$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: qftGnDysRflHuujQspTVAKxEc60X5ae71+65t+Uwlw8= Subject key identifier: 4C:45:6C:34:8C:32:27:51:5B:C3:18:4D:10:8E:B5:E9:D7:01:68:AC Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 077A Signing time: Tue 04 Nov 2025 21:42:40 +0000 Manifest this update: Tue 04 Nov 2025 21:42:40 +0000 Manifest next update: Tue 11 Nov 2025 21:42:40 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: prFsHUB0ya1oMoEeG+Vc1T7iTh850/2hbhh2dEJ7KnY=) 2: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: jS334U9iP0LsvG7IMQzbvCDhrmoJkxnr7mSzJK0aIOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Nov 4 21:42:40 2025 GMT Not After : Nov 11 21:42:40 2025 GMT Subject: CN=690a7350-c4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:91:ac:49:ca:14:0a:bb:f6:f6:2d:c0:6d: 1d:83:1d:0a:41:c7:5a:e9:9c:ac:38:a4:26:36:f6: f9:61:01:97:95:ef:c2:7c:0e:cb:13:f4:44:38:87: a3:06:c5:0c:da:44:31:0b:5d:8e:4b:0d:3d:e9:70: c5:75:26:12:0b:76:4b:e2:7b:34:35:69:d0:af:34: ef:f4:c8:5b:da:f1:3e:15:81:a7:56:d0:46:84:f7: 9d:9c:8b:da:b2:27:6c:50:d6:be:8e:ac:2c:6b:95: 13:e2:1b:3b:9a:9e:90:bd:02:94:6c:7f:e0:a2:b2: 12:42:5f:71:15:14:01:f7:49:76:a0:3b:0d:9a:7f: 3b:ae:40:0b:d7:21:26:d7:73:d5:5a:98:b4:61:9c: f5:ba:b8:13:39:60:50:2a:58:be:af:24:0f:a8:07: 22:4d:17:c5:1c:47:98:0f:89:1d:60:f5:67:c5:d4: eb:b5:7e:c9:59:09:f0:48:53:16:e4:96:35:8a:39: d6:09:b3:07:a6:d2:8b:57:4e:f2:df:d5:67:43:5a: 59:ac:79:a0:6c:50:3a:fd:76:e2:22:71:e2:2c:d6: 90:d9:f3:4c:d9:33:ce:c2:c6:d2:21:77:af:69:5e: fc:f5:df:c2:fa:ca:0e:4a:d2:14:47:b4:18:d3:7f: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:6C:34:8C:32:27:51:5B:C3:18:4D:10:8E:B5:E9:D7:01:68:AC X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1f:37:3c:f1:67:50:cc:8c:70:7a:b4:ac:55:d5:6c:8d:6d: 7a:5b:84:44:6e:64:12:8d:7b:4f:c2:63:2d:d3:47:15:a1:5c: e5:d4:de:4b:63:e8:69:ec:30:a3:48:ff:69:08:39:78:47:63: e5:da:c1:04:28:8a:6f:05:17:8c:6b:57:7f:53:75:62:21:8f: 2c:27:ac:ca:b6:95:ea:51:00:4a:10:d5:01:75:b8:b2:91:6f: 29:d5:15:42:a1:02:09:24:71:70:49:79:75:69:67:a9:12:27: b7:7f:02:c3:8c:dc:e9:c1:2a:be:65:d4:99:9f:f8:b4:c1:6a: ce:a4:5e:e9:bb:0b:c3:5b:6d:45:5c:cb:92:c6:44:6e:28:81: 48:ce:fc:2e:86:96:4b:f4:c6:cf:99:1c:43:7b:78:9a:09:e5: d6:50:a2:83:12:c5:8a:41:a8:df:46:81:d2:e8:4d:b8:14:69: c4:cf:88:ac:a2:ef:c7:b0:c3:73:9c:fa:91:34:06:93:cb:0c: 13:3d:68:5c:ec:39:b7:8b:df:fc:87:c9:04:9a:bf:98:97:f0: 63:47:fe:51:c5:b5:a3:c7:00:09:72:89:0f:03:37:b8:ec:84: 7a:3a:cf:07:44:4e:81:b2:94:bd:82:f4:9b:49:55:54:73:74: 29:ba:2d:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUxMTA0MjE0MjQwWhcNMjUxMTExMjE0MjQwWjAYMRYwFAYD VQQDEw02OTBhNzM1MC1jNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN2RrEnKFAq79vYtwG0dgx0KQcda6ZysOKQmNvb5YQGXle/CfA7LE/REOIej BsUM2kQxC12OSw096XDFdSYSC3ZL4ns0NWnQrzTv9Mhb2vE+FYGnVtBGhPednIva sidsUNa+jqwsa5UT4hs7mp6QvQKUbH/gorISQl9xFRQB90l2oDsNmn87rkAL1yEm 13PVWpi0YZz1urgTOWBQKli+ryQPqAciTRfFHEeYD4kdYPVnxdTrtX7JWQnwSFMW 5JY1ijnWCbMHptKLV07y39VnQ1pZrHmgbFA6/XbiInHiLNaQ2fNM2TPOwsbSIXev aV789d/C+soOStIUR7QY03+41QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExFbDSM MidRW8MYTRCOtenXAWisMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Hzc88WdQzIxwerSsVdVsjW16W4REbmQSjXtPwmMt00cVoVzl1N5L Y+hp7DCjSP9pCDl4R2Pl2sEEKIpvBReMa1d/U3ViIY8sJ6zKtpXqUQBKENUBdbiy kW8p1RVCoQIJJHFwSXl1aWepEie3fwLDjNzpwSq+ZdSZn/i0wWrOpF7puwvDW21F XMuSxkRuKIFIzvwuhpZL9MbPmRxDe3iaCeXWUKKDEsWKQajfRoHS6E24FGnEz4is ou/HsMNznPqRNAaTywwTPWhc7Dm3i9/8h8kEmr+Yl/BjR/5RxbWjxwAJcokPAze4 7IR6Os8HRE6BspS9gvSbSVVUc3Qpui37 -----END CERTIFICATE-----Generated at Wed Nov 5 15:24:38 2025 by rpki-client