$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json) Hash identifier: 2hdh5VzjSsHp8HdkMhLgIr2Wt0f2S3tuyXRcgPlGrZ4= Subject key identifier: E1:F0:45:89:72:D1:54:5F:92:3B:43:00:67:AB:55:94:37:74:AF:B2 Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft Manifest number: 05AD Signing time: Tue 16 Sep 2025 23:31:17 +0000 Manifest this update: Tue 16 Sep 2025 23:31:17 +0000 Manifest next update: Tue 23 Sep 2025 23:31:17 +0000 Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: 2JTzw+8AD5/ZeYbYU7e68x9CVgDpre7129cThrH1d6w=) 2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Validity Not Before: Sep 16 23:31:17 2025 GMT Not After : Sep 23 23:31:17 2025 GMT Subject: CN=68c9f345-6020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:8a:b9:76:18:39:3b:5b:24:99:fd:65:0c: 44:fe:07:71:ce:8d:c0:08:c3:f8:b1:90:97:2f:a0: ff:58:1f:40:9c:db:7d:c4:1c:03:be:a2:25:22:ff: 2c:ef:4b:fa:69:45:17:11:cb:2b:e2:4f:1b:c3:a9: bc:31:63:1f:62:53:d4:a5:b4:83:20:2d:7a:37:b9: 7d:06:79:f3:de:af:62:10:ca:2a:dc:15:ee:9d:00: 6b:81:7b:e5:bd:a5:86:0c:0a:f5:a2:3b:ef:e0:d5: fe:7c:81:e1:13:64:87:4c:02:3f:b0:ce:d4:85:40: a0:b6:c1:c2:6f:27:65:7b:d6:e2:ea:d4:19:21:73: 8f:41:e4:61:02:54:40:5d:b7:d3:40:f6:af:ab:6d: 87:49:21:bb:0c:cc:0f:98:8a:ee:1d:65:7c:1c:3b: 9e:8c:4c:a5:3b:3a:2e:7e:ea:eb:8f:95:47:23:62: 05:70:a0:ca:48:13:f2:d4:a6:c8:e2:10:ac:3e:f6: cd:53:c2:8a:19:24:d2:08:c3:f6:03:a6:9b:0d:75: b9:9f:df:48:c2:08:c9:36:a4:51:d2:a4:3b:17:e0: b9:df:42:9c:18:75:dd:6e:4b:79:b5:4d:98:6d:03: 9b:df:f5:8f:1e:5e:60:e3:37:7e:c2:06:78:fd:11: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:45:89:72:D1:54:5F:92:3B:43:00:67:AB:55:94:37:74:AF:B2 X509v3 Authority Key Identifier: keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:b5:31:89:93:0c:1f:7b:c7:f7:c6:28:55:9b:6c:71:d7: 16:eb:ca:90:e1:b3:9e:c1:33:40:2c:61:83:1e:c4:19:e0:a5: 2c:17:a2:6f:12:f4:3c:4d:2a:26:e6:44:c7:2f:7b:a2:41:98: ad:68:fa:46:6d:40:ea:e4:a5:4f:e9:da:8a:90:79:23:be:c9: 9f:b0:a6:73:40:8d:b6:94:6f:54:82:40:4f:18:c8:56:e0:11: 26:41:b3:47:55:cb:76:23:d5:e3:21:32:84:58:1c:2c:ab:55: a3:19:4c:66:6d:1d:34:83:72:d4:be:74:0b:a5:73:c3:05:0c: ac:51:ab:0a:54:ce:71:a8:f4:95:48:bf:c8:da:92:cc:34:b3: ff:24:12:6a:dd:b7:87:65:fd:49:2e:b1:87:78:ab:5f:80:04: 49:50:fb:ca:b0:70:8c:51:d6:1b:72:51:5f:9a:f4:ae:a7:a7: b2:a6:c2:94:15:8b:08:f3:29:b7:49:07:90:ea:4e:59:e1:3b: 5b:70:10:61:b3:dd:c3:8e:7b:79:fc:d5:d6:15:13:a6:7d:fc: 80:e8:22:e2:90:2a:ef:00:b1:fd:ec:eb:bc:c2:0b:c9:bc:af: a7:bc:68:f5:4d:bd:bd:fd:53:7d:40:99:03:4c:8a:23:bd:e6: 91:2c:e5:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4 Qzk0NTY4NzcwHhcNMjUwOTE2MjMzMTE3WhcNMjUwOTIzMjMzMTE3WjAYMRYwFAYD VQQDEw02OGM5ZjM0NS02MDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX2KuXYYOTtbJJn9ZQxE/gdxzo3ACMP4sZCXL6D/WB9AnNt9xBwDvqIlIv8s 70v6aUUXEcsr4k8bw6m8MWMfYlPUpbSDIC16N7l9Bnnz3q9iEMoq3BXunQBrgXvl vaWGDAr1ojvv4NX+fIHhE2SHTAI/sM7UhUCgtsHCbydle9bi6tQZIXOPQeRhAlRA XbfTQPavq22HSSG7DMwPmIruHWV8HDuejEylOzoufurrj5VHI2IFcKDKSBPy1KbI 4hCsPvbNU8KKGSTSCMP2A6abDXW5n99IwgjJNqRR0qQ7F+C530KcGHXdbkt5tU2Y bQOb3/WPHl5g4zd+wgZ4/RE4lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHwRYly 0VRfkjtDAGerVZQ3dK+yMB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0 dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhzLUxiZMMH3vH98YoVZtscdcW68qQ4bOewTNALGGDHsQZ4KUsF6Jv EvQ8TSom5kTHL3uiQZitaPpGbUDq5KVP6dqKkHkjvsmfsKZzQI22lG9UgkBPGMhW 4BEmQbNHVct2I9XjITKEWBwsq1WjGUxmbR00g3LUvnQLpXPDBQysUasKVM5xqPSV SL/I2pLMNLP/JBJq3beHZf1JLrGHeKtfgARJUPvKsHCMUdYbclFfmvSup6eypsKU FYsI8ym3SQeQ6k5Z4TtbcBBhs93Djnt5/NXWFROmffyA6CLikCrvALH97Ou8wgvJ vK+nvGj1Tb29/VN9QJkDTIojveaRLOX3 -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:54 2025 by rpki-client