$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json) Hash identifier: 3hp4Q+hjvTvPjZNMdz5CyplX5x8jHghh40GRbc4Wx60= Subject key identifier: A0:41:E2:0A:4A:D8:A7:F5:56:B6:40:4B:1D:DC:C5:AA:51:18:5D:F0 Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:06:27 +0000 Manifest this update: Sun 19 Oct 2025 11:06:26 +0000 Manifest next update: Sun 26 Oct 2025 11:06:26 +0000 Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: Vy7V9gCcSYy1HAweioXM/dzcVZ2FFA6xrIS4UEVqwvQ=) 2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Validity Not Before: Oct 19 11:06:26 2025 GMT Not After : Oct 26 11:06:26 2025 GMT Subject: CN=68f4c632-ba0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:b8:db:60:60:90:f2:dd:b9:e0:96:66:47: 7b:57:9c:4e:d7:a4:f9:dc:1d:f2:cf:98:3f:62:ad: ed:50:38:9c:f8:e0:18:af:d7:41:87:1c:9f:f1:04: c6:98:97:aa:87:ba:87:8a:d7:b8:41:86:bc:ca:a5: b4:d9:bd:98:4f:33:aa:10:36:50:2b:df:1f:8d:e8: 14:ba:d2:13:42:53:f1:4b:96:51:79:36:bd:6e:99: 7b:c6:1c:26:c9:04:26:0d:6a:94:16:01:97:49:2d: a8:37:7b:2a:bb:ec:22:0f:bd:c7:1c:a9:82:c2:7f: d0:62:0a:5e:e0:c3:48:0f:ba:ae:98:a9:40:6f:ff: d8:20:b3:6b:6d:87:6e:11:4b:02:47:c2:06:33:ec: 6b:5d:da:65:95:ac:25:4f:25:c6:d7:18:57:5d:6f: c8:c4:6e:82:27:f4:a6:00:52:70:8c:a8:97:85:18: f8:7f:7c:2e:5f:e2:41:1c:d9:5a:ea:69:17:cc:aa: ed:0a:fd:57:0f:31:5c:7f:22:e8:1d:c2:cc:eb:79: 5d:3f:47:65:11:51:2c:51:d9:eb:8d:04:9e:3e:24: 1a:d5:4e:37:37:4a:59:e7:a9:60:ee:56:0a:a5:d5: d0:b6:c1:48:cc:75:44:3d:25:fd:28:2b:88:7d:91: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:41:E2:0A:4A:D8:A7:F5:56:B6:40:4B:1D:DC:C5:AA:51:18:5D:F0 X509v3 Authority Key Identifier: keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:0e:48:96:2d:c5:d6:3a:f8:35:be:5e:43:a7:a7:8e:ab:55: c8:c9:2a:76:b9:a6:a3:04:29:5e:62:47:24:54:a2:4c:70:82: ae:0d:1f:8e:d9:16:ee:36:41:03:df:ba:45:34:c4:19:f0:f8: d8:62:74:b7:dd:d0:3e:29:56:56:88:d7:0c:0e:1c:29:17:f8: 85:2b:3c:9f:8c:30:83:e8:23:08:fa:98:e7:44:4d:0a:cf:5f: f0:22:ee:2f:33:c7:59:c1:60:8f:cc:31:17:ac:55:f6:cc:ce: ac:18:e4:0c:21:e9:bf:66:60:fa:15:2c:37:30:d0:1e:5a:f4: 1f:0b:06:41:29:16:58:2e:b5:ac:ea:cd:df:40:9f:54:40:5f: 30:e7:43:09:e5:16:d9:40:27:1b:c4:d4:68:1e:8f:f4:87:4f: 4c:1e:85:f4:46:8d:e9:ce:d3:c7:64:99:a4:a6:c3:c9:39:79: bd:ab:17:cd:6a:21:cd:c6:64:a1:71:e5:a1:dc:19:db:c7:1f: 0c:35:f4:30:cb:3f:07:a1:44:ce:7b:01:d4:65:37:1e:1c:ba: d8:b6:a5:4b:20:69:9a:9a:78:92:12:20:08:56:b6:46:0a:f1: 07:97:ba:1b:6e:bd:28:a3:ad:08:5d:5f:3a:df:10:59:14:ca: e3:48:e5:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjUxNTExMC8GA1UEBRMoMzZEQjQ0RDRDMTU5ODg2NzM4MjE1QTU2MTBCMTEwQzI0 NDg2Q0E1NjAeFw0yNTEwMTkxMTA2MjZaFw0yNTEwMjYxMTA2MjZaMBgxFjAUBgNV BAMTDTY4ZjRjNjMyLWJhMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGJbjbYGCQ8t254JZmR3tXnE7XpPncHfLPmD9ire1QOJz44Biv10GHHJ/xBMaY l6qHuoeK17hBhrzKpbTZvZhPM6oQNlAr3x+N6BS60hNCU/FLllF5Nr1umXvGHCbJ BCYNapQWAZdJLag3eyq77CIPvcccqYLCf9BiCl7gw0gPuq6YqUBv/9ggs2tth24R SwJHwgYz7Gtd2mWVrCVPJcbXGFddb8jEboIn9KYAUnCMqJeFGPh/fC5f4kEc2Vrq aRfMqu0K/VcPMVx/IugdwszreV0/R2URUSxR2euNBJ4+JBrVTjc3SlnnqWDuVgql 1dC2wUjMdUQ9Jf0oK4h9kZ/jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoEHiCkrY p/VWtkBLHdzFqlEYXfAwHwYDVR0jBBgwFoAUNttE1MFZiGc4IVpWELEQwkSGylYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTE1Lzg0QzQ2NzRBNjBD MTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3ls WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnR0RTFNRlppR2M0SVZwV0VMRVF3a1NHeWxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 NTE1Lzg0QzQ2NzRBNjBDMTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdj NElWcFdFTEVRd2tTR3lsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkOSJYtxdY6+DW+XkOnp46rVcjJKna5pqMEKV5iRyRUokxwgq4NH47Z Fu42QQPfukU0xBnw+NhidLfd0D4pVlaI1wwOHCkX+IUrPJ+MMIPoIwj6mOdETQrP X/Ai7i8zx1nBYI/MMResVfbMzqwY5Awh6b9mYPoVLDcw0B5a9B8LBkEpFlgutazq zd9An1RAXzDnQwnlFtlAJxvE1Ggej/SHT0wehfRGjenO08dkmaSmw8k5eb2rF81q Ic3GZKFx5aHcGdvHHww19DDLPwehRM57AdRlNx4cuti2pUsgaZqaeJISIAhWtkYK 8QeXuhtuvSijrQhdXzrfEFkUyuNI5RI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:31 2025 by rpki-client