$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json) Hash identifier: 2KENFcIYEEh8BEo5rOaB0Bmv/OhvHwNb1DqSAv9ct6I= Subject key identifier: 50:34:B5:F1:87:75:C3:1A:B0:56:01:09:62:B2:15:E4:51:DF:7A:46 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft Manifest number: 0280 Signing time: Sun 19 Oct 2025 03:50:18 +0000 Manifest this update: Sun 19 Oct 2025 03:50:17 +0000 Manifest next update: Sun 26 Oct 2025 03:50:17 +0000 Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: 7iQAc2AfsyEvKGEzvk43Par3BLAdOJSZrmdTCqDPzfk=) 2: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Oct 19 03:50:17 2025 GMT Not After : Oct 26 03:50:17 2025 GMT Subject: CN=68f45ff9-6ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:7a:e7:67:8a:6b:a2:29:e9:17:73:79:4d: 80:8b:3a:4f:80:f7:44:49:6e:5a:0a:a4:e6:92:95: 95:5c:4e:85:bd:a6:93:fd:57:19:a9:9e:00:be:83: f8:01:86:eb:7d:20:b3:bc:6c:ad:a1:ef:b5:e0:4f: 63:01:d3:43:34:ca:06:d4:3b:fc:2a:24:74:8b:38: 96:e5:67:64:ce:3d:26:60:b0:14:c9:bf:21:b0:b2: 10:6b:bd:67:27:c3:70:df:f3:87:46:3f:35:59:1a: 35:a4:ef:b7:00:a8:18:39:e5:e8:24:46:63:11:73: 02:2e:80:64:b3:8a:c6:8d:56:f3:4e:ad:27:bf:57: 00:6f:d9:4d:a4:5a:9b:61:87:b5:6e:27:a9:ec:5b: 14:d4:6a:56:e7:8b:2a:42:64:be:38:fd:43:81:57: b7:6b:b0:ab:26:f1:37:48:18:2f:0e:66:9e:e4:42: a0:a6:f3:b3:06:bf:20:e3:25:81:c7:a9:4f:c2:8b: 40:53:45:cd:9d:f3:ce:0b:53:ce:0e:b4:5b:6c:43: ce:0a:ea:6d:9b:5a:82:2e:93:aa:9b:c1:cb:ba:2f: 0a:12:e9:a2:f3:6a:85:6d:d9:59:6a:77:72:df:4d: 21:b6:aa:38:ee:ca:f7:4d:0f:e5:b7:f0:87:22:92: 48:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:B5:F1:87:75:C3:1A:B0:56:01:09:62:B2:15:E4:51:DF:7A:46 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e9:a5:2a:78:4f:51:77:0d:3d:d5:1d:58:9c:65:73:41:70: 3b:d4:85:25:95:2f:79:32:06:da:f5:4e:22:83:b4:a9:71:de: a2:3a:cc:e0:5a:85:7a:1e:20:cc:ee:01:f5:f0:7c:e3:a9:a5: a5:d3:29:9b:ce:5b:00:f2:1b:66:57:34:5d:75:dd:8a:23:6e: 1a:2b:89:c7:a6:cc:2c:1f:9c:2e:c9:7a:01:e8:25:a4:ac:76: c4:0e:56:9c:b1:06:49:de:62:57:e8:da:66:f3:05:a8:bf:06: 14:f9:cc:3d:17:94:d8:f7:12:d5:31:d5:56:9e:6f:cb:00:74: ce:e2:86:6c:6c:f4:b6:10:51:09:4d:26:b6:4e:67:0a:51:b5: bf:82:63:e7:ef:e6:72:e6:7e:4f:50:32:9e:14:cd:ae:1f:a7: e0:27:cc:ef:36:ea:6e:8c:55:ff:d3:25:09:90:20:b0:a3:54: 63:a0:ad:e4:05:20:a3:a0:e6:6e:62:4c:12:e1:7e:c0:27:61: f1:e8:d0:bc:88:b2:9a:a2:6e:9f:ab:68:9d:b5:b6:bc:6f:40: e7:69:b7:0d:97:b2:71:f4:32:ba:5b:8f:8d:d8:90:9c:14:80: 44:5b:b5:36:19:b8:f6:dc:f6:14:56:57:ed:24:ee:2b:fa:f9: 56:eb:eb:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUxMDE5MDM1MDE3WhcNMjUxMDI2MDM1MDE3WjAYMRYwFAYD VQQDEw02OGY0NWZmOS02YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunZ652eKa6Ip6RdzeU2AizpPgPdESW5aCqTmkpWVXE6FvaaT/VcZqZ4AvoP4 AYbrfSCzvGytoe+14E9jAdNDNMoG1Dv8KiR0iziW5Wdkzj0mYLAUyb8hsLIQa71n J8Nw3/OHRj81WRo1pO+3AKgYOeXoJEZjEXMCLoBks4rGjVbzTq0nv1cAb9lNpFqb YYe1biep7FsU1GpW54sqQmS+OP1DgVe3a7CrJvE3SBgvDmae5EKgpvOzBr8g4yWB x6lPwotAU0XNnfPOC1PODrRbbEPOCuptm1qCLpOqm8HLui8KEumi82qFbdlZandy 300htqo47sr3TQ/lt/CHIpJI/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA0tfGH dcMasFYBCWKyFeRR33pGMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB16aUqeE9Rdw091R1YnGVzQXA71IUllS95Mgba9U4ig7Spcd6iOszg WoV6HiDM7gH18HzjqaWl0ymbzlsA8htmVzRddd2KI24aK4nHpswsH5wuyXoB6CWk rHbEDlacsQZJ3mJX6Npm8wWovwYU+cw9F5TY9xLVMdVWnm/LAHTO4oZsbPS2EFEJ TSa2TmcKUbW/gmPn7+Zy5n5PUDKeFM2uH6fgJ8zvNupujFX/0yUJkCCwo1RjoK3k BSCjoOZuYkwS4X7AJ2Hx6NC8iLKaom6fq2idtba8b0DnabcNl7Jx9DK6W4+N2JCc FIBEW7U2Gbj23PYUVlftJO4r+vlW6+sG -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:55 2025 by rpki-client