$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json) Hash identifier: +c1gnI94vGP8+gIX9lcuF2xAZ6UKsekQsLkRc6GBZHI= Subject key identifier: 0C:C2:37:1F:6E:42:CC:F1:7F:CE:F6:D0:4B:45:02:B9:E6:CD:49:21 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft Manifest number: 01A8 Signing time: Sun 19 Oct 2025 05:48:35 +0000 Manifest this update: Sun 19 Oct 2025 05:48:34 +0000 Manifest next update: Sun 26 Oct 2025 05:48:34 +0000 Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: yTqVJjjacdhgjP8Tw/VIy2KY3Q9ZnZGRT6ne8pilnPU=) 2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 8GoJZpCZ9P4ckdBt/ZtHhmXHWFZw1X3kEDMJv2TH3VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Oct 19 05:48:34 2025 GMT Not After : Oct 26 05:48:34 2025 GMT Subject: CN=68f47bb3-d804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:8f:49:d7:f7:13:a4:58:24:6d:26:f4:65: d5:50:42:e6:2a:4b:76:d8:aa:96:38:1a:7a:99:cf: 07:61:ee:b4:ad:4d:73:68:22:bd:bd:67:d6:94:f1: c4:a9:05:d0:f1:7e:2f:f6:d4:1e:e4:4f:c9:aa:20: 21:04:e5:a2:e5:56:12:05:d7:ac:72:6d:a6:2a:cf: ad:65:9b:f2:92:55:72:46:cf:3f:15:08:69:5d:0d: 77:fb:fb:20:2e:0e:39:da:46:e6:7e:d9:63:0d:97: 0f:8a:01:f9:63:8a:2d:69:4b:8d:22:ec:de:34:79: b3:cd:47:92:6c:c3:00:1a:e4:96:db:8e:1e:b5:c6: 8c:74:29:75:9b:d3:1c:03:92:08:27:ff:4f:0d:d0: ec:db:1a:a4:05:37:4f:01:c8:43:3d:39:0e:db:78: 5c:ae:77:82:c8:f6:1e:bf:43:97:8a:99:fa:cb:28: 3e:31:92:a2:f9:25:69:89:e9:a3:21:ea:a9:9f:7b: 57:e4:02:5d:28:d0:7a:6f:fa:80:4a:b6:63:9a:16: 34:14:ac:21:30:c2:d1:6b:1a:42:7d:94:c3:42:51: 74:ce:2c:7d:ea:89:4d:e3:62:19:28:ac:70:f1:ac: 6b:bc:d0:36:db:a7:0b:72:e2:86:f5:3b:03:65:98: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C2:37:1F:6E:42:CC:F1:7F:CE:F6:D0:4B:45:02:B9:E6:CD:49:21 X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:55:92:fa:ff:96:01:ac:20:3e:80:20:c2:5c:41:1a:19:85: da:dd:d5:8e:a0:c0:ed:11:f3:dc:af:8d:bf:1c:0a:74:cb:03: d8:1a:2f:82:0b:44:ee:81:e0:6e:4c:f2:17:17:c6:b3:4f:8f: 46:1d:80:f6:ea:ef:90:8b:8f:4a:db:2f:f5:98:a6:ea:10:42: f8:95:47:9f:31:e0:86:39:79:24:a8:36:63:ac:0b:a7:a4:d0: 72:66:8a:83:58:28:0a:6d:d7:ac:1d:11:6a:da:66:7a:9d:15: 55:46:5f:68:51:c0:a3:4f:33:da:5d:be:5f:46:74:bf:91:81: c6:21:0d:83:86:2c:2c:cb:88:a3:95:5f:7f:72:48:1d:98:29: 37:12:fd:6c:c6:22:39:36:17:c8:bc:ae:40:87:aa:54:13:44: cf:cd:77:27:70:c1:be:16:5d:24:56:cc:45:6e:96:f6:5b:d0: c0:f4:42:8c:e7:a9:aa:90:a8:5a:d5:48:77:00:05:47:14:3e: a0:f2:5f:20:d1:61:f7:0a:5a:04:d3:6b:8a:08:94:e0:4a:73: 91:27:0d:70:50:b9:fb:cd:7a:58:bc:7e:c9:a1:70:d6:1f:f7: 4a:fa:f0:12:5c:1e:d3:67:c0:88:2f:55:19:55:3e:19:90:41: bb:67:bb:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUxMDE5MDU0ODM0WhcNMjUxMDI2MDU0ODM0WjAYMRYwFAYD VQQDEw02OGY0N2JiMy1kODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pOPSdf3E6RYJG0m9GXVUELmKkt22KqWOBp6mc8HYe60rU1zaCK9vWfWlPHE qQXQ8X4v9tQe5E/JqiAhBOWi5VYSBdescm2mKs+tZZvyklVyRs8/FQhpXQ13+/sg Lg452kbmftljDZcPigH5Y4otaUuNIuzeNHmzzUeSbMMAGuSW244etcaMdCl1m9Mc A5IIJ/9PDdDs2xqkBTdPAchDPTkO23hcrneCyPYev0OXipn6yyg+MZKi+SVpiemj Ieqpn3tX5AJdKNB6b/qASrZjmhY0FKwhMMLRaxpCfZTDQlF0zix96olN42IZKKxw 8axrvNA226cLcuKG9TsDZZjhTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzCNx9u Qszxf8720EtFArnmzUkhMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkVZL6/5YBrCA+gCDCXEEaGYXa3dWOoMDtEfPcr42/HAp0ywPYGi+C C0TugeBuTPIXF8azT49GHYD26u+Qi49K2y/1mKbqEEL4lUefMeCGOXkkqDZjrAun pNByZoqDWCgKbdesHRFq2mZ6nRVVRl9oUcCjTzPaXb5fRnS/kYHGIQ2Dhiwsy4ij lV9/ckgdmCk3Ev1sxiI5NhfIvK5Ah6pUE0TPzXcncMG+Fl0kVsxFbpb2W9DA9EKM 56mqkKha1Uh3AAVHFD6g8l8g0WH3CloE02uKCJTgSnORJw1wULn7zXpYvH7JoXDW H/dK+vASXB7TZ8CIL1UZVT4ZkEG7Z7sr -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:14 2025 by rpki-client