$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: K4xhG45BYFH2X+MTFnmu6Z46QmSutmGk2aV/UlhvA08= Subject key identifier: 5A:B3:3F:E6:56:4D:61:CD:65:7B:A9:DB:B5:B4:0C:7A:FA:17:74:EF Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0181 Signing time: Thu 23 Oct 2025 05:54:40 +0000 Manifest this update: Thu 23 Oct 2025 05:54:39 +0000 Manifest next update: Thu 30 Oct 2025 05:54:39 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: BUYIlqix0MIWjzRn5BrykuDCpNFEnyFmerpNzLcXHac=) 2: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: KOUKQ6BoYe+OZvts9QDaZtXw/6SYWRIeerxskHjMAvw=) 3: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: ZO+BY1B+XgvoW0KKoO0apsMteX7veM0k8UtwvOCudts=) 4: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 5: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: g1HOTpLTf3sk5gSzo54dPs52/QkaTA4XgGi9Wow0trs=) 6: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 7: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 8: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Oct 23 05:54:39 2025 GMT Not After : Oct 30 05:54:39 2025 GMT Subject: CN=68f9c31f-aa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:97:86:a3:c9:a2:3b:e7:d7:d2:ed:5d:bc: e5:45:d4:30:bb:7b:2e:fe:f4:df:ce:c1:a9:b9:66: 3b:e8:40:c8:c4:1c:76:93:0c:64:93:e4:79:8a:b0: 59:38:52:64:6c:38:e2:98:3d:fa:28:45:c3:af:c6: f0:8f:81:0a:9c:79:da:03:1e:9b:58:aa:b1:9a:06: 90:52:92:a5:5d:6f:7f:59:7d:16:5c:85:09:fa:56: ca:61:59:39:01:3a:2b:54:8a:f7:ff:29:72:3f:d8: 0d:4a:a0:77:c2:6c:38:5b:a9:f0:07:4c:37:8e:6b: a1:25:31:a9:1c:5c:50:54:57:fb:b6:fe:e6:98:60: b8:ef:01:72:35:15:e6:a1:45:e4:16:aa:4e:88:74: 63:bb:62:f8:72:c2:fb:d8:2e:db:72:ff:d3:d5:92: 5a:e4:e0:13:5e:2f:fa:c7:66:69:96:65:bd:40:93: e8:c5:85:52:95:36:b8:4c:28:61:51:94:4f:dd:1f: 95:5d:3d:dc:83:1a:f9:f2:b2:34:30:f2:bb:52:b3: 54:ec:22:b0:00:60:e1:19:95:92:ed:b8:ca:42:20: db:75:b3:5a:3d:51:20:e2:82:6f:78:71:1c:47:1e: 9e:b9:92:5b:97:fe:75:de:ce:0b:22:b4:8b:bc:86: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:3F:E6:56:4D:61:CD:65:7B:A9:DB:B5:B4:0C:7A:FA:17:74:EF X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b1:5b:4a:37:23:d9:b0:75:a7:89:f4:f4:ce:49:9d:07:02: eb:68:d9:ce:35:ce:5e:7e:ca:f9:d2:c2:f3:97:d5:ce:4c:13: e0:47:68:67:11:ee:fa:73:d7:27:e1:77:7a:6a:cf:25:b1:71: bb:72:26:0d:ae:a4:4c:51:1a:fc:95:25:fc:22:c2:7c:4c:c4: 14:f5:22:5f:4d:e9:c2:cb:a1:7a:7c:56:bf:23:c9:28:6e:3e: fd:10:40:0e:08:15:d5:e7:6b:aa:ce:16:fe:1d:3a:d9:21:f1: 9b:44:94:70:a0:a8:ac:11:d7:b8:fd:15:c4:8e:4f:eb:a1:c4: 4d:02:69:7c:9d:2a:54:a7:ca:71:8c:c8:b1:e1:67:25:19:46: eb:7e:c8:53:bd:3a:c7:7b:54:60:91:4d:dd:b0:68:c5:56:26: 2d:28:d2:b7:31:1d:90:9a:61:5b:ea:df:a4:04:f2:cf:a2:6e: 7e:26:91:49:3e:af:f1:ed:a6:3f:6f:0e:c2:c5:2e:9c:36:4d: e3:db:0e:cf:76:b7:68:0d:8b:cc:31:a9:d8:b2:41:ad:ce:16: c1:fe:aa:9e:cb:8f:be:92:e4:73:fa:54:e7:c6:2d:8a:e4:c5: 7a:55:1f:dc:bc:8d:92:97:ca:9f:c5:68:a6:d3:f2:58:b4:57: e6:e9:cf:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUxMDIzMDU1NDM5WhcNMjUxMDMwMDU1NDM5WjAYMRYwFAYD VQQDEw02OGY5YzMxZi1hYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjmXhqPJojvn19LtXbzlRdQwu3su/vTfzsGpuWY76EDIxBx2kwxkk+R5irBZ OFJkbDjimD36KEXDr8bwj4EKnHnaAx6bWKqxmgaQUpKlXW9/WX0WXIUJ+lbKYVk5 ATorVIr3/ylyP9gNSqB3wmw4W6nwB0w3jmuhJTGpHFxQVFf7tv7mmGC47wFyNRXm oUXkFqpOiHRju2L4csL72C7bcv/T1ZJa5OATXi/6x2ZplmW9QJPoxYVSlTa4TChh UZRP3R+VXT3cgxr58rI0MPK7UrNU7CKwAGDhGZWS7bjKQiDbdbNaPVEg4oJveHEc Rx6euZJbl/513s4LIrSLvIZjYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqzP+ZW TWHNZXup27W0DHr6F3TvMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMsVtKNyPZsHWnifT0zkmdBwLraNnONc5efsr50sLzl9XOTBPgR2hn Ee76c9cn4Xd6as8lsXG7ciYNrqRMURr8lSX8IsJ8TMQU9SJfTenCy6F6fFa/I8ko bj79EEAOCBXV52uqzhb+HTrZIfGbRJRwoKisEde4/RXEjk/rocRNAml8nSpUp8px jMix4WclGUbrfshTvTrHe1RgkU3dsGjFViYtKNK3MR2QmmFb6t+kBPLPom5+JpFJ Pq/x7aY/bw7CxS6cNk3j2w7PdrdoDYvMManYskGtzhbB/qqey4++kuRz+lTnxi2K 5MV6VR/cvI2Sl8qfxWim0/JYtFfm6c8C -----END CERTIFICATE-----Generated at Fri Oct 24 06:35:30 2025 by rpki-client