$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: HtlFCzaHfVDTR13xaruLY2GnfbWJE9khuADWbj2bI8A= Subject key identifier: B6:9F:2F:00:BB:74:BB:B8:AC:7D:53:3C:EE:D0:09:BE:D8:E2:73:18 Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 01F5 Signing time: Sun 19 Oct 2025 04:50:30 +0000 Manifest this update: Sun 19 Oct 2025 04:50:29 +0000 Manifest next update: Sun 26 Oct 2025 04:50:29 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: YlMYyAoNv0Zj+JTApyQ6VYdiXvh/JJAWuyooMJbpqb8=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Oct 19 04:50:29 2025 GMT Not After : Oct 26 04:50:29 2025 GMT Subject: CN=68f46e15-d30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:c6:09:ea:bc:3e:65:e3:05:a1:8c:ca:01: e6:7e:37:6e:6d:98:d3:85:43:4d:da:e3:bf:20:cf: 12:25:36:2b:68:4b:59:04:07:d2:b6:d9:7b:d2:8d: 90:01:0e:81:49:95:b7:e0:b7:f4:c8:62:b6:a1:b9: 2c:94:f0:32:92:cf:68:37:18:50:3a:ae:7e:21:24: b3:a0:16:18:71:2b:fd:ea:1f:a4:83:6d:01:42:6d: f6:1e:d0:29:43:64:65:2a:38:94:11:92:4d:29:67: d5:5c:a0:7e:08:12:17:c0:d6:ea:12:ee:d4:92:ed: 18:db:8b:21:69:e5:c0:98:24:14:6d:52:79:ca:03: 1c:2e:30:9c:be:26:93:c9:1a:fe:38:56:90:58:f9: 32:68:b7:7e:20:18:36:dd:45:92:aa:07:51:69:48: ef:5a:d1:0e:33:6a:c2:c7:0b:f3:1d:e1:36:a9:3b: 31:c5:14:f1:3a:f6:67:7f:fc:34:a1:df:b2:b7:4e: 2a:4f:08:43:b4:a5:b0:61:64:cd:6a:a8:ae:60:ba: b9:14:96:a8:eb:ad:63:fd:25:0b:ff:69:26:c2:ac: 43:d9:26:87:60:8d:94:21:d8:a8:fe:ef:fa:62:0d: 69:f4:d8:69:1b:c9:21:cb:a4:24:bf:cc:63:1e:26: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9F:2F:00:BB:74:BB:B8:AC:7D:53:3C:EE:D0:09:BE:D8:E2:73:18 X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:4e:a6:db:a0:cb:73:22:1e:f9:b3:60:74:5b:ff:a8:71:73: 9c:4b:05:ce:aa:01:81:96:ff:dc:cd:8a:d2:07:ca:84:b6:8b: fa:c9:5c:0d:ad:29:ee:8f:0c:d1:9a:2f:42:93:aa:d3:93:76: de:ad:20:ff:b3:fa:a3:e3:54:f0:b3:95:8d:45:b1:c7:9f:ab: 9d:bc:b8:13:e3:4a:3d:82:47:be:c8:f6:17:8a:68:21:2a:16: e0:20:20:8f:71:a8:ee:56:29:f7:4f:4a:2b:97:3c:56:49:de: d5:79:d8:69:a7:77:c4:10:75:5f:e3:cf:0b:48:4c:95:01:65: cd:d8:8f:a6:76:a1:ed:29:57:21:56:e2:00:57:63:66:6b:d3: 3f:b6:cb:58:c1:54:0b:65:f4:76:01:2c:74:ab:b7:0d:b9:fe: e5:c9:60:39:71:33:df:b4:0a:a5:1f:3b:1b:d0:7c:48:22:3a: 7c:bb:45:f1:30:0e:ac:28:7f:16:0f:e7:f7:e7:fe:87:97:9c: 25:5a:01:67:13:98:e0:24:ad:93:64:d2:05:6c:74:ec:2a:d6: 12:e5:ab:ae:5a:83:ac:08:c1:a6:b0:96:94:af:36:47:68:29: db:fb:f2:80:a2:e0:f2:3f:83:c5:ca:14:16:da:f4:fd:43:67: 2c:5c:4d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjUxMDE5MDQ1MDI5WhcNMjUxMDI2MDQ1MDI5WjAYMRYwFAYD VQQDEw02OGY0NmUxNS1kMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaDGCeq8PmXjBaGMygHmfjdubZjThUNN2uO/IM8SJTYraEtZBAfSttl70o2Q AQ6BSZW34Lf0yGK2obkslPAyks9oNxhQOq5+ISSzoBYYcSv96h+kg20BQm32HtAp Q2RlKjiUEZJNKWfVXKB+CBIXwNbqEu7Uku0Y24shaeXAmCQUbVJ5ygMcLjCcviaT yRr+OFaQWPkyaLd+IBg23UWSqgdRaUjvWtEOM2rCxwvzHeE2qTsxxRTxOvZnf/w0 od+yt04qTwhDtKWwYWTNaqiuYLq5FJao661j/SUL/2kmwqxD2SaHYI2UIdio/u/6 Yg1p9NhpG8khy6Qkv8xjHibi7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLafLwC7 dLu4rH1TPO7QCb7Y4nMYMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlTqbboMtzIh75s2B0W/+ocXOcSwXOqgGBlv/czYrSB8qEtov6yVwN rSnujwzRmi9Ck6rTk3berSD/s/qj41Tws5WNRbHHn6udvLgT40o9gke+yPYXimgh KhbgICCPcajuVin3T0orlzxWSd7Vedhpp3fEEHVf488LSEyVAWXN2I+mdqHtKVch VuIAV2Nma9M/tstYwVQLZfR2ASx0q7cNuf7lyWA5cTPftAqlHzsb0HxIIjp8u0Xx MA6sKH8WD+f35/6Hl5wlWgFnE5jgJK2TZNIFbHTsKtYS5auuWoOsCMGmsJaUrzZH aCnb+/KAouDyP4PFyhQW2vT9Q2csXE0i -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:06 2025 by rpki-client