$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: g0RLbqP3Y+eACPinzf7ktngJdqoEv5r2zBaelsR3V/A= Subject key identifier: AA:5D:7E:23:A5:57:12:38:E2:D1:4E:98:91:37:B0:A8:C9:33:00:CA Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 146F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1467 Signing time: Sun 02 Nov 2025 16:53:27 +0000 Manifest this update: Sun 02 Nov 2025 16:53:27 +0000 Manifest next update: Sun 09 Nov 2025 16:53:27 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: ZdC3XrXce8RwfHHkCpmxUz7O4eJHP3046M6emreAt/0=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5231 (0x146f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Nov 2 16:53:27 2025 GMT Not After : Nov 9 16:53:27 2025 GMT Subject: CN=69078c87-bced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:b2:41:a6:12:b1:3d:b3:dd:d3:b1:8e:e0: 23:00:30:5a:9a:1a:67:ae:70:17:9e:a9:a0:6c:a4: 05:7f:81:8c:af:83:77:7f:4e:1f:58:05:dd:f5:83: 83:89:88:bf:79:e8:08:6a:b1:85:6d:b5:96:bb:4a: 6b:56:9f:a4:ca:9d:0f:47:bf:dc:99:93:7a:08:d8: 95:11:9e:ff:88:07:36:f9:a0:36:fc:76:26:20:55: f7:21:1f:fc:a1:31:15:b0:ad:9f:d2:33:17:65:0d: 8d:b9:21:1e:62:bd:de:14:16:2a:f7:f6:ea:29:56: 25:5a:0b:e4:4a:4e:f6:45:31:26:45:25:b7:5a:85: 1b:cf:ef:ba:d5:c2:4b:28:a5:8b:1a:ef:6b:1c:76: 93:52:53:36:8b:b8:85:16:88:2e:7c:65:3f:76:bb: ec:32:6e:d9:80:fe:7d:28:fc:66:d3:c2:5f:90:d3: cb:ea:26:ff:96:f8:62:97:99:a1:bd:36:03:1a:73: a4:60:a2:ef:25:8b:26:3a:b3:87:0a:bc:38:89:77: cf:f9:c0:be:49:2a:37:c9:a8:82:66:65:dd:cc:4c: 69:4b:51:d6:74:25:99:1c:de:f6:04:4c:f5:82:a2: c5:48:1a:d7:98:2d:2f:d5:63:4e:5c:59:17:c8:99: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5D:7E:23:A5:57:12:38:E2:D1:4E:98:91:37:B0:A8:C9:33:00:CA X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:11:ee:04:a9:9a:6c:18:9f:16:51:3f:36:19:d4:02:0d:43: 5e:b1:b8:f0:48:05:62:c7:cd:63:f0:9f:ee:ef:af:ff:3f:87: b2:76:c8:b4:2a:9f:f4:ec:f6:13:99:f3:90:ba:00:c8:d7:8e: c1:74:33:8b:f0:74:4c:40:cb:c8:6d:4e:e8:d7:98:80:10:36: 3a:2e:32:4b:e6:fb:5c:3e:f9:78:82:b5:9c:6a:57:5f:ef:ed: 23:e8:73:40:7c:53:10:8c:51:aa:cd:6e:d2:c2:17:01:80:4a: db:fc:25:53:2a:5b:cd:b6:8e:b1:84:7c:fd:1b:c4:12:34:15: 06:4b:5a:9f:1c:35:b2:c7:f7:84:32:80:4b:bc:66:fb:da:80: 04:e9:2d:b4:b6:79:73:1a:31:e6:6a:12:bc:a4:27:03:19:1c: 64:aa:14:89:72:8f:cc:2d:53:d9:5e:cd:c2:36:bd:1b:d3:2f: a9:e7:c2:ca:90:76:ee:96:75:9f:67:05:44:50:e6:55:19:f3: 9d:bd:cd:cd:c6:18:2e:a3:a3:93:2c:f2:82:cd:ca:4c:ee:ad: a9:2a:d6:72:f4:17:28:c6:c7:1d:85:85:a0:bc:c6:55:42:7a: ab:5a:cf:e3:f4:4f:b6:e9:a8:7d:c6:4e:4b:09:e4:bb:fa:42: 25:69:33:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUxMTAyMTY1MzI3WhcNMjUxMTA5MTY1MzI3WjAYMRYwFAYD VQQDEw02OTA3OGM4Ny1iY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5CyQaYSsT2z3dOxjuAjADBamhpnrnAXnqmgbKQFf4GMr4N3f04fWAXd9YOD iYi/eegIarGFbbWWu0prVp+kyp0PR7/cmZN6CNiVEZ7/iAc2+aA2/HYmIFX3IR/8 oTEVsK2f0jMXZQ2NuSEeYr3eFBYq9/bqKVYlWgvkSk72RTEmRSW3WoUbz++61cJL KKWLGu9rHHaTUlM2i7iFFogufGU/drvsMm7ZgP59KPxm08JfkNPL6ib/lvhil5mh vTYDGnOkYKLvJYsmOrOHCrw4iXfP+cC+SSo3yaiCZmXdzExpS1HWdCWZHN72BEz1 gqLFSBrXmC0v1WNOXFkXyJmekQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpdfiOl VxI44tFOmJE3sKjJMwDKMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArEe4EqZpsGJ8WUT82GdQCDUNesbjwSAVix81j8J/u76//P4eydsi0 Kp/07PYTmfOQugDI147BdDOL8HRMQMvIbU7o15iAEDY6LjJL5vtcPvl4grWcaldf 7+0j6HNAfFMQjFGqzW7SwhcBgErb/CVTKlvNto6xhHz9G8QSNBUGS1qfHDWyx/eE MoBLvGb72oAE6S20tnlzGjHmahK8pCcDGRxkqhSJco/MLVPZXs3CNr0b0y+p58LK kHbulnWfZwVEUOZVGfOdvc3Nxhguo6OTLPKCzcpM7q2pKtZy9BcoxscdhYWgvMZV QnqrWs/j9E+26ah9xk5LCeS7+kIlaTOM -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:56 2025 by rpki-client