$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: TKzsdHM+X3Gris4n6q/rXhQ5SuNcxmdxMEf0qRZ1YA4= Subject key identifier: 94:4A:F3:48:FC:F2:D7:08:0B:97:56:A8:5F:65:3A:AA:5A:73:49:55 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 1470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1468 Signing time: Tue 04 Nov 2025 16:59:17 +0000 Manifest this update: Tue 04 Nov 2025 16:59:16 +0000 Manifest next update: Tue 11 Nov 2025 16:59:16 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: oqSvVXPcBcSX/y8vhejCrYWa54dyxm7iKiLBaSj+Mvo=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5232 (0x1470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Nov 4 16:59:16 2025 GMT Not After : Nov 11 16:59:16 2025 GMT Subject: CN=690a30e4-6d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:2c:1a:9f:2f:12:0d:6a:29:7c:ed:4b:f8: ff:a9:04:41:00:79:e5:45:2d:8a:89:00:e9:eb:f9: 8d:90:95:42:8c:72:30:ad:4c:79:9a:f6:5b:43:54: 5f:75:be:5c:33:e2:dc:e8:3f:40:a7:bb:74:d3:9a: aa:db:2a:77:c4:f3:37:30:dc:c2:5b:20:73:fe:83: 1e:ba:d5:c9:be:08:d7:1e:b9:26:f9:35:fc:5c:81: b0:1d:b6:c1:b7:12:fd:50:94:f8:b0:2e:dc:c7:9c: 3b:1e:77:48:10:a0:f7:87:d9:c3:d6:72:de:7c:2b: 2f:6e:ae:87:cf:d3:c6:0f:ab:e9:91:5e:1a:98:dd: aa:62:f3:b5:09:66:99:53:06:8d:0d:c8:17:02:3b: bc:7f:3a:17:10:d2:47:13:82:3d:3d:42:01:40:a3: bc:a2:4d:bb:4e:cd:76:d1:3a:64:88:21:d1:d7:8f: eb:1b:c1:b9:9e:6c:f1:33:95:a3:63:ae:0b:7c:8c: 20:af:9e:2e:c5:d6:7f:6b:6d:f7:99:83:54:9d:30: e9:70:3d:23:43:7d:83:80:73:20:2a:ee:b2:91:87: a4:5f:29:0b:55:33:17:05:57:41:31:a7:e7:12:29: 0b:a9:8b:84:bd:b7:19:43:c7:74:db:8d:e7:88:46: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4A:F3:48:FC:F2:D7:08:0B:97:56:A8:5F:65:3A:AA:5A:73:49:55 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:44:32:31:02:9b:3a:f8:96:5d:ad:4b:74:85:63:8b:3a:70: 62:e8:b9:a8:b1:eb:5d:23:9a:13:6b:8f:90:96:a7:0d:de:4e: 19:b2:86:ed:89:9c:07:e6:1e:c8:7a:3d:55:56:92:4d:80:d1: f3:95:37:5c:0e:8f:0b:84:d3:72:77:10:38:0a:f1:10:1c:ed: d7:d7:9b:c0:cb:89:20:15:46:3a:6f:d6:57:1e:a3:e3:ea:16: 03:95:b2:f3:28:ac:67:b1:7c:d3:89:80:3b:12:d9:a2:f5:ad: 96:f3:33:da:37:76:12:a0:f1:e1:25:2c:62:41:e9:55:63:54: ee:dd:3f:fd:2d:18:9d:d3:28:9a:d3:b3:76:52:ff:e4:8e:08: 73:54:69:5f:21:28:b2:55:58:09:8e:de:4c:dc:b7:cc:20:3b: a7:f6:0a:a5:3d:ae:f9:75:96:3e:9a:45:5c:07:dd:55:90:14: 35:d9:05:34:bf:4b:dd:07:da:04:fd:56:c7:27:72:59:13:e7: e4:a9:33:39:cd:d4:fa:d6:97:73:58:71:33:b2:9d:b1:a3:bc: 94:00:07:71:b1:ef:dc:67:dc:1a:48:5b:4c:4b:2b:66:34:05: f0:43:79:cb:b3:ae:85:0d:b0:20:c4:c7:a7:52:a2:dd:37:8f: 1d:8e:db:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUxMTA0MTY1OTE2WhcNMjUxMTExMTY1OTE2WjAYMRYwFAYD VQQDEw02OTBhMzBlNC02ZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kgsGp8vEg1qKXztS/j/qQRBAHnlRS2KiQDp6/mNkJVCjHIwrUx5mvZbQ1Rf db5cM+Lc6D9Ap7t005qq2yp3xPM3MNzCWyBz/oMeutXJvgjXHrkm+TX8XIGwHbbB txL9UJT4sC7cx5w7HndIEKD3h9nD1nLefCsvbq6Hz9PGD6vpkV4amN2qYvO1CWaZ UwaNDcgXAju8fzoXENJHE4I9PUIBQKO8ok27Ts120TpkiCHR14/rG8G5nmzxM5Wj Y64LfIwgr54uxdZ/a233mYNUnTDpcD0jQ32DgHMgKu6ykYekXykLVTMXBVdBMafn EikLqYuEvbcZQ8d0243niEY+/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRK80j8 8tcIC5dWqF9lOqpac0lVMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzRDIxAps6+JZdrUt0hWOLOnBi6LmosetdI5oTa4+QlqcN3k4Zsobt iZwH5h7Iej1VVpJNgNHzlTdcDo8LhNNydxA4CvEQHO3X15vAy4kgFUY6b9ZXHqPj 6hYDlbLzKKxnsXzTiYA7Etmi9a2W8zPaN3YSoPHhJSxiQelVY1Tu3T/9LRid0yia 07N2Uv/kjghzVGlfISiyVVgJjt5M3LfMIDun9gqlPa75dZY+mkVcB91VkBQ12QU0 v0vdB9oE/VbHJ3JZE+fkqTM5zdT61pdzWHEzsp2xo7yUAAdxse/cZ9waSFtMSytm NAXwQ3nLs66FDbAgxMenUqLdN48djtt1 -----END CERTIFICATE-----Generated at Wed Nov 5 22:00:24 2025 by rpki-client