$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: /3RxaJDeYXp029njszeIag2RyBPSdfKHr1dLiemgR58= Subject key identifier: AB:6C:E2:0A:40:6E:8A:39:9A:BA:3F:B2:26:F0:3B:CD:44:8F:BC:BC Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C77 Signing time: Fri 22 Aug 2025 18:35:44 +0000 Manifest this update: Fri 22 Aug 2025 18:35:44 +0000 Manifest next update: Fri 29 Aug 2025 18:35:44 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: OSzoJqxJdls2M6aEbwhtuws5OanD/tLGeX+dughZzvs=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Aug 22 18:35:44 2025 GMT Not After : Aug 29 18:35:44 2025 GMT Subject: CN=68a8b880-a396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:ba:77:45:a9:b4:4a:41:78:f8:77:33:08: 59:1b:53:46:a3:76:93:30:b9:de:f6:48:2f:87:ba: 69:fc:e9:db:d5:ea:d5:ee:86:34:07:81:b8:94:67: 6e:c8:e0:30:3f:03:97:e7:f4:1d:b7:0d:30:82:dc: eb:c6:86:6f:ca:62:58:3a:e9:0a:32:a1:63:f9:ff: 52:1a:5e:1e:37:07:13:06:ba:bf:89:f9:47:f6:dc: a3:8e:7f:7f:06:5e:29:37:3e:b1:f9:a3:3b:6d:df: 2a:56:bf:c2:62:ee:9f:c3:bb:5c:6d:7a:e8:fe:18: 59:9a:e8:71:a5:b9:71:a7:e6:ab:1c:63:32:15:87: 1b:0c:c6:fe:30:82:ce:5b:b6:d7:40:0c:c1:70:18: 43:20:ca:16:51:09:cd:ec:01:82:6b:ea:da:80:54: 22:95:37:32:48:23:12:10:8c:e6:89:d9:c9:0a:1a: f6:f0:5a:3d:8f:2e:76:23:e7:a5:a7:b6:6f:ff:9b: 32:d4:7c:72:1f:37:b8:4e:6f:12:36:3a:17:b8:98: 07:4d:9d:56:35:0a:26:be:d9:43:d4:75:8b:da:bf: f1:03:f1:fa:31:17:09:7c:6f:1e:9a:d0:e7:2c:4e: eb:f5:7c:33:96:ef:91:6a:96:14:69:4f:68:da:b2: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:E2:0A:40:6E:8A:39:9A:BA:3F:B2:26:F0:3B:CD:44:8F:BC:BC X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d8:4c:b0:96:18:1f:0d:53:39:98:60:31:be:eb:99:59:94: 47:a0:dd:51:12:f9:7e:b7:83:55:43:0d:7d:3d:95:a8:ea:c0: 17:42:a3:75:bb:99:48:e1:85:cd:b8:f6:67:cf:ab:8f:9f:79: af:a4:71:11:ec:0e:12:ad:52:a3:9e:bd:8e:47:d3:5e:73:3e: 15:a9:97:f5:45:b5:e3:9c:c7:04:2b:b6:c9:e4:d6:0e:d7:4c: b3:69:53:d7:e2:9e:4e:62:ff:2c:25:d7:49:63:ae:65:22:36: 54:a7:a5:6a:aa:00:9c:5d:89:13:e5:08:d1:8a:59:77:2a:de: 9a:e3:f2:b3:d2:fe:2f:a7:3b:f5:cc:cd:86:4b:88:30:9d:e1: 21:79:c2:78:0c:0f:99:e4:ef:cd:54:58:0d:ac:3f:18:90:0e: 9d:59:3a:36:0e:45:3a:51:88:b9:18:f9:bd:d6:ec:f7:0d:b6: 0c:59:14:c8:e0:ed:53:24:f2:83:b9:cd:6d:72:20:d1:7c:eb: c4:e1:5b:7c:3c:53:19:35:22:e7:8d:15:e1:88:2e:be:44:53: 65:bd:1c:ff:9a:ba:8d:b0:b8:0b:3f:44:56:32:23:9c:54:f5: f6:db:76:28:5f:ad:25:6d:9f:6e:32:b8:e1:c3:52:82:64:20: e4:9d:77:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUwODIyMTgzNTQ0WhcNMjUwODI5MTgzNTQ0WjAYMRYwFAYD VQQDEw02OGE4Yjg4MC1hMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8O6d0WptEpBePh3MwhZG1NGo3aTMLne9kgvh7pp/Onb1erV7oY0B4G4lGdu yOAwPwOX5/Qdtw0wgtzrxoZvymJYOukKMqFj+f9SGl4eNwcTBrq/iflH9tyjjn9/ Bl4pNz6x+aM7bd8qVr/CYu6fw7tcbXro/hhZmuhxpblxp+arHGMyFYcbDMb+MILO W7bXQAzBcBhDIMoWUQnN7AGCa+ragFQilTcySCMSEIzmidnJChr28Fo9jy52I+el p7Zv/5sy1HxyHze4Tm8SNjoXuJgHTZ1WNQomvtlD1HWL2r/xA/H6MRcJfG8emtDn LE7r9Xwzlu+RapYUaU9o2rL7SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKts4gpA boo5mro/sibwO81Ej7y8MB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB22EywlhgfDVM5mGAxvuuZWZRHoN1REvl+t4NVQw19PZWo6sAXQqN1 u5lI4YXNuPZnz6uPn3mvpHER7A4SrVKjnr2OR9Necz4VqZf1RbXjnMcEK7bJ5NYO 10yzaVPX4p5OYv8sJddJY65lIjZUp6VqqgCcXYkT5QjRill3Kt6a4/Kz0v4vpzv1 zM2GS4gwneEhecJ4DA+Z5O/NVFgNrD8YkA6dWTo2DkU6UYi5GPm91uz3DbYMWRTI 4O1TJPKDuc1tciDRfOvE4Vt8PFMZNSLnjRXhiC6+RFNlvRz/mrqNsLgLP0RWMiOc VPX223YoX60lbZ9uMrjhw1KCZCDknXc5 -----END CERTIFICATE-----Generated at Sun Aug 24 03:04:19 2025 by rpki-client