$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json) Hash identifier: uC7zCHF6LE4DTC+bGQSJ25+UvIgm1iyVmG3M4dYe7CY= Subject key identifier: D0:34:9D:85:F1:3F:99:F8:A1:29:7E:9F:78:B7:6E:7D:A9:C1:E8:07 Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft Manifest number: 32 Signing time: Sun 19 Oct 2025 11:08:35 +0000 Manifest this update: Sun 19 Oct 2025 11:08:34 +0000 Manifest next update: Sun 26 Oct 2025 11:08:34 +0000 Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: 57ufdfb2WQxreLEcgwvTK1PpTeJdOhCfGsebrppvTwE=) 2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: YXoQ9r4tej6CnG1FdK26UeZMqNkqakqvZSbUkeab5Z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Validity Not Before: Oct 19 11:08:34 2025 GMT Not After : Oct 26 11:08:34 2025 GMT Subject: CN=68f4c6b2-2083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:5b:ca:a4:93:65:9c:3a:5a:2e:c5:b1:8f: 1c:86:de:a3:7d:8b:0c:d6:54:a6:5d:5a:50:2a:fb: f4:31:98:d4:60:f2:d4:6c:f4:c5:16:45:53:c0:92: fc:1b:cd:2c:24:81:02:dd:7b:1d:16:8b:fe:9e:0e: 24:df:23:76:30:45:ac:0b:fb:bf:7c:25:3c:40:37: 18:15:a2:f8:83:90:37:ea:8e:8c:97:8c:14:4d:7d: 0e:07:59:68:19:e1:71:17:47:e6:c7:fd:96:d3:63: d2:27:29:2d:3f:c3:b7:26:5d:19:84:81:4c:16:ab: fe:71:8e:42:0a:0d:3e:3e:26:9c:ab:13:fb:15:1d: 0f:98:13:8a:bb:d8:da:69:a8:89:f6:35:e4:da:93: 5c:40:95:8c:a8:b0:92:18:1b:d9:11:1b:1d:cd:9c: ae:fd:e9:b7:16:98:9c:b0:e9:8f:bf:15:68:4e:a4: e2:fb:d7:74:f3:cb:25:1c:a6:fb:f8:67:2c:99:b5: 1d:2a:3d:f5:48:e8:ad:20:22:66:58:ed:a4:a6:a5: 43:f3:f7:fb:11:af:a4:33:55:6e:3a:62:fa:7b:e9: df:22:17:6f:0b:ca:f4:d3:49:17:90:82:0c:23:dc: c2:01:67:ad:34:d0:cc:31:6c:f4:38:03:11:9e:2b: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:9D:85:F1:3F:99:F8:A1:29:7E:9F:78:B7:6E:7D:A9:C1:E8:07 X509v3 Authority Key Identifier: keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:23:3c:15:1f:f2:db:2d:38:e7:8c:55:8d:1e:94:36:3f:10: 05:04:2b:12:37:86:74:1d:14:e6:83:77:af:0c:e1:56:e1:b0: d9:1a:f5:ca:5f:39:d1:ac:5e:37:47:9e:bb:fc:08:a1:88:16: d8:83:71:11:20:91:4b:54:58:ee:21:36:7c:64:91:f8:01:50: 4b:5c:cf:ac:b5:7e:f0:e5:e2:43:8d:40:1d:54:35:84:48:7f: b7:92:66:ac:4e:6b:ed:ae:a8:e6:f4:43:cf:97:20:08:02:ad: a7:43:a4:45:23:49:8d:b0:d3:50:bf:e3:71:3a:21:a1:79:c5: 44:b3:fc:91:3a:7a:0c:e0:a7:75:78:ad:68:f3:3a:67:ce:ae: 97:e3:89:df:43:ad:22:99:2b:c7:ce:a3:51:91:e3:62:3a:08: 4b:13:95:a4:ef:e4:7a:09:09:24:ab:41:99:b6:10:46:36:21: c1:fb:8e:da:be:ee:72:5c:93:64:f4:e6:96:70:28:73:26:7f: 99:9f:d3:fb:b3:06:55:6c:b1:7d:25:a4:d8:04:c9:5f:e5:cf: f6:73:ad:8b:cb:1f:3a:8f:3f:85:5f:53:61:b6:70:01:aa:98: 9a:76:96:05:0f:f2:f1:93:d9:fa:e6:10:88:ba:0b:7d:24:84: 0f:d7:ee:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMzY2MjJGOTkwMEI0NkFBREZDRDA1NDY0RjEwRDQyQjEz MDYyNTE3NjAeFw0yNTEwMTkxMTA4MzRaFw0yNTEwMjYxMTA4MzRaMBgxFjAUBgNV BAMTDTY4ZjRjNmIyLTIwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGfVvKpJNlnDpaLsWxjxyG3qN9iwzWVKZdWlAq+/QxmNRg8tRs9MUWRVPAkvwb zSwkgQLdex0Wi/6eDiTfI3YwRawL+798JTxANxgVoviDkDfqjoyXjBRNfQ4HWWgZ 4XEXR+bH/ZbTY9InKS0/w7cmXRmEgUwWq/5xjkIKDT4+JpyrE/sVHQ+YE4q72Npp qIn2NeTak1xAlYyosJIYG9kRGx3NnK796bcWmJyw6Y+/FWhOpOL713TzyyUcpvv4 ZyyZtR0qPfVI6K0gImZY7aSmpUPz9/sRr6QzVW46Yvp76d8iF28LyvTTSReQggwj 3MIBZ6000MwxbPQ4AxGeK8VbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0DSdhfE/ mfihKX6feLdufanB6AcwHwYDVR0jBBgwFoAUNmIvmQC0aq380FRk8Q1CsTBiUXYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0I1NDhEQkUyNjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEzODBGUms4UTFDc1RCaVVY WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTm1Jdm1RQzBhcTM4MEZSazhRMUNzVEJpVVhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0I1NDhEQkUyNjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEz ODBGUms4UTFDc1RCaVVYWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0jPBUf8tstOOeMVY0elDY/EAUEKxI3hnQdFOaDd68M4VbhsNka9cpf OdGsXjdHnrv8CKGIFtiDcREgkUtUWO4hNnxkkfgBUEtcz6y1fvDl4kONQB1UNYRI f7eSZqxOa+2uqOb0Q8+XIAgCradDpEUjSY2w01C/43E6IaF5xUSz/JE6egzgp3V4 rWjzOmfOrpfjid9DrSKZK8fOo1GR42I6CEsTlaTv5HoJCSSrQZm2EEY2IcH7jtq+ 7nJck2T05pZwKHMmf5mf0/uzBlVssX0lpNgEyV/lz/ZzrYvLHzqPP4VfU2G2cAGq mJp2lgUP8vGT2frmEIi6C30khA/X7oI= -----END CERTIFICATE-----Generated at Tue Oct 21 08:55:48 2025 by rpki-client