:9b:5b: 12:50:9c:f6:97:47:19:f3:8f:73:ec:70:ec:a9:3b:85:68:18: 18:0e:f8:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB OEM5MUVDQjcwHhcNMjUxMDE5MDY1OTQ2WhcNMjUxMDI2MDY1OTQ2WjAYMRYwFAYD VQQDEw02OGY0OGM2My02NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCl+KPNMBp6eEhka1aUHmJt1OPeSUwqeI1n8dju1LO6Cgz96Ug0n+g9BVjUE OEMP55ZjJP1iCHOW22SMAs4obwbs0l6H2BLryrAIF8QOnb51iPzEAWD1K6W/ZrEL GE41FlOaMKuiszsgkRq0cjsZbFKBRnApWgGloVuKT19/10zNrVbqS7tSrW/31SwV /wbICkUwHO3R9uwKc0lUyA+7dxpkwMLgn06JwDBxks8+en2mrYrdUPPSv3zRyZki DiYNEvad1paN9h5KCtkvUju+jP3G+Vyb/W6stJR31wwB/MxhOV1sb+JsvgnPf7S/ JiFjfuB9THipR6hSI9b59VYLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEyajsi k5mnZt2rCsntovFpn2fOMB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q UzRSV2F5WWpuWkNveVI3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALa27y3w/gp6q/PkGmePwYGec8wRWA+AaAC9s3u3MvXMc9M80qfsHF fp8x5Szv2mhhLKc0kDxlV2IUQSsPUOOR/g6PVq579bOi5A81Q1i+tv+AuG9tAgRq sjIruqL3qwKcZMN8kFFF9lBnPJ1jyCWmuRYntVm9Innh/GhxUu34qCIM2yJbp61R COMVnR5yq1/A33BU5RwYuEB5VktvgOFJInfsrakTHjDynrA5h5OLm15n22kRCUhh TaLe48sdZGmXp3W4j4vWt/fK3ASdDlPUup9dkJHTSFUX5KWIRqPBOZap0v++nStI m1sSUJz2l0cZ849z7HDsqTuFaBgYDvhR -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:31 2025 by rpki-client