$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: kpAfjJdANqvJfARJ5Tb+1CN78p8C7LcvI003QZ0HtSM= Subject key identifier: A7:6A:5B:DC:58:D9:A5:82:72:B0:1C:D5:EA:C4:2C:71:79:11:80:B0 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 1467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 145F Signing time: Sat 18 Oct 2025 17:22:13 +0000 Manifest this update: Sat 18 Oct 2025 17:22:12 +0000 Manifest next update: Sat 25 Oct 2025 17:22:12 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: GZ/hv6/OaB4TOX0BAXFvJ3hLKwp0w4HOpS+mTtaZIU8=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5223 (0x1467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Oct 18 17:22:12 2025 GMT Not After : Oct 25 17:22:12 2025 GMT Subject: CN=68f3ccc5-4dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:2f:fd:45:0c:ab:8b:87:54:8f:01:c2:d7: 73:fa:32:5d:f1:00:fa:eb:0f:eb:c9:14:c6:8d:34: 23:46:13:a3:24:a5:ac:3f:72:52:cd:af:bc:99:68: 5b:c7:3e:44:e4:97:6e:b8:f6:c6:a7:e5:02:56:05: b8:0e:ed:e1:1e:33:a7:dc:4a:23:e5:68:60:46:e2: 72:49:2a:db:6b:44:2a:7f:af:93:71:2d:cd:06:34: 4b:94:e7:d2:aa:7c:7a:87:db:be:c1:42:71:ab:7e: 6f:3e:86:fc:db:5c:64:25:76:9d:c8:7b:2e:28:ad: c6:cf:73:9b:56:a2:60:71:d5:28:d2:f4:b5:f5:90: 72:77:3a:b9:93:b7:1a:c0:cf:0f:27:e0:91:c1:6e: 85:82:89:b7:21:46:e7:fe:ad:fa:2e:4c:8e:8b:08: 7c:93:9c:06:0f:e4:a0:a3:8a:8c:a3:77:e8:7c:37: be:00:38:e6:d9:26:78:9d:8f:20:a5:81:02:53:0c: 95:36:ec:2a:e7:15:cf:3d:c0:bf:47:50:af:6a:f9: 63:58:62:31:a1:ad:65:82:01:d9:0e:ea:9b:8a:58: 8e:c2:b1:dc:7a:be:00:cc:8b:b7:af:12:f2:6a:e8: 96:25:ad:c0:b8:ef:ae:91:e2:ee:bb:d8:9c:88:6c: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:5B:DC:58:D9:A5:82:72:B0:1C:D5:EA:C4:2C:71:79:11:80:B0 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:90:9a:8e:8d:af:c4:62:ae:01:7c:c1:34:06:54:1f:7c:13: e5:d9:07:4e:da:09:ee:83:c3:71:31:96:34:71:4b:3c:63:af: aa:64:4b:43:72:0c:27:5f:df:2f:bc:c6:ee:00:a9:b6:71:93: 99:a1:ce:e3:f0:a8:ce:7a:16:57:c4:7b:ae:b4:78:37:64:2c: ca:99:f4:32:91:ec:51:2e:b0:96:d5:3f:83:11:cd:7d:58:4a: b9:e2:03:d3:b1:3a:46:f6:7e:68:05:80:83:ec:a4:8d:a1:ee: 1a:bd:52:52:22:5a:22:25:d8:be:38:5c:f5:33:83:d4:b7:88: 8f:68:e3:cb:99:df:7c:f2:97:c6:f2:40:3e:48:16:11:7c:af: 8c:79:b7:af:61:cf:96:2c:0d:1c:c3:fb:e6:66:79:90:84:04: e4:1d:ce:66:ae:34:9e:6d:d0:4a:1d:36:f7:51:0c:08:4c:a8: 18:e3:72:51:95:a6:38:cd:6e:9e:f7:04:04:bd:21:a4:1f:ac: 8f:26:ea:89:49:6e:10:ed:1d:91:58:3a:bb:44:65:df:65:bc: e0:56:31:e9:7b:ac:89:c6:3a:87:2f:6b:82:41:ea:41:3a:16: 96:2e:f4:68:23:28:88:e3:e1:cc:f0:22:f6:cc:b8:1f:f6:c8: 75:f6:34:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUxMDE4MTcyMjEyWhcNMjUxMDI1MTcyMjEyWjAYMRYwFAYD VQQDEw02OGYzY2NjNS00ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzywv/UUMq4uHVI8Bwtdz+jJd8QD66w/ryRTGjTQjRhOjJKWsP3JSza+8mWhb xz5E5JduuPbGp+UCVgW4Du3hHjOn3Eoj5WhgRuJySSrba0Qqf6+TcS3NBjRLlOfS qnx6h9u+wUJxq35vPob821xkJXadyHsuKK3Gz3ObVqJgcdUo0vS19ZBydzq5k7ca wM8PJ+CRwW6Fgom3IUbn/q36LkyOiwh8k5wGD+Sgo4qMo3fofDe+ADjm2SZ4nY8g pYECUwyVNuwq5xXPPcC/R1CvavljWGIxoa1lggHZDuqbiliOwrHcer4AzIu3rxLy auiWJa3AuO+ukeLuu9iciGz8sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdqW9xY 2aWCcrAc1erELHF5EYCwMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdkJqOja/EYq4BfME0BlQffBPl2QdO2gnug8NxMZY0cUs8Y6+qZEtD cgwnX98vvMbuAKm2cZOZoc7j8KjOehZXxHuutHg3ZCzKmfQykexRLrCW1T+DEc19 WEq54gPTsTpG9n5oBYCD7KSNoe4avVJSIloiJdi+OFz1M4PUt4iPaOPLmd988pfG 8kA+SBYRfK+MebevYc+WLA0cw/vmZnmQhATkHc5mrjSebdBKHTb3UQwITKgY43JR laY4zW6e9wQEvSGkH6yPJuqJSW4Q7R2RWDq7RGXfZbzgVjHpe6yJxjqHL2uCQepB OhaWLvRoIyiI4+HM8CL2zLgf9sh19jS3 -----END CERTIFICATE-----Generated at Mon Oct 20 10:50:02 2025 by rpki-client