$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: DhHeigrxc/0eryWScDPY9Dtty8XFimYJ9Y/eiESCuuA= Subject key identifier: FA:60:10:C3:59:DE:9C:F0:38:E3:C1:54:BF:DC:CB:EC:B1:F9:21:A9 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C94 Signing time: Sat 18 Oct 2025 19:11:26 +0000 Manifest this update: Sat 18 Oct 2025 19:11:25 +0000 Manifest next update: Sat 25 Oct 2025 19:11:25 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: DEb09DGaxVwlk63KtR8wIzwtx3/Spa1Mb9zTBXiUW+U=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Oct 18 19:11:25 2025 GMT Not After : Oct 25 19:11:25 2025 GMT Subject: CN=68f3e65d-3bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:fa:9d:de:f4:21:b5:ee:5f:93:d5:1d:d5: a7:0f:53:fe:89:3c:a9:c0:79:02:e0:fc:1d:7e:35: 9a:26:d5:cc:98:12:95:d8:31:e0:52:34:a6:b3:c9: 19:f6:90:ca:82:50:bd:e7:94:93:1a:82:e6:bf:c0: 75:e1:94:37:b0:55:33:11:f4:3c:96:dd:9a:ab:e9: 03:fc:2b:c4:d5:a4:11:89:d7:cf:27:9b:89:3e:dc: 51:21:82:e9:f2:ee:c3:77:9d:2d:bb:69:9b:21:64: 77:0b:ca:90:8a:a1:7e:a0:79:e6:04:2e:35:d3:9f: 65:75:05:23:81:54:da:17:8a:29:c4:d3:72:5e:eb: 73:0b:9f:9d:93:4c:05:83:ca:5d:e3:d5:8c:bf:c7: e6:a9:f1:52:84:eb:b4:b8:80:0b:9b:ec:bc:6e:68: c8:cb:a1:a6:c0:d4:02:26:e9:58:42:3f:3e:bd:eb: a8:5c:c9:c3:39:f6:62:33:4a:a0:4f:71:94:e8:f2: f6:b4:5a:b5:95:9a:1d:2e:1f:3f:f5:ef:13:f7:37: 96:44:0c:b1:61:7c:c9:24:d8:52:89:96:55:56:69: c1:19:ff:44:27:31:d0:98:24:80:f6:d0:df:7b:c7: 41:a8:1b:2c:22:b1:44:fb:9c:3f:ca:ab:49:e7:8f: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:60:10:C3:59:DE:9C:F0:38:E3:C1:54:BF:DC:CB:EC:B1:F9:21:A9 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0e:bf:28:35:83:53:39:c0:47:62:60:f3:dc:d9:ea:eb:19: 3c:ee:92:b1:99:5c:91:bb:37:e4:c6:9b:a4:3e:26:db:a9:88: 04:2f:29:98:86:31:2c:75:ca:26:0a:7b:ff:6b:87:2f:59:05: d1:55:42:1b:0f:60:ec:55:4c:e7:28:b6:e4:65:c5:90:3d:71: c5:92:31:70:64:c9:8f:f1:53:1f:80:9f:b8:bf:fc:4e:a1:15: a0:1c:a0:93:c7:50:94:d1:02:1f:12:9e:fb:9f:aa:38:64:8a: c2:1d:ae:21:bc:33:c3:e1:67:22:ca:ee:f2:6a:17:81:6b:45: bd:48:fb:3a:d0:44:79:80:7e:b9:15:56:54:e3:19:d8:08:60: 7c:54:e6:6d:a4:ad:39:4d:9c:18:f1:06:e2:4e:43:b3:92:76: af:d1:12:58:f4:98:92:c6:dc:a2:6b:e8:a7:71:c8:be:61:09: ba:e4:5a:b7:0c:25:ad:8b:98:e0:b2:d0:af:f8:93:dd:c6:58: 02:35:e6:7e:ec:b2:73:48:9f:b1:c4:b2:32:76:aa:56:5c:d9: 41:9f:4d:99:93:3f:ab:6a:1b:e0:9a:f1:ee:ce:f4:18:da:12: 18:61:08:23:5b:0a:13:4d:7d:c8:5a:ae:9d:1b:42:d8:6e:19: 01:32:90:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUxMDE4MTkxMTI1WhcNMjUxMDI1MTkxMTI1WjAYMRYwFAYD VQQDEw02OGYzZTY1ZC0zYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gL6nd70IbXuX5PVHdWnD1P+iTypwHkC4PwdfjWaJtXMmBKV2DHgUjSms8kZ 9pDKglC955STGoLmv8B14ZQ3sFUzEfQ8lt2aq+kD/CvE1aQRidfPJ5uJPtxRIYLp 8u7Dd50tu2mbIWR3C8qQiqF+oHnmBC41059ldQUjgVTaF4opxNNyXutzC5+dk0wF g8pd49WMv8fmqfFShOu0uIALm+y8bmjIy6GmwNQCJulYQj8+veuoXMnDOfZiM0qg T3GU6PL2tFq1lZodLh8/9e8T9zeWRAyxYXzJJNhSiZZVVmnBGf9EJzHQmCSA9tDf e8dBqBssIrFE+5w/yqtJ54/1uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpgEMNZ 3pzwOOPBVL/cy+yx+SGpMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRDr8oNYNTOcBHYmDz3Nnq6xk87pKxmVyRuzfkxpukPibbqYgELymY hjEsdcomCnv/a4cvWQXRVUIbD2DsVUznKLbkZcWQPXHFkjFwZMmP8VMfgJ+4v/xO oRWgHKCTx1CU0QIfEp77n6o4ZIrCHa4hvDPD4Wciyu7yaheBa0W9SPs60ER5gH65 FVZU4xnYCGB8VOZtpK05TZwY8QbiTkOzknav0RJY9JiSxtyia+incci+YQm65Fq3 DCWti5jgstCv+JPdxlgCNeZ+7LJzSJ+xxLIydqpWXNlBn02Zkz+rahvgmvHuzvQY 2hIYYQgjWwoTTX3IWq6dG0LYbhkBMpCi -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:42 2025 by rpki-client