$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: TE0vvGvb9wn3fpHY5l0DfynNisXJG58XGrnPnwBpGO4= Subject key identifier: FF:68:B7:CB:DB:47:26:22:15:96:D4:51:BF:F2:A1:CC:9B:8F:E4:E7 Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 0153 Signing time: Wed 17 Sep 2025 04:45:16 +0000 Manifest this update: Wed 17 Sep 2025 04:45:16 +0000 Manifest next update: Wed 24 Sep 2025 04:45:16 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: IBW+urGXOKD4A3WScWor2i34BlG8YnsoyerYOkGFx/Y=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: cuDY334MkIVtRBq3o3ujGRQ6jR/z000CC0KgPqw5K+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: Sep 17 04:45:16 2025 GMT Not After : Sep 24 04:45:16 2025 GMT Subject: CN=68ca3cdc-b98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:61:49:26:e8:a5:ce:3d:12:f1:7a:99:6f: 10:c4:03:f4:37:c9:c4:2a:4e:4c:d4:a1:c7:e7:f7: eb:f3:96:04:b7:17:40:4b:e5:83:19:8b:5a:0b:1e: 70:5c:6c:cd:14:cc:0d:e8:6b:61:86:68:6a:b4:eb: 78:8d:9d:74:b0:89:9a:a0:fc:c5:65:56:01:bd:53: 5d:18:12:5a:78:d3:cd:bc:36:88:46:56:14:a8:82: a2:da:bc:e1:14:e3:7d:0a:08:69:ce:a2:7f:48:5d: 00:18:01:08:a7:4b:3a:8c:3d:e8:2b:51:46:dc:62: d2:db:2a:81:ef:04:ef:fa:28:2d:e6:8e:87:ec:05: bc:ac:79:7e:aa:c7:85:21:cd:1d:2b:33:28:44:70: d8:fb:18:a5:7a:69:67:46:07:8c:eb:3a:68:33:57: ef:0a:39:9d:c5:50:55:ab:85:c9:66:31:70:b3:9e: 46:b8:ed:ab:5b:9f:ee:3b:64:3e:7a:74:2c:27:9d: fd:a3:7d:92:ca:b3:14:cd:20:ac:e3:f9:4a:d0:49: 1a:76:c9:8b:9a:16:42:3e:fd:76:3c:dd:60:e2:f3: 41:08:cb:75:47:a0:f7:40:df:86:d5:b7:f5:34:af: 51:d7:bd:96:3c:85:58:fc:ef:71:a3:81:91:c2:59: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:68:B7:CB:DB:47:26:22:15:96:D4:51:BF:F2:A1:CC:9B:8F:E4:E7 X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d2:4f:ac:1a:47:bf:ef:5e:ec:5b:81:f5:f3:d5:aa:2d:98: f9:5a:c8:7c:1b:c0:6e:d4:1e:cd:3a:f1:70:59:ea:00:3e:ad: 66:6e:06:66:f2:74:9a:03:21:7a:a0:97:fc:dc:87:60:04:c8: b1:4f:0a:9d:b3:67:e5:5a:8e:e8:e4:08:fb:4a:e1:0a:51:61: e7:f1:7b:5c:12:e4:1d:f7:bb:0f:61:79:89:20:fd:57:cf:96: 5a:e2:c8:bf:25:ee:a6:6f:ff:5f:81:b3:40:26:7a:40:ec:fb: 27:2e:a0:ca:1d:a9:78:90:58:aa:84:f9:e9:6e:01:b0:48:de: ed:46:5b:b8:bd:66:2d:a5:71:f6:71:1e:55:1c:bd:3d:7c:c5: 86:4b:3b:ae:a6:81:8e:98:01:74:47:5c:a7:53:5c:29:ab:d1: 36:9e:af:e6:66:62:86:7a:1d:ef:1b:4d:4f:cb:ba:92:1c:b6: 17:af:35:0d:fc:84:53:ca:af:a4:68:25:42:69:7f:c3:c2:75: e4:e9:7a:86:21:58:24:af:33:26:ef:72:09:18:58:7a:54:94: 37:90:4e:65:00:0c:ad:7f:22:64:c5:89:0b:fe:90:ff:64:84: ea:ad:3d:04:d3:b0:6b:e6:49:27:88:53:1d:d6:67:9a:2f:56: f3:91:20:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjUwOTE3MDQ0NTE2WhcNMjUwOTI0MDQ0NTE2WjAYMRYwFAYD VQQDEw02OGNhM2NkYy1iOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq55hSSbopc49EvF6mW8QxAP0N8nEKk5M1KHH5/fr85YEtxdAS+WDGYtaCx5w XGzNFMwN6GthhmhqtOt4jZ10sImaoPzFZVYBvVNdGBJaeNPNvDaIRlYUqIKi2rzh FON9CghpzqJ/SF0AGAEIp0s6jD3oK1FG3GLS2yqB7wTv+igt5o6H7AW8rHl+qseF Ic0dKzMoRHDY+xilemlnRgeM6zpoM1fvCjmdxVBVq4XJZjFws55GuO2rW5/uO2Q+ enQsJ539o32SyrMUzSCs4/lK0EkadsmLmhZCPv12PN1g4vNBCMt1R6D3QN+G1bf1 NK9R172WPIVY/O9xo4GRwllA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9ot8vb RyYiFZbUUb/yocybj+TnMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0k+sGke/717sW4H189WqLZj5Wsh8G8Bu1B7NOvFwWeoAPq1mbgZm 8nSaAyF6oJf83IdgBMixTwqds2flWo7o5Aj7SuEKUWHn8XtcEuQd97sPYXmJIP1X z5Za4si/Je6mb/9fgbNAJnpA7PsnLqDKHal4kFiqhPnpbgGwSN7tRlu4vWYtpXH2 cR5VHL09fMWGSzuupoGOmAF0R1ynU1wpq9E2nq/mZmKGeh3vG01Py7qSHLYXrzUN /IRTyq+kaCVCaX/DwnXk6XqGIVgkrzMm73IJGFh6VJQ3kE5lAAytfyJkxYkL/pD/ ZITqrT0E07Br5kkniFMd1meaL1bzkSCc -----END CERTIFICATE-----Generated at Fri Sep 19 02:18:39 2025 by rpki-client