$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: LekaNjMAvDNSHfuxnkq8Iedj7ph9qQJl3jsOUrC47I4= Subject key identifier: 41:BF:F3:CC:BA:CE:BB:55:78:D3:7C:89:26:FC:D9:BD:D2:16:43:36 Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 0772 Signing time: Sat 18 Oct 2025 23:00:28 +0000 Manifest this update: Sat 18 Oct 2025 23:00:27 +0000 Manifest next update: Sat 25 Oct 2025 23:00:27 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: usxtUo9TIcSmcdhOR0vuMQO7I9jOtPbl5vpcEXkLNdo=) 2: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: jS334U9iP0LsvG7IMQzbvCDhrmoJkxnr7mSzJK0aIOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Oct 18 23:00:27 2025 GMT Not After : Oct 25 23:00:27 2025 GMT Subject: CN=68f41c0b-6bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:5a:11:be:83:e2:e2:2e:68:12:db:d9:5a: 25:b1:43:f9:37:b0:36:94:0e:48:5f:f1:c6:6a:74: 2d:6d:09:81:e8:af:e3:fb:bc:3f:f5:61:8d:b6:6b: 86:68:95:19:ea:8b:b9:b3:a7:ce:9e:7c:19:d8:10: 88:de:11:f9:99:a7:bd:2c:ce:d5:bd:b4:de:f8:c7: 4e:95:e6:64:d7:51:f2:97:a2:29:6e:df:0e:75:98: 03:fc:e0:c0:f8:e1:b1:8c:87:cf:a4:e0:d0:f4:6f: 8f:5f:88:5a:0b:a9:38:cc:4e:f9:46:14:8f:36:48: 77:c6:a2:58:e7:88:61:58:82:4e:f1:ae:7a:55:b0: a2:98:fb:3a:d3:6f:40:10:31:5c:e5:92:04:47:6d: e8:df:a2:9b:e5:3e:72:a5:84:25:fe:89:03:94:c1: a4:b3:74:d1:f6:62:9a:c1:14:a4:83:59:a9:64:3e: 61:8c:a6:8c:57:73:cf:26:53:d2:1c:33:68:3d:03: 35:19:7b:b1:17:79:21:d8:ed:1e:0b:60:4b:8a:c5: 01:96:31:21:1d:49:54:4b:06:b1:98:d5:b2:93:fd: fd:76:b3:3b:ee:b4:0f:dc:8e:b2:51:d8:d6:46:f8: ca:1c:c9:9d:67:9c:87:19:18:9a:94:bb:3b:f0:26: 76:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BF:F3:CC:BA:CE:BB:55:78:D3:7C:89:26:FC:D9:BD:D2:16:43:36 X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a1:43:5e:49:5d:3d:22:59:13:0c:53:a7:88:63:fb:2b:64: f7:c6:a1:6d:3e:7a:9a:c0:3b:9d:8b:e0:63:83:fd:8e:33:da: e7:bc:68:67:b2:ec:fe:69:e2:61:fd:86:3c:ac:db:7e:8c:bf: d0:da:e1:d5:52:07:a0:bb:2b:39:ac:06:72:5b:9e:17:a6:77: 8a:c8:e7:6e:e7:c3:b8:7b:bc:28:ec:51:dc:d5:bf:a9:d2:d1: 08:cb:dd:4b:98:0b:26:70:8e:79:00:56:73:fd:0e:2e:80:42: d8:36:16:64:e2:3f:7b:96:d5:74:bd:f9:fa:6d:c4:55:30:4b: 1c:dd:b3:8e:f9:aa:b6:63:37:80:62:ef:0a:75:a8:ea:c9:4f: 0d:f9:94:7b:87:be:c5:e1:dd:bc:0d:45:9f:99:8f:52:7e:c5: 76:43:23:54:3e:6e:2f:5e:46:03:d2:a6:30:b5:be:05:40:25: 93:0d:b1:3e:a0:90:8c:53:a2:86:3c:99:12:35:71:16:99:dc: b4:56:a7:12:b8:07:54:fd:3c:bd:91:3e:62:29:fb:99:f6:4f: f7:b2:d6:52:d8:d2:b1:7b:9c:f9:7e:e1:1e:c0:07:80:f8:6f: 8c:f8:b4:ac:f1:f3:c3:fe:a7:f2:90:c0:54:8f:66:37:8c:d3: 58:80:68:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUxMDE4MjMwMDI3WhcNMjUxMDI1MjMwMDI3WjAYMRYwFAYD VQQDEw02OGY0MWMwYi02YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuNaEb6D4uIuaBLb2VolsUP5N7A2lA5IX/HGanQtbQmB6K/j+7w/9WGNtmuG aJUZ6ou5s6fOnnwZ2BCI3hH5mae9LM7VvbTe+MdOleZk11Hyl6Ipbt8OdZgD/ODA +OGxjIfPpODQ9G+PX4haC6k4zE75RhSPNkh3xqJY54hhWIJO8a56VbCimPs6029A EDFc5ZIER23o36Kb5T5ypYQl/okDlMGks3TR9mKawRSkg1mpZD5hjKaMV3PPJlPS HDNoPQM1GXuxF3kh2O0eC2BLisUBljEhHUlUSwaxmNWyk/39drM77rQP3I6yUdjW RvjKHMmdZ5yHGRialLs78CZ2IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG/88y6 zrtVeNN8iSb82b3SFkM2MB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWoUNeSV09IlkTDFOniGP7K2T3xqFtPnqawDudi+Bjg/2OM9rnvGhn suz+aeJh/YY8rNt+jL/Q2uHVUgeguys5rAZyW54XpneKyOdu58O4e7wo7FHc1b+p 0tEIy91LmAsmcI55AFZz/Q4ugELYNhZk4j97ltV0vfn6bcRVMEsc3bOO+aq2YzeA Yu8KdajqyU8N+ZR7h77F4d28DUWfmY9SfsV2QyNUPm4vXkYD0qYwtb4FQCWTDbE+ oJCMU6KGPJkSNXEWmdy0VqcSuAdU/Ty9kT5iKfuZ9k/3stZS2NKxe5z5fuEewAeA +G+M+LSs8fPD/qfykMBUj2Y3jNNYgGgU -----END CERTIFICATE-----Generated at Tue Oct 21 00:52:54 2025 by rpki-client