$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: wZEEdyxwMUMiwOAksqV6n+ewyyRjMXlZKEk32ARpRMI= Subject key identifier: 9C:88:CF:8A:52:BC:83:C2:1A:10:00:BC:F8:13:8E:B2:1E:9F:58:88 Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: 89 Signing time: Sat 23 Aug 2025 06:50:33 +0000 Manifest this update: Sat 23 Aug 2025 06:50:33 +0000 Manifest next update: Sat 30 Aug 2025 06:50:33 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: jAPq1Hk0EMOqug8YLaYkWJ1zaOrE6Y0SJgfLEffB8Yo=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: C9wlOti9Kn8ir5LbjrcvSenT+h+KC9pTHhvfxL8aZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: Aug 23 06:50:33 2025 GMT Not After : Aug 30 06:50:33 2025 GMT Subject: CN=68a964b9-a7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:db:c4:22:12:aa:74:66:1a:ce:fe:e2:e9: 69:72:f3:da:4d:ab:90:d7:5f:bd:98:09:94:bb:2e: b1:e2:6a:d5:29:aa:96:87:54:a4:84:0c:c2:f6:5a: f0:b2:d9:92:17:29:ef:a2:75:22:eb:ce:7f:fd:72: 99:30:2e:7d:64:7d:96:f1:0b:a8:a8:ec:41:c0:c0: ad:f0:0c:37:b3:0f:b2:f7:a8:37:96:f8:5f:24:91: b8:c7:d0:70:f7:84:62:d0:a7:6f:bb:38:36:78:c5: 86:69:3c:9b:a2:49:f1:84:3f:bc:3f:04:81:83:82: de:22:e5:34:d9:d3:46:bf:60:ed:a3:93:97:3d:5c: c7:5d:e9:d2:c8:d3:8b:64:7c:ad:8d:de:00:16:67: bf:57:70:2c:c1:63:83:8e:8f:7a:f2:c0:46:5b:d5: 0a:03:aa:ff:5d:70:cf:8c:62:2f:d6:03:b0:14:01: 63:d3:be:97:a4:da:08:36:39:f6:76:8d:8a:10:a1: 9b:61:9f:b8:3b:13:3c:0c:4d:06:ed:21:05:6b:ea: af:16:98:29:b7:50:4c:af:8b:af:3b:25:8d:3c:59: 5c:8a:62:f2:01:0a:35:a4:80:e4:6e:49:f0:67:ca: 75:6d:1a:43:01:73:1f:30:b8:22:4d:25:96:4f:7e: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:CF:8A:52:BC:83:C2:1A:10:00:BC:F8:13:8E:B2:1E:9F:58:88 X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:38:34:d9:7a:48:7a:04:77:ae:8f:e3:23:d1:80:a0:6d:8e: 1c:05:ed:15:cb:1c:bd:fa:82:22:2b:a5:2c:3a:b4:61:13:75: cd:47:7e:82:20:1e:64:14:25:93:a0:39:dc:a0:a7:cc:8f:9e: be:65:11:ae:25:e1:8f:81:1f:be:6d:43:0a:59:87:ff:db:70: 04:4e:8d:ac:f7:69:68:37:4f:66:41:7f:67:c1:02:2e:fe:7a: 67:a0:cb:fc:de:df:c5:b4:ee:a4:27:ee:8a:69:0e:70:40:71: bc:d9:24:8d:c7:7c:52:51:80:5a:0a:f5:9d:17:55:14:22:2c: d7:83:cc:aa:ad:6e:59:ca:36:52:de:ef:95:59:67:dc:a7:e9: f5:65:c6:5c:c5:18:e3:6a:4c:84:cb:bb:27:f9:57:06:3e:c8: a9:6d:b6:03:4b:cd:88:21:2d:e4:21:f1:82:21:4e:01:67:c5: 45:8a:9e:7e:6c:b9:bc:85:5a:46:1d:46:3c:9c:6d:99:65:cb: 49:53:5b:e7:bf:53:9c:00:e6:80:83:b3:dd:ab:02:b6:50:76: f4:a9:db:c5:2e:e6:da:2d:56:dc:c2:16:63:99:be:6d:69:30: ac:b3:63:cf:c9:8f:b9:12:f4:64:a9:b7:7b:73:62:59:61:3d: df:43:c0:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyOUQxMTAvBgNVBAUTKDM1ODQxQUUzM0RGNjkzMTIwMTQwNjc5OEFFNjRGQ0Mw ODdGNUExRTUwHhcNMjUwODIzMDY1MDMzWhcNMjUwODMwMDY1MDMzWjAYMRYwFAYD VQQDEw02OGE5NjRiOS1hN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4E7bxCISqnRmGs7+4ulpcvPaTauQ11+9mAmUuy6x4mrVKaqWh1SkhAzC9lrw stmSFynvonUi685//XKZMC59ZH2W8QuoqOxBwMCt8Aw3sw+y96g3lvhfJJG4x9Bw 94Ri0Kdvuzg2eMWGaTyboknxhD+8PwSBg4LeIuU02dNGv2Dto5OXPVzHXenSyNOL ZHytjd4AFme/V3AswWODjo968sBGW9UKA6r/XXDPjGIv1gOwFAFj076XpNoINjn2 do2KEKGbYZ+4OxM8DE0G7SEFa+qvFpgpt1BMr4uvOyWNPFlcimLyAQo1pIDkbknw Z8p1bRpDAXMfMLgiTSWWT34GGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyIz4pS vIPCGhAAvPgTjrIen1iIMB8GA1UdIwQYMBaAFDWEGuM99pMSAUBnmK5k/MCH9aHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTI5RC82RTA1MEVGNkIx MzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4SUJRR2VZcm1UOHdJZjFv ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTI5RC82RTA1MEVGNkIxMzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4 SUJRR2VZcm1UOHdJZjFvZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGODTZekh6BHeuj+Mj0YCgbY4cBe0Vyxy9+oIiK6UsOrRhE3XNR36C IB5kFCWToDncoKfMj56+ZRGuJeGPgR++bUMKWYf/23AETo2s92loN09mQX9nwQIu /npnoMv83t/FtO6kJ+6KaQ5wQHG82SSNx3xSUYBaCvWdF1UUIizXg8yqrW5ZyjZS 3u+VWWfcp+n1ZcZcxRjjakyEy7sn+VcGPsipbbYDS82IIS3kIfGCIU4BZ8VFip5+ bLm8hVpGHUY8nG2ZZctJU1vnv1OcAOaAg7PdqwK2UHb0qdvFLubaLVbcwhZjmb5t aTCss2PPyY+5EvRkqbd7c2JZYT3fQ8Ah -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:22 2025 by rpki-client