$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: sq9UV7iqazeGYjrAkhJnGmiRXkYKNjbdpHx1h+Q3ptc= Subject key identifier: 2C:32:EF:12:E2:D8:40:07:0C:39:EB:09:26:B6:A5:DF:01:6F:B6:C5 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 0350 Signing time: Mon 03 Nov 2025 00:56:07 +0000 Manifest this update: Mon 03 Nov 2025 00:56:07 +0000 Manifest next update: Mon 10 Nov 2025 00:56:07 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: CmQexP9hFvhH35X8JgxJAtNpLOYWYAGLhJtVYW9FWKk=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: mRRgwNA+PP2GD4RfPaz1cyaWGNrkL/T4dyult2MIxPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Nov 3 00:56:07 2025 GMT Not After : Nov 10 00:56:07 2025 GMT Subject: CN=6907fda7-12e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:67:81:79:79:0c:65:27:d4:53:04:4b:e7: d6:49:1f:3e:83:88:ae:16:77:f8:c8:b9:9a:1c:bd: 2b:49:9c:33:08:34:65:f0:62:1c:e5:4e:0e:ef:43: b3:f6:56:8b:69:1a:54:c5:db:d3:d3:88:c8:8a:32: 9d:dd:89:c9:7c:63:bf:a6:1a:fe:0a:4a:31:ac:de: 66:b1:c8:6d:7b:37:04:e2:a9:bb:fe:07:96:ee:8c: 7f:cd:d3:04:bb:83:8c:42:d6:68:64:58:63:c4:0f: 82:77:23:e4:cb:d0:5a:23:db:6c:6d:d9:90:fc:be: 92:56:e6:47:20:75:72:7f:0f:bb:78:ab:24:1b:a3: 7f:2d:e2:2b:05:ae:27:5e:82:17:3d:58:db:59:5d: 95:1e:fe:09:10:04:86:3b:34:ba:62:67:ae:e7:c0: 62:0d:f8:4d:66:a2:79:0e:14:6b:f3:e5:37:7c:14: 4c:50:80:dc:de:e7:fa:dc:49:1b:fd:72:22:d0:22: 35:c9:e7:92:22:cd:99:02:18:54:10:cd:c0:3d:c1: f2:8e:62:a4:7d:62:a1:ef:e7:91:d8:45:a3:74:85: 21:3b:c6:88:11:be:da:32:df:f8:9b:e2:15:bd:4a: 6f:9b:e6:32:49:0c:c6:81:b0:fd:6d:a0:35:ef:b6: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:32:EF:12:E2:D8:40:07:0C:39:EB:09:26:B6:A5:DF:01:6F:B6:C5 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d2:36:a8:4f:8d:61:90:9f:8b:75:58:55:60:7a:e9:66:77: b6:eb:aa:fc:d4:22:b4:0b:01:fc:ee:7c:af:19:11:f0:77:ad: 45:6e:9c:2f:15:3c:a5:64:2a:3c:ad:11:4f:50:10:ba:61:81: c9:08:3e:ce:7a:b3:7c:39:29:6a:b3:ff:f2:06:25:3e:c4:0f: 33:96:ff:a2:87:6b:01:e0:83:2f:b4:a3:60:95:b0:47:c9:9a: 18:8d:fd:62:d4:75:ef:4e:4e:2e:ac:b4:40:66:f0:7b:05:3b: 01:a0:52:4b:d5:17:cf:fd:4b:e2:ce:55:cb:c0:93:d9:89:f3: 95:87:d1:d4:7e:24:33:6c:a0:e8:2f:f0:39:1a:fb:9f:cc:96: 25:c3:23:27:31:71:98:9e:d0:97:6b:c2:6e:ad:1d:aa:19:bf: 51:18:a8:e5:4e:c4:6b:ce:d9:f7:6b:3f:2a:f0:83:1b:c7:70: a3:a1:78:bf:29:53:6b:81:10:75:12:cf:9f:35:37:af:93:63: 84:59:59:3e:17:8d:9c:6b:35:38:76:38:40:4f:40:70:63:95: 5d:e1:0e:ec:bd:79:d5:ba:06:dc:99:03:fa:ce:42:84:95:48: 06:76:92:d4:f8:a6:98:2b:0e:f5:db:e0:cf:18:c6:d3:ef:e7: 2e:50:22:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUxMTAzMDA1NjA3WhcNMjUxMTEwMDA1NjA3WjAYMRYwFAYD VQQDEw02OTA3ZmRhNy0xMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+RngXl5DGUn1FMES+fWSR8+g4iuFnf4yLmaHL0rSZwzCDRl8GIc5U4O70Oz 9laLaRpUxdvT04jIijKd3YnJfGO/phr+CkoxrN5mschtezcE4qm7/geW7ox/zdME u4OMQtZoZFhjxA+CdyPky9BaI9tsbdmQ/L6SVuZHIHVyfw+7eKskG6N/LeIrBa4n XoIXPVjbWV2VHv4JEASGOzS6Ymeu58BiDfhNZqJ5DhRr8+U3fBRMUIDc3uf63Ekb /XIi0CI1yeeSIs2ZAhhUEM3APcHyjmKkfWKh7+eR2EWjdIUhO8aIEb7aMt/4m+IV vUpvm+YySQzGgbD9baA177ZQJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwy7xLi 2EAHDDnrCSa2pd8Bb7bFMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl0jaoT41hkJ+LdVhVYHrpZne266r81CK0CwH87nyvGRHwd61Fbpwv FTylZCo8rRFPUBC6YYHJCD7OerN8OSlqs//yBiU+xA8zlv+ih2sB4IMvtKNglbBH yZoYjf1i1HXvTk4urLRAZvB7BTsBoFJL1RfP/UvizlXLwJPZifOVh9HUfiQzbKDo L/A5GvufzJYlwyMnMXGYntCXa8JurR2qGb9RGKjlTsRrztn3az8q8IMbx3CjoXi/ KVNrgRB1Es+fNTevk2OEWVk+F42cazU4djhAT0BwY5Vd4Q7svXnVugbcmQP6zkKE lUgGdpLU+KaYKw712+DPGMbT7+cuUCJp -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:06 2025 by rpki-client