$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: H+8+JL2zh4z++zJSUtKnYm2ZNS+52r1l4oBDI+OIZIM= Subject key identifier: 9A:68:F2:F1:2D:FD:F7:B3:FE:09:E2:47:4E:02:FC:AA:F0:75:EA:B8 Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 0221 Signing time: Sun 19 Oct 2025 04:19:13 +0000 Manifest this update: Sun 19 Oct 2025 04:19:12 +0000 Manifest next update: Sun 26 Oct 2025 04:19:12 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: 8IBt+IMbvw/wLNUtwr8HxK5g/XBvZGLOKFInr99EjU4=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: Oct 19 04:19:12 2025 GMT Not After : Oct 26 04:19:12 2025 GMT Subject: CN=68f466c0-5194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a0:f4:2c:36:66:3d:07:51:64:cc:91:71:ec: 94:ea:cd:3d:41:1d:f7:82:f7:9a:90:f5:d8:a5:5a: d3:b2:61:96:11:55:a6:31:70:74:b2:a1:9f:ea:3f: 88:b9:30:74:c8:1d:03:13:d3:9c:c6:06:b2:f5:7b: 91:91:43:87:41:e1:a9:43:e8:85:34:00:4c:c7:d7: 29:ea:31:20:14:8e:f1:89:c9:d6:fb:c7:fa:1c:d7: d3:fa:61:16:94:15:34:24:8f:d2:98:d1:61:81:b1: 89:1c:e4:02:ab:63:80:73:4f:3d:c9:a6:ab:ff:1e: dd:52:7f:b1:5a:e6:c0:c7:40:b3:d0:d5:c8:32:d6: d9:55:22:da:32:2e:81:e8:ac:8a:79:01:ac:96:08: 67:ad:e6:c1:b6:4a:e4:3b:05:24:a0:72:a6:30:44: af:63:de:67:e8:1c:a3:f8:28:35:fc:19:60:bd:aa: c8:6b:c6:44:cc:cf:54:23:b1:c1:8c:55:47:37:74: 15:b2:6e:2e:a7:b2:d0:fb:2a:01:95:9f:ef:10:d7: 9d:58:17:ba:02:46:fa:f8:fc:d5:89:0b:ec:a5:ee: 11:49:80:1f:43:b0:f4:2e:87:5c:76:1a:c7:51:ee: 79:a4:32:5d:bb:12:38:57:23:38:66:27:1f:94:1a: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:68:F2:F1:2D:FD:F7:B3:FE:09:E2:47:4E:02:FC:AA:F0:75:EA:B8 X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5f:85:59:bc:6e:74:67:c1:27:87:eb:45:81:be:bc:73:bf: 58:88:f0:7e:5a:c3:1d:c9:94:ec:16:4f:38:c0:2b:f3:52:12: c7:05:b7:74:83:8f:78:e8:7f:f2:25:80:6d:58:31:48:35:86: cb:07:10:48:b7:c5:c4:6a:2e:08:ce:f8:7e:50:6c:56:4e:89: 4c:8a:c4:5d:4a:f0:c5:a5:59:8b:57:64:46:35:f1:05:19:09: 89:48:66:62:e1:cd:3f:62:32:94:c2:f7:73:2d:87:b9:7f:23: 22:4c:82:76:c0:5b:81:30:3d:5d:90:7e:eb:b5:eb:1f:ec:0f: d4:47:f7:8d:fe:9c:58:81:0a:df:16:dc:6e:15:7c:2b:c3:cd: 07:4a:85:37:25:47:8a:e5:f6:5b:29:31:65:f4:04:e2:51:5c: 70:71:ca:40:9f:d5:53:18:6d:68:62:78:0a:12:be:41:d8:01: a9:72:87:b2:ee:93:ea:d3:d7:c1:54:9f:b5:d8:ae:9e:c6:97: 10:03:27:4c:72:5a:14:f3:8f:d4:5d:65:32:e5:ef:7e:01:63: f2:79:86:07:ff:35:0e:6e:18:c5:22:ca:c4:ee:93:44:ab:39: c2:8f:c2:81:d9:e8:1a:9b:0e:b6:00:7e:7b:cd:2b:c0:bd:ab: 61:70:f3:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUxMDE5MDQxOTEyWhcNMjUxMDI2MDQxOTEyWjAYMRYwFAYD VQQDEw02OGY0NjZjMC01MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aD0LDZmPQdRZMyRceyU6s09QR33gveakPXYpVrTsmGWEVWmMXB0sqGf6j+I uTB0yB0DE9Ocxgay9XuRkUOHQeGpQ+iFNABMx9cp6jEgFI7xicnW+8f6HNfT+mEW lBU0JI/SmNFhgbGJHOQCq2OAc089yaar/x7dUn+xWubAx0Cz0NXIMtbZVSLaMi6B 6KyKeQGslghnrebBtkrkOwUkoHKmMESvY95n6Byj+Cg1/BlgvarIa8ZEzM9UI7HB jFVHN3QVsm4up7LQ+yoBlZ/vENedWBe6Akb6+PzViQvspe4RSYAfQ7D0LodcdhrH Ue55pDJduxI4VyM4ZicflBrF7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpo8vEt /fez/gniR04C/Krwdeq4MB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEX4VZvG50Z8Enh+tFgb68c79YiPB+WsMdyZTsFk84wCvzUhLHBbd0 g4946H/yJYBtWDFINYbLBxBIt8XEai4Izvh+UGxWTolMisRdSvDFpVmLV2RGNfEF GQmJSGZi4c0/YjKUwvdzLYe5fyMiTIJ2wFuBMD1dkH7rtesf7A/UR/eN/pxYgQrf FtxuFXwrw80HSoU3JUeK5fZbKTFl9ATiUVxwccpAn9VTGG1oYngKEr5B2AGpcoey 7pPq09fBVJ+12K6expcQAydMcloU84/UXWUy5e9+AWPyeYYH/zUObhjFIsrE7pNE qznCj8KB2egamw62AH57zSvAvathcPMj -----END CERTIFICATE-----Generated at Tue Oct 21 02:54:11 2025 by rpki-client