$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: hvGOsJ4XJl5FFr+Xpg4nvJmx+aDUv76CDslYGTsWKIY= Subject key identifier: E7:42:BB:52:78:B3:F0:2B:BF:00:1E:A0:0D:69:83:CD:59:C4:17:96 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 0349 Signing time: Sun 19 Oct 2025 03:03:26 +0000 Manifest this update: Sun 19 Oct 2025 03:03:26 +0000 Manifest next update: Sun 26 Oct 2025 03:03:26 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: exBe5JYrNHfCfpKL1g0ht7Tj6EqXTzZSbKaItEenuvM=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: mRRgwNA+PP2GD4RfPaz1cyaWGNrkL/T4dyult2MIxPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Oct 19 03:03:26 2025 GMT Not After : Oct 26 03:03:26 2025 GMT Subject: CN=68f454fe-45ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:47:5d:6a:45:15:73:05:9a:a7:21:fe:3b: 97:99:45:98:a9:33:71:9d:0f:9b:90:7d:1c:e5:aa: f7:23:de:cc:16:ff:37:a5:9f:61:35:37:e8:e8:ff: 37:f8:51:09:4f:0c:9c:33:5c:3d:69:b8:3e:8b:a0: eb:84:6f:9a:47:35:bc:f1:eb:cd:e7:d1:3d:64:85: 7c:d0:b1:55:27:09:d8:31:f2:cd:9b:8b:d8:93:69: 13:2a:9b:1e:21:f2:fc:b4:b6:cd:b0:ed:c6:b8:dc: cf:68:2c:3d:ac:86:a1:96:4b:6d:5c:2b:de:7b:ec: c9:6a:6f:ec:cf:eb:f1:0c:97:e5:d4:7d:80:83:71: b5:b6:f5:50:d6:d0:30:d4:44:7f:f9:20:3f:5e:5f: 06:5a:de:81:e3:82:ca:e7:51:6c:17:ce:9e:76:fa: 44:80:97:75:0f:97:57:b4:fa:05:15:14:49:42:94: d9:8b:b2:55:09:80:d6:aa:6f:96:26:93:3e:99:cb: e1:eb:f1:85:f8:ec:99:59:21:db:7b:17:b5:58:1d: 28:4d:37:47:b6:c2:8f:43:85:a3:b8:af:c0:e0:26: c5:c8:b3:28:fb:bb:03:8a:34:bc:74:84:f2:8e:1e: a9:11:96:4f:21:fd:3c:80:cf:9b:01:8a:ef:9d:8f: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:BB:52:78:B3:F0:2B:BF:00:1E:A0:0D:69:83:CD:59:C4:17:96 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cc:60:ee:27:84:b6:4a:b5:00:f6:a7:b9:0e:ab:66:db:81: 15:ab:4b:24:b6:99:28:e9:35:3f:10:80:c5:07:b3:57:d2:4e: cb:66:cc:9e:45:7b:c2:45:37:cf:32:8a:5d:1e:2f:21:5d:f1: 2d:1c:5e:52:ed:88:b7:f5:d8:01:01:7b:a4:ce:22:48:2f:05: fd:f8:ac:7d:83:4c:12:d3:72:cb:fd:b2:32:79:1e:9d:a6:d8: fa:3a:81:fd:67:13:15:bd:7f:21:4c:6d:4f:64:26:88:38:6d: 1f:1a:39:7a:8c:78:31:aa:f5:bf:de:15:f8:9e:7c:6d:fd:0c: 67:47:be:74:b6:b1:a0:10:0f:57:d6:4e:68:3b:94:25:d5:a6: a7:07:98:2c:26:63:3c:b6:5d:a1:75:04:0c:18:7c:4c:3b:dc: 4c:a9:d4:0c:39:41:24:7c:47:53:61:ab:1b:e4:9d:f6:2a:bb: b7:4d:0b:8c:65:b3:03:48:55:0b:5e:05:f1:cc:d3:50:2e:8e: 51:c8:8d:4c:5e:2c:72:b1:3f:d3:a9:78:f2:66:36:44:01:07: a1:47:c6:0b:35:f7:d0:ac:31:01:46:3d:14:fe:bd:25:01:55: 96:0d:ee:b4:22:1a:01:8f:35:a9:ff:a2:d0:18:a5:2a:96:8c: 12:27:62:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUxMDE5MDMwMzI2WhcNMjUxMDI2MDMwMzI2WjAYMRYwFAYD VQQDEw02OGY0NTRmZS00NWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPRHXWpFFXMFmqch/juXmUWYqTNxnQ+bkH0c5ar3I97MFv83pZ9hNTfo6P83 +FEJTwycM1w9abg+i6DrhG+aRzW88evN59E9ZIV80LFVJwnYMfLNm4vYk2kTKpse IfL8tLbNsO3GuNzPaCw9rIahlkttXCvee+zJam/sz+vxDJfl1H2Ag3G1tvVQ1tAw 1ER/+SA/Xl8GWt6B44LK51FsF86edvpEgJd1D5dXtPoFFRRJQpTZi7JVCYDWqm+W JpM+mcvh6/GF+OyZWSHbexe1WB0oTTdHtsKPQ4WjuK/A4CbFyLMo+7sDijS8dITy jh6pEZZPIf08gM+bAYrvnY8+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdCu1J4 s/ArvwAeoA1pg81ZxBeWMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7zGDuJ4S2SrUA9qe5Dqtm24EVq0sktpko6TU/EIDFB7NX0k7LZsye RXvCRTfPMopdHi8hXfEtHF5S7Yi39dgBAXukziJILwX9+Kx9g0wS03LL/bIyeR6d ptj6OoH9ZxMVvX8hTG1PZCaIOG0fGjl6jHgxqvW/3hX4nnxt/QxnR750trGgEA9X 1k5oO5Ql1aanB5gsJmM8tl2hdQQMGHxMO9xMqdQMOUEkfEdTYasb5J32Kru3TQuM ZbMDSFULXgXxzNNQLo5RyI1MXixysT/TqXjyZjZEAQehR8YLNffQrDEBRj0U/r0l AVWWDe60IhoBjzWp/6LQGKUqlowSJ2I5 -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:13 2025 by rpki-client