$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: 7DcI16ippm1f1La2z7Ry3Aa9aPF1YQnoZ5TYb38/D74= Subject key identifier: 02:92:27:3C:DF:93:91:7F:FE:F3:8D:F9:8F:59:1B:4D:74:6A:55:ED Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 0229 Signing time: Wed 05 Nov 2025 02:06:34 +0000 Manifest this update: Wed 05 Nov 2025 02:06:33 +0000 Manifest next update: Wed 12 Nov 2025 02:06:33 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: kqQccWxRORfa4hf+jzMpHM1tAd9wYKGxncGom5bjbxA=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: Nov 5 02:06:33 2025 GMT Not After : Nov 12 02:06:33 2025 GMT Subject: CN=690ab129-137e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:32:71:2b:96:d6:79:23:9b:04:be:1e:c4: a3:a4:d7:cd:d2:14:56:22:5f:35:19:8e:b5:00:9e: 34:b8:72:70:ec:5e:8b:a7:6d:9a:4e:9e:54:bf:9b: 06:58:5a:b3:fe:b1:b0:3f:cb:df:70:f4:65:8c:eb: 5a:72:b0:fd:0b:26:8c:48:63:83:c6:8d:77:34:4f: 78:27:a9:b0:7f:cb:c5:c9:fd:20:38:3c:33:89:df: 72:d3:c9:7e:2f:9e:1c:d4:d2:fb:7b:28:5f:e8:4c: 01:3a:40:7f:16:c9:71:99:f5:05:66:ef:84:e0:51: c6:67:d5:88:43:17:c6:3d:41:20:0a:c9:78:65:42: ac:14:b0:6e:c3:70:e0:cc:39:0f:b7:e0:8c:b9:ab: 54:38:26:a5:d7:63:72:36:5a:fd:c5:43:3e:c6:cb: 76:9a:a1:23:eb:7e:ca:cf:e3:72:11:b6:f8:9f:59: d3:30:82:a5:ad:00:12:5d:20:68:33:94:bc:06:84: 10:0f:a8:a5:5d:3b:93:8d:62:50:d2:30:b1:3e:94: f1:3d:6a:f7:bd:0e:22:8e:2e:df:fc:f8:ce:18:8a: dc:21:88:4f:c6:6b:3d:81:8e:00:8f:6c:fb:94:7a: 74:3d:68:b6:b9:c1:83:04:2d:32:9b:32:ba:f8:88: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:92:27:3C:DF:93:91:7F:FE:F3:8D:F9:8F:59:1B:4D:74:6A:55:ED X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:76:49:a0:83:85:12:f6:61:13:bc:97:1b:b2:6d:00:cf:53: b3:7a:ff:83:20:2e:ee:f2:1f:c8:cc:fb:45:d3:38:fc:c1:80: 90:a5:b5:7b:c8:f4:d9:91:99:66:3b:99:21:0f:ee:ea:ba:92: dd:64:5d:da:b7:1c:fb:3c:1c:9d:f2:4f:be:e3:ad:90:9f:d9: 3f:1a:a6:52:a4:59:9c:00:96:e9:09:29:a0:c7:b6:09:e8:37: c3:65:29:ed:43:c8:78:27:18:f6:29:af:34:c4:58:be:a8:fe: a5:57:cb:ed:7c:fa:b5:2a:00:0a:d3:ed:23:46:2d:e3:14:2d: 69:ed:89:23:f3:94:be:dd:64:d4:d4:02:d0:d9:da:45:4b:ad: 9d:7b:eb:3a:88:ec:62:c9:82:44:8f:30:7c:18:d2:3c:c3:9c: 26:a0:c3:96:5f:87:d0:be:79:ff:ec:6e:6b:ad:4e:bc:db:e9: 41:a0:a5:b5:e8:2c:2c:f2:78:fa:dc:71:3f:ad:72:79:5e:63: fd:fa:68:0e:f7:44:df:bb:e0:9d:64:7d:04:52:4e:f5:00:11: ef:1f:54:ae:1a:41:fd:79:1e:d6:ae:7c:52:b4:77:7b:b9:49: cd:dc:c7:8d:be:c0:46:44:d8:22:83:6d:fe:c0:ac:e5:31:68: 2c:b9:bf:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUxMTA1MDIwNjMzWhcNMjUxMTEyMDIwNjMzWjAYMRYwFAYD VQQDEw02OTBhYjEyOS0xMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34gycSuW1nkjmwS+HsSjpNfN0hRWIl81GY61AJ40uHJw7F6Lp22aTp5Uv5sG WFqz/rGwP8vfcPRljOtacrD9CyaMSGODxo13NE94J6mwf8vFyf0gODwzid9y08l+ L54c1NL7eyhf6EwBOkB/FslxmfUFZu+E4FHGZ9WIQxfGPUEgCsl4ZUKsFLBuw3Dg zDkPt+CMuatUOCal12NyNlr9xUM+xst2mqEj637Kz+NyEbb4n1nTMIKlrQASXSBo M5S8BoQQD6ilXTuTjWJQ0jCxPpTxPWr3vQ4iji7f/PjOGIrcIYhPxms9gY4Aj2z7 lHp0PWi2ucGDBC0ymzK6+IhTwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKSJzzf k5F//vON+Y9ZG010alXtMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVdkmgg4US9mETvJcbsm0Az1Ozev+DIC7u8h/IzPtF0zj8wYCQpbV7 yPTZkZlmO5khD+7qupLdZF3atxz7PByd8k++462Qn9k/GqZSpFmcAJbpCSmgx7YJ 6DfDZSntQ8h4Jxj2Ka80xFi+qP6lV8vtfPq1KgAK0+0jRi3jFC1p7Ykj85S+3WTU 1ALQ2dpFS62de+s6iOxiyYJEjzB8GNI8w5wmoMOWX4fQvnn/7G5rrU682+lBoKW1 6Cws8nj63HE/rXJ5XmP9+mgO90Tfu+CdZH0EUk71ABHvH1SuGkH9eR7WrnxStHd7 uUnN3MeNvsBGRNgig23+wKzlMWgsub8u -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:14 2025 by rpki-client