$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: 06P7FFM67Z7BCQ7WTLTYr0DAOYdcLULkjdSycaZmDSo= Subject key identifier: C6:75:01:5E:06:C8:57:39:BD:D7:C0:37:69:FF:66:0A:35:5F:CF:7E Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 09:27:50 +0000 Manifest this update: Sun 19 Oct 2025 09:27:50 +0000 Manifest next update: Sun 26 Oct 2025 09:27:50 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: nVAZ6H1eLNWlXOqc1+qWI6ruF4P0BBu/kRt+MiH3nuM=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: C9wlOti9Kn8ir5LbjrcvSenT+h+KC9pTHhvfxL8aZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: Oct 19 09:27:50 2025 GMT Not After : Oct 26 09:27:50 2025 GMT Subject: CN=68f4af16-96e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:1a:d9:fd:29:56:c7:34:df:f6:ca:34:3b: e8:5e:c6:d6:96:02:f2:83:7c:f0:4a:81:e5:47:e0: fa:ab:91:44:0b:f0:1f:92:06:8c:4e:70:44:74:18: a4:ae:fa:be:2f:ac:26:5a:e0:5d:9b:e5:33:2f:6b: 4f:da:ea:c5:c9:ae:fd:eb:66:95:e6:38:81:92:f2: 6d:34:51:a0:4d:fd:be:a6:89:45:aa:74:70:55:2e: f7:87:46:f7:e9:fd:4f:8e:18:aa:b2:25:e4:11:1f: 22:c1:09:59:24:8c:00:68:ad:04:04:03:fb:52:0f: 45:b8:d5:d1:62:73:26:0d:c9:8d:c3:e0:87:84:3a: d5:af:af:f9:7d:72:12:de:49:6f:e7:bb:7c:4e:e9: 83:e2:7d:17:fe:81:bd:49:b2:db:35:ff:e9:5a:f8: 65:7b:6b:45:a5:5e:c5:e5:55:f2:67:82:2c:aa:61: 50:b0:e5:eb:c7:12:c5:ff:f0:3b:37:e3:11:91:b1: 72:64:5b:96:b5:17:3a:eb:5c:8e:5e:e8:4a:01:36: 8e:08:30:aa:0f:d7:c6:c5:e3:33:4d:9f:36:4d:4c: 53:cd:6b:a8:8c:fe:0f:d2:e8:8a:a5:65:a5:ed:f3: 2c:f1:94:37:43:97:a0:32:10:1e:7f:ca:27:79:77: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:75:01:5E:06:C8:57:39:BD:D7:C0:37:69:FF:66:0A:35:5F:CF:7E X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:bc:00:3f:40:cd:69:7c:5c:ee:d4:4b:cc:00:9d:fa:9c:1e: 40:80:73:0e:a0:8a:fd:d9:b6:d3:93:a7:8e:dd:1f:11:43:a0: fa:55:94:fc:fe:77:6b:73:b0:4a:b2:30:70:f4:8b:6e:e1:04: ce:0e:86:a2:3d:19:1e:06:b3:19:63:0b:79:e4:2d:ad:0b:4a: 5c:44:a8:ef:a6:fb:bd:8d:88:9e:78:4b:05:b5:58:e1:4d:a8: 6d:5e:8a:50:85:53:84:4c:3a:8f:64:57:25:af:97:1f:33:41: 82:87:e6:16:93:90:f9:7c:3c:81:fa:fb:6c:67:e1:bd:cf:06: e8:e8:35:65:a5:78:00:61:db:b9:44:d4:fc:b7:69:e9:e1:26: d8:98:65:fd:41:c1:35:51:8b:3c:22:2b:5f:f3:2c:a6:87:d7: e8:5f:a2:71:8c:94:58:ed:92:df:b3:55:40:c6:fc:73:fa:1b: 70:05:8b:24:80:bc:3b:a1:1e:2a:f2:4a:63:ce:19:b1:88:b1: f2:77:74:09:8e:44:17:fe:bd:ca:fa:4a:9a:64:5a:db:28:8b: f6:99:ea:b8:d0:ff:a9:15:df:70:7e:cc:39:49:6c:d1:3e:6b: 8a:12:0d:a5:45:7d:b7:84:76:f6:08:44:1c:11:54:15:a9:f6: 16:59:3a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyOUQxMTAvBgNVBAUTKDM1ODQxQUUzM0RGNjkzMTIwMTQwNjc5OEFFNjRGQ0Mw ODdGNUExRTUwHhcNMjUxMDE5MDkyNzUwWhcNMjUxMDI2MDkyNzUwWjAYMRYwFAYD VQQDEw02OGY0YWYxNi05NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziIa2f0pVsc03/bKNDvoXsbWlgLyg3zwSoHlR+D6q5FEC/AfkgaMTnBEdBik rvq+L6wmWuBdm+UzL2tP2urFya7962aV5jiBkvJtNFGgTf2+polFqnRwVS73h0b3 6f1PjhiqsiXkER8iwQlZJIwAaK0EBAP7Ug9FuNXRYnMmDcmNw+CHhDrVr6/5fXIS 3klv57t8TumD4n0X/oG9SbLbNf/pWvhle2tFpV7F5VXyZ4IsqmFQsOXrxxLF//A7 N+MRkbFyZFuWtRc661yOXuhKATaOCDCqD9fGxeMzTZ82TUxTzWuojP4P0uiKpWWl 7fMs8ZQ3Q5egMhAef8oneXcZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ1AV4G yFc5vdfAN2n/Zgo1X89+MB8GA1UdIwQYMBaAFDWEGuM99pMSAUBnmK5k/MCH9aHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTI5RC82RTA1MEVGNkIx MzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4SUJRR2VZcm1UOHdJZjFv ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTI5RC82RTA1MEVGNkIxMzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4 SUJRR2VZcm1UOHdJZjFvZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqvAA/QM1pfFzu1EvMAJ36nB5AgHMOoIr92bbTk6eO3R8RQ6D6VZT8 /ndrc7BKsjBw9Itu4QTODoaiPRkeBrMZYwt55C2tC0pcRKjvpvu9jYieeEsFtVjh TahtXopQhVOETDqPZFclr5cfM0GCh+YWk5D5fDyB+vtsZ+G9zwbo6DVlpXgAYdu5 RNT8t2np4SbYmGX9QcE1UYs8Iitf8yymh9foX6JxjJRY7ZLfs1VAxvxz+htwBYsk gLw7oR4q8kpjzhmxiLHyd3QJjkQX/r3K+kqaZFrbKIv2meq40P+pFd9wfsw5SWzR PmuKEg2lRX23hHb2CEQcEVQVqfYWWTrA -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:03 2025 by rpki-client