$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json) Hash identifier: 4qm1v8YVy/Tr5wXmJAsvq/KpwVW333ZquL+nUUMgfVc= Subject key identifier: 20:63:DF:F5:19:FA:83:43:29:32:8D:16:8D:2F:35:11:25:13:38:D3 Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft Manifest number: 014E Signing time: Sun 19 Oct 2025 07:02:57 +0000 Manifest this update: Sun 19 Oct 2025 07:02:57 +0000 Manifest next update: Sun 26 Oct 2025 07:02:57 +0000 Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: 8oc8wyNKLahbpl4C/uwCHgOII20uHqlfFbr+5fmuE5Y=) 2: 6241069011E111EFBBB70B32C4F9AE02.roa (hash: 1oT/iS9d2Pt0zquYaFCDfGNU++P67uGYK/ZfWm8Kv/g=) 3: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: ihNWokHlCtMazUN4Q0S1jw6bRWJLab7FqUZHdXu5av8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Validity Not Before: Oct 19 07:02:57 2025 GMT Not After : Oct 26 07:02:57 2025 GMT Subject: CN=68f48d21-83eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:7c:29:4d:53:53:e8:f8:44:f7:d4:86:68: aa:90:f6:7f:d9:15:0c:09:72:36:5c:a3:22:80:9c: 32:18:86:07:ff:5f:b7:99:d7:4e:ee:42:3f:ac:e7: 39:f7:03:8c:0c:5c:42:27:e1:d0:24:e0:4d:6f:3b: 63:3e:51:92:5a:1a:8c:38:db:0b:ac:44:43:e7:43: 92:ea:8f:e9:47:ee:fe:21:19:c3:f9:1b:e1:58:14: 0b:19:2b:64:de:0e:1f:ea:d2:69:ef:5c:30:1e:b2: 1b:f8:1c:53:9b:eb:43:d1:cc:63:62:01:fa:0c:f1: 93:3f:95:39:a6:6c:11:55:d5:d9:22:83:46:6c:14: 14:dd:2f:59:98:dd:26:bc:51:97:60:79:43:c6:93: a6:8e:cc:c3:5d:6f:a1:e8:46:7e:c0:18:a5:96:75: 81:cf:a2:3e:5c:9d:92:6d:77:37:ec:d3:fe:37:7e: 77:81:ac:88:41:51:d2:81:55:24:1f:d5:88:71:2c: 1b:b2:c7:62:42:c8:fb:85:82:75:77:76:e7:99:be: b8:ab:8d:68:da:5c:10:af:95:4e:e2:99:8d:32:4f: da:4c:74:0c:62:f4:8c:d4:b1:9e:15:72:ae:d8:10: 8c:0a:2b:36:9e:c0:41:f0:e6:75:e1:db:33:a0:18: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:DF:F5:19:FA:83:43:29:32:8D:16:8D:2F:35:11:25:13:38:D3 X509v3 Authority Key Identifier: keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:39:61:3b:86:f3:be:99:31:00:52:65:21:0d:6c:aa:49:f0: 1c:db:87:d7:a2:bd:22:4e:5f:6f:11:91:76:5a:72:53:94:bb: 8d:ab:76:32:7e:ba:1c:08:4d:7b:3a:b6:2d:e8:cb:3f:df:0b: e4:72:ff:17:17:ad:08:84:92:b2:5f:74:a3:f6:86:d4:e5:04: 83:7d:eb:16:84:30:6c:fc:4a:27:90:e7:88:7c:b6:3d:11:f1: f0:ab:79:ab:3b:69:44:aa:fd:37:fe:af:58:3b:7b:08:af:30: 4c:ad:5d:d1:3b:eb:d9:fd:d1:69:fc:c4:d0:f2:88:9e:75:b5: bc:fe:b7:a3:d0:3d:59:77:11:4d:6b:c7:18:df:55:45:46:57: 4e:43:e1:35:fb:1d:9c:9e:63:b8:f0:5d:b1:03:12:a6:06:d8: 09:1b:d7:2e:07:35:8c:be:91:44:ad:6c:c5:33:72:7e:3e:42: e8:d7:66:75:03:df:6f:e8:fc:41:a1:1b:a0:5a:82:16:1c:42: f2:ad:31:c8:99:ba:6f:36:7d:a9:ba:55:b6:60:e4:7f:f0:30: a9:11:45:00:43:39:bf:35:56:dd:9c:53:72:2b:04:aa:39:37: d5:48:a9:5f:17:39:de:b4:42:ca:4a:e7:40:9f:bd:a9:83:e3: f0:ee:63:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKDM0NzRDMjUzOTg2MTEwMEFGRDk2M0ExNjNDODAyRDAy NjRGOEVDN0QwHhcNMjUxMDE5MDcwMjU3WhcNMjUxMDI2MDcwMjU3WjAYMRYwFAYD VQQDEw02OGY0OGQyMS04M2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuR8KU1TU+j4RPfUhmiqkPZ/2RUMCXI2XKMigJwyGIYH/1+3mddO7kI/rOc5 9wOMDFxCJ+HQJOBNbztjPlGSWhqMONsLrERD50OS6o/pR+7+IRnD+RvhWBQLGStk 3g4f6tJp71wwHrIb+BxTm+tD0cxjYgH6DPGTP5U5pmwRVdXZIoNGbBQU3S9ZmN0m vFGXYHlDxpOmjszDXW+h6EZ+wBillnWBz6I+XJ2SbXc37NP+N353gayIQVHSgVUk H9WIcSwbssdiQsj7hYJ1d3bnmb64q41o2lwQr5VO4pmNMk/aTHQMYvSM1LGeFXKu 2BCMCis2nsBB8OZ14dszoBg57QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBj3/UZ +oNDKTKNFo0vNRElEzjTMB8GA1UdIwQYMBaAFDR0wlOYYRAK/ZY6FjyALQJk+Ox9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi80REZFNjgyNEI2 QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVBcjlsam9XUElBdEFtVDQ3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi80REZFNjgyNEI2QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVB cjlsam9XUElBdEFtVDQ3SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyOWE7hvO+mTEAUmUhDWyqSfAc24fXor0iTl9vEZF2WnJTlLuNq3Yy frocCE17OrYt6Ms/3wvkcv8XF60IhJKyX3Sj9obU5QSDfesWhDBs/EonkOeIfLY9 EfHwq3mrO2lEqv03/q9YO3sIrzBMrV3RO+vZ/dFp/MTQ8oiedbW8/rej0D1ZdxFN a8cY31VFRldOQ+E1+x2cnmO48F2xAxKmBtgJG9cuBzWMvpFErWzFM3J+PkLo12Z1 A99v6PxBoRugWoIWHELyrTHImbpvNn2pulW2YOR/8DCpEUUAQzm/NVbdnFNyKwSq OTfVSKlfFznetELKSudAn72pg+Pw7mN5 -----END CERTIFICATE-----Generated at Tue Oct 21 12:45:14 2025 by rpki-client