$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: okKPiM6aAodpv6alBy6EIywtYfv/TF1i2vbi86vdzNk= Subject key identifier: 29:EF:26:E8:9C:DA:A0:8C:24:AD:67:E9:A0:84:C4:00:71:21:A6:9A Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 16D6 Signing time: Fri 22 Aug 2025 16:46:09 +0000 Manifest this update: Fri 22 Aug 2025 16:46:09 +0000 Manifest next update: Fri 29 Aug 2025 16:46:09 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: y78t99rw7+sSWQWf1kIIiQI20EsJmlrefo9w06ufvec=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5857 (0x16e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Aug 22 16:46:09 2025 GMT Not After : Aug 29 16:46:09 2025 GMT Subject: CN=68a89ed1-bf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:33:cc:b3:3d:a1:73:fe:81:0c:f8:31:db: 9f:af:43:1d:43:14:3f:98:a1:35:12:64:c7:89:ac: 92:c7:20:e4:06:c8:ad:22:2b:33:f5:eb:da:4a:59: d3:76:73:52:ed:8a:17:e9:fb:99:be:64:e8:59:e3: df:f0:22:59:b5:99:fa:b2:64:46:a2:37:be:63:7e: ee:5e:f5:8a:85:c0:09:24:bd:54:d0:e2:ad:3e:c0: 5a:1b:3d:29:ab:12:6c:4f:1e:e5:73:2a:59:1f:6c: 5c:d6:5a:50:2c:e1:a5:5e:4d:f1:ad:bd:81:ee:f3: 32:19:34:4d:45:e3:50:e7:36:22:23:81:f4:9d:1f: 3d:54:65:a1:25:a1:e7:62:fb:3c:7f:32:e6:62:f6: ff:0f:43:46:51:cb:89:a6:38:8e:86:ac:0a:9b:00: 4e:cd:32:09:9a:f4:38:39:f4:a8:92:f2:67:c2:4a: d1:da:43:cd:03:b6:3f:c3:7e:0d:cd:eb:c5:ba:2f: 53:b7:c9:1f:b4:14:f7:47:01:5e:e9:3c:93:7c:8c: cb:58:6a:ec:e6:8e:ad:71:f5:94:c2:37:4f:ff:2e: 8a:c5:19:c0:3f:46:d7:a9:b2:fe:e3:0b:08:10:66: 23:a6:f3:fa:a5:61:a8:b9:d9:44:64:db:be:98:17: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EF:26:E8:9C:DA:A0:8C:24:AD:67:E9:A0:84:C4:00:71:21:A6:9A X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:50:aa:f6:11:ee:40:e5:b2:62:ca:20:35:90:60:d3:6a:52: d1:bf:d3:9e:3d:7f:29:9b:1c:a4:a2:38:a8:5d:ce:bf:a5:02: 2a:38:75:b3:90:d2:99:48:e5:71:aa:15:b5:1c:3b:9a:cd:68: 00:01:6c:e3:a3:f4:2c:9a:3f:90:f4:df:21:18:fd:dc:d4:e8: b5:9b:1e:89:8a:2c:a8:a5:7f:86:23:15:3a:77:a6:07:7b:86: d6:c3:89:18:1f:2f:dd:4b:ba:38:74:01:00:54:ec:e2:4f:4d: 36:d3:34:9a:42:3b:bf:4f:98:39:79:2a:74:36:49:e3:78:6f: 3d:05:67:aa:24:15:54:71:5f:1f:b0:76:35:78:fe:1c:c4:cf: 4a:21:c0:c5:7d:f2:f2:68:ba:59:91:01:08:1c:96:d6:f0:4a: 5b:13:00:a9:1b:0d:21:9f:cf:01:fd:22:71:55:51:2b:12:bc: d3:ec:b8:b1:56:d4:d8:40:0a:6c:c7:88:9b:cf:b7:53:2b:e4: 2d:dd:45:76:eb:5d:e9:3b:ad:26:21:af:d8:57:f8:ad:c6:bb: 00:9b:a5:80:7d:29:10:d0:36:6c:f3:99:67:46:d6:04:59:c9: dc:f9:dd:52:82:a2:7c:09:e8:4d:77:ab:28:d3:e4:12:f7:d6: fc:3e:39:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwODIyMTY0NjA5WhcNMjUwODI5MTY0NjA5WjAYMRYwFAYD VQQDEw02OGE4OWVkMS1iZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9MzzLM9oXP+gQz4Mdufr0MdQxQ/mKE1EmTHiaySxyDkBsitIisz9evaSlnT dnNS7YoX6fuZvmToWePf8CJZtZn6smRGoje+Y37uXvWKhcAJJL1U0OKtPsBaGz0p qxJsTx7lcypZH2xc1lpQLOGlXk3xrb2B7vMyGTRNReNQ5zYiI4H0nR89VGWhJaHn Yvs8fzLmYvb/D0NGUcuJpjiOhqwKmwBOzTIJmvQ4OfSokvJnwkrR2kPNA7Y/w34N zevFui9Tt8kftBT3RwFe6TyTfIzLWGrs5o6tcfWUwjdP/y6KxRnAP0bXqbL+4wsI EGYjpvP6pWGoudlEZNu+mBfWyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnvJuic 2qCMJK1n6aCExABxIaaaMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlUKr2Ee5A5bJiyiA1kGDTalLRv9OePX8pmxykojioXc6/pQIqOHWz kNKZSOVxqhW1HDuazWgAAWzjo/Qsmj+Q9N8hGP3c1Oi1mx6JiiyopX+GIxU6d6YH e4bWw4kYHy/dS7o4dAEAVOziT0020zSaQju/T5g5eSp0NknjeG89BWeqJBVUcV8f sHY1eP4cxM9KIcDFffLyaLpZkQEIHJbW8EpbEwCpGw0hn88B/SJxVVErErzT7Lix VtTYQApsx4ibz7dTK+Qt3UV2613pO60mIa/YV/itxrsAm6WAfSkQ0DZs85lnRtYE Wcnc+d1SgqJ8CehNd6so0+QS99b8PjkC -----END CERTIFICATE-----Generated at Sun Aug 24 03:13:38 2025 by rpki-client