$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: XdjQbu50ikgrswvBg/leiSa9aI1L1OENicapK8Q9WF0= Subject key identifier: 9F:71:18:04:F2:DB:27:D5:F9:DA:2D:85:FF:87:F8:EB:7D:66:48:6C Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 016A Signing time: Mon 03 Nov 2025 03:56:06 +0000 Manifest this update: Mon 03 Nov 2025 03:56:05 +0000 Manifest next update: Mon 10 Nov 2025 03:56:05 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: JUKYVrCvErA9/ewxBgGfYuXotKxL97gJiq+mcwDojY4=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: cuDY334MkIVtRBq3o3ujGRQ6jR/z000CC0KgPqw5K+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: Nov 3 03:56:05 2025 GMT Not After : Nov 10 03:56:05 2025 GMT Subject: CN=690827d5-9527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:9d:d7:9f:cb:1c:a8:05:d5:73:a6:f8:cd: 18:2e:9a:66:bd:a6:30:f7:53:34:d5:d1:08:70:97: d1:45:66:67:9d:ef:5a:3f:36:9f:16:f5:c4:fb:8a: df:f8:cf:88:d2:a8:36:87:7f:6c:5c:ca:6f:83:4e: 24:c6:f1:fa:84:ae:a5:c8:d4:5a:e7:39:6a:7a:3d: 78:ea:a1:9a:f3:41:49:7e:b0:f8:3e:bb:e1:05:0a: 31:b0:09:c8:d8:51:b8:d4:d3:ab:6d:17:25:c5:ef: 18:81:78:22:15:f9:f6:14:5c:40:cd:ac:bc:a3:81: b9:57:2e:c4:4f:74:98:47:bb:3d:b1:45:c6:b5:46: 65:55:2f:53:a2:c1:c2:48:15:3f:c7:98:a6:53:09: 2f:b9:52:c5:99:91:b4:ee:c0:82:c6:c7:06:96:a4: f2:97:c0:21:26:44:e9:f8:b0:86:ff:52:2d:0a:e9: 0a:2d:38:5f:6e:e4:38:7c:2a:4a:e1:1f:02:1d:e1: 74:53:69:7a:eb:b4:1b:fb:da:fa:8f:67:ac:27:5c: a4:42:9b:43:27:83:ae:d3:bb:d7:d8:7d:f3:16:8c: 10:28:6c:2e:75:c5:fb:75:fd:17:44:5a:2d:88:b0: e6:07:39:7e:51:2a:f5:98:3e:54:cc:74:29:5a:82: 4b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:18:04:F2:DB:27:D5:F9:DA:2D:85:FF:87:F8:EB:7D:66:48:6C X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:39:88:b8:af:06:06:d7:e4:4b:c8:a5:8a:80:d4:68:04:1b: 17:35:43:e1:c1:e7:a2:b5:6a:3c:58:36:2a:42:8e:34:8d:1b: a2:36:72:f0:4c:d2:81:b0:96:de:6b:18:50:17:7f:9a:3f:f3: 9e:98:fd:a7:33:df:83:ce:4b:fc:3b:06:e7:06:2b:32:d6:6f: f6:05:6b:82:35:97:59:4c:e9:50:b4:5e:00:36:63:fd:79:69: 3a:2d:af:96:8f:61:f6:f3:a4:b3:0f:b4:81:42:96:51:25:fa: ce:f6:bb:af:cb:33:53:f7:85:46:cc:86:e7:b0:66:51:0f:0b: 86:95:ff:43:9d:6a:69:1b:c3:fa:8c:92:3b:a0:3c:60:4c:df: 54:db:84:e4:90:8d:e9:cb:38:d0:98:64:c0:91:00:a1:11:93: be:39:47:24:0e:ea:9c:69:33:62:63:ca:aa:5a:8d:b3:98:6d: 40:e7:be:4b:16:09:21:2b:4d:8e:d3:59:f4:8b:11:1a:e3:7d: 74:2c:f3:35:b8:a4:a3:ad:a2:07:2a:ea:e5:b9:fc:12:75:28: d2:ca:83:7e:b3:66:16:2d:d2:73:8e:b3:c9:bd:59:d8:cc:ad: 93:07:19:cb:52:ad:2d:54:2b:14:ff:0f:84:95:38:5a:80:e3: e0:f6:0a:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjUxMTAzMDM1NjA1WhcNMjUxMTEwMDM1NjA1WjAYMRYwFAYD VQQDEw02OTA4MjdkNS05NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA046d15/LHKgF1XOm+M0YLppmvaYw91M01dEIcJfRRWZnne9aPzafFvXE+4rf +M+I0qg2h39sXMpvg04kxvH6hK6lyNRa5zlqej146qGa80FJfrD4PrvhBQoxsAnI 2FG41NOrbRclxe8YgXgiFfn2FFxAzay8o4G5Vy7ET3SYR7s9sUXGtUZlVS9TosHC SBU/x5imUwkvuVLFmZG07sCCxscGlqTyl8AhJkTp+LCG/1ItCukKLThfbuQ4fCpK 4R8CHeF0U2l667Qb+9r6j2esJ1ykQptDJ4Ou07vX2H3zFowQKGwudcX7df0XRFot iLDmBzl+USr1mD5UzHQpWoJLnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9xGATy 2yfV+dothf+H+Ot9ZkhsMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADOYi4rwYG1+RLyKWKgNRoBBsXNUPhweeitWo8WDYqQo40jRuiNnLw TNKBsJbeaxhQF3+aP/OemP2nM9+Dzkv8OwbnBisy1m/2BWuCNZdZTOlQtF4ANmP9 eWk6La+Wj2H286SzD7SBQpZRJfrO9ruvyzNT94VGzIbnsGZRDwuGlf9DnWppG8P6 jJI7oDxgTN9U24TkkI3pyzjQmGTAkQChEZO+OUckDuqcaTNiY8qqWo2zmG1A575L FgkhK02O01n0ixEa4310LPM1uKSjraIHKurlufwSdSjSyoN+s2YWLdJzjrPJvVnY zK2TBxnLUq0tVCsU/w+ElThagOPg9gpG -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:34 2025 by rpki-client