$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: sz0k+QDj+/ekeHQROuGuE8Aq5TISbWgYDboD/czS5Ag= Subject key identifier: A1:10:E7:D4:BE:1C:E8:4C:B5:F4:6E:FB:C1:DA:4E:07:F1:85:91:CF Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C5D Signing time: Wed 02 Jul 2025 18:44:20 +0000 Manifest this update: Wed 02 Jul 2025 18:44:20 +0000 Manifest next update: Wed 09 Jul 2025 18:44:20 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: Y6k+lrGJ+rzHB9LIdXOlPUFWx3y9xntAcinIu4bov1A=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Jul 2 18:44:20 2025 GMT Not After : Jul 9 18:44:20 2025 GMT Subject: CN=68657e04-94e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:b3:36:98:20:aa:d0:ac:0d:db:b7:2d:7f: 95:2a:33:40:9c:48:f1:cf:81:41:d3:df:81:e5:69: ea:36:93:70:c8:d2:75:98:65:3c:b0:3b:78:71:06: 86:e6:87:86:f3:a2:27:bb:5e:68:dd:3f:6a:47:0a: 34:9a:51:f2:4a:8b:89:e4:08:28:d5:79:cb:b6:ee: ec:e6:66:f2:72:a2:ef:5f:54:d9:b2:c0:29:79:83: 01:1c:b7:95:8c:66:2a:65:12:b9:3e:53:55:0a:33: 15:0f:9a:a9:c2:14:36:3b:06:b8:0d:ce:d9:92:9f: 91:60:83:96:e0:83:71:57:ee:36:8f:74:8e:a8:56: 09:e9:5d:a5:e4:d9:7f:1e:01:da:1e:6b:94:42:8e: 9d:d2:73:2e:0a:d9:c4:70:97:55:61:e6:2e:aa:f6: db:d4:68:2d:f2:ea:db:ce:22:4c:cb:e1:ac:8f:b4: 6a:99:f3:67:f1:69:d0:75:23:66:d9:dc:72:ea:f6: 7e:5e:f9:47:f7:5a:46:08:ef:0e:41:50:51:c8:3d: fa:b3:32:06:68:35:db:87:b5:60:2a:5e:05:da:92: 0b:d3:ca:a0:3a:c2:6f:81:8b:19:04:8b:95:08:4c: 8e:8b:0f:f6:2e:aa:7c:c6:73:32:48:28:3b:2c:82: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:E7:D4:BE:1C:E8:4C:B5:F4:6E:FB:C1:DA:4E:07:F1:85:91:CF X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:0b:90:03:02:9b:be:86:63:2f:e8:9e:bc:09:0a:a3:26:93: 5d:26:70:90:e8:d3:f2:bb:45:6e:75:c2:0e:71:b5:f2:68:3c: ee:4b:8d:b8:99:c8:e9:e9:de:84:c5:05:9b:20:91:0a:f9:5a: e0:92:f6:74:f2:d2:cb:54:f7:63:70:f4:01:b3:db:27:1a:02: 6d:6f:46:ab:0e:00:0d:8c:79:da:db:ab:78:44:57:5d:29:eb: ac:45:e3:24:67:c3:c3:a4:0a:35:ba:f4:56:9c:32:c5:d1:85: 23:b1:8e:ed:03:a3:1a:9c:93:58:1b:cc:58:77:f5:e6:9d:df: 0b:ea:3d:ac:af:0e:90:6d:0f:e5:ad:4b:01:49:46:d6:5c:89: 18:82:ca:03:82:fc:47:f3:72:3e:45:d0:48:51:3d:d6:9c:2a: dc:f9:21:dd:4c:39:24:42:67:99:35:bc:a8:9c:66:83:6e:f6: 76:b7:6b:4e:d4:37:17:39:c0:b7:11:8e:b5:bc:99:bc:de:08: ac:40:17:b0:83:01:eb:01:d7:8c:c1:29:35:0a:4e:0b:47:65: 43:33:c5:3a:ab:b0:35:69:18:bb:76:52:3a:81:bd:4e:c0:72: 3f:a2:db:d3:46:7a:f0:62:2e:a1:94:e8:34:f1:9c:09:96:40: 98:aa:24:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUwNzAyMTg0NDIwWhcNMjUwNzA5MTg0NDIwWjAYMRYwFAYD VQQDEw02ODY1N2UwNC05NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4WzNpggqtCsDdu3LX+VKjNAnEjxz4FB09+B5WnqNpNwyNJ1mGU8sDt4cQaG 5oeG86Inu15o3T9qRwo0mlHySouJ5Ago1XnLtu7s5mbycqLvX1TZssApeYMBHLeV jGYqZRK5PlNVCjMVD5qpwhQ2Owa4Dc7Zkp+RYIOW4INxV+42j3SOqFYJ6V2l5Nl/ HgHaHmuUQo6d0nMuCtnEcJdVYeYuqvbb1Ggt8urbziJMy+Gsj7RqmfNn8WnQdSNm 2dxy6vZ+XvlH91pGCO8OQVBRyD36szIGaDXbh7VgKl4F2pIL08qgOsJvgYsZBIuV CEyOiw/2Lqp8xnMySCg7LIKMLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEQ59S+ HOhMtfRu+8HaTgfxhZHPMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3C5ADApu+hmMv6J68CQqjJpNdJnCQ6NPyu0VudcIOcbXyaDzuS424 mcjp6d6ExQWbIJEK+VrgkvZ08tLLVPdjcPQBs9snGgJtb0arDgANjHna26t4RFdd KeusReMkZ8PDpAo1uvRWnDLF0YUjsY7tA6ManJNYG8xYd/Xmnd8L6j2srw6QbQ/l rUsBSUbWXIkYgsoDgvxH83I+RdBIUT3WnCrc+SHdTDkkQmeZNbyonGaDbvZ2t2tO 1DcXOcC3EY61vJm83gisQBewgwHrAdeMwSk1Ck4LR2VDM8U6q7A1aRi7dlI6gb1O wHI/otvTRnrwYi6hlOg08ZwJlkCYqiQb -----END CERTIFICATE-----Generated at Thu Jul 3 07:05:39 2025 by rpki-client