$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: EzuyCd+keO70jX1E/LQpo5YCuCTs/VOTMd324+o/3jQ= Subject key identifier: CD:5D:7A:46:14:D1:F4:0C:89:A6:8B:06:B4:E8:CD:4E:45:4D:56:92 Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 16F3 Signing time: Sat 18 Oct 2025 17:03:42 +0000 Manifest this update: Sat 18 Oct 2025 17:03:41 +0000 Manifest next update: Sat 25 Oct 2025 17:03:41 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: p85Y1wSz68wT//m9b16ouCyTwbWx83w9KkQkjqCUqKc=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5886 (0x16fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Oct 18 17:03:41 2025 GMT Not After : Oct 25 17:03:41 2025 GMT Subject: CN=68f3c86e-10fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:53:64:d0:d7:3f:46:43:fd:a8:9a:ed:36: 74:76:b0:50:64:19:f5:7d:29:75:16:f6:ff:4c:56: db:68:7e:f6:d1:92:d2:1f:99:00:98:bf:eb:29:a6: 87:44:82:e6:f3:71:3a:46:f4:12:77:bc:3e:88:fc: 50:19:50:39:c6:8b:33:b0:66:06:d6:11:08:d0:30: 01:9b:63:01:45:0c:74:12:d2:ac:d8:c1:57:87:11: c5:3d:6b:cf:a7:3e:19:cd:87:7b:b7:f6:05:59:dc: f7:bc:68:9f:5c:db:c1:a4:00:8d:2e:50:ff:b6:99: 73:d5:50:30:f5:ec:f4:e4:d8:e8:46:11:21:d9:57: e4:84:90:61:81:b1:08:76:c0:6d:f9:d3:06:cf:1f: 90:18:02:2c:d1:8d:d8:15:28:6a:bb:71:19:54:90: b5:f5:f1:0b:32:fb:32:24:2e:da:ac:5b:3e:42:f3: e4:0a:db:8d:af:8e:3c:f3:76:6a:04:1a:81:67:33: 74:6d:36:b1:c5:58:82:42:8c:3c:25:e8:5a:b0:4f: 06:0e:2e:07:57:f5:c9:f9:4f:a2:48:c4:35:df:60: 12:37:93:77:77:bd:63:84:35:b9:0c:8e:ab:c3:32: b9:f1:10:54:5e:a8:ce:da:4f:f6:01:a2:c7:3d:b2: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5D:7A:46:14:D1:F4:0C:89:A6:8B:06:B4:E8:CD:4E:45:4D:56:92 X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:18:23:50:c6:25:e4:82:f7:3c:fc:b3:68:49:0b:08:a6:02: 15:33:8d:b8:0d:6b:95:9a:38:9f:d4:ea:c3:92:00:34:6f:4f: 64:fe:48:69:b5:bf:f8:5c:97:c9:b9:07:19:db:62:2d:be:88: 4b:66:2a:8a:3e:a4:91:3f:cf:60:8f:df:ec:8f:1d:19:94:bd: e5:e5:f9:3d:59:e4:54:d7:d0:df:bf:be:23:33:72:05:d0:8d: ee:de:56:e0:99:65:a1:91:ec:5c:24:02:6c:b2:6f:5a:23:4c: f7:de:e6:06:f2:af:e7:66:5d:16:34:df:7e:5c:f6:d8:61:7b: 4d:64:bb:0e:9b:b4:a1:c0:d3:d7:30:13:5f:1a:d7:22:12:3a: fb:6f:c7:7e:82:03:92:5c:25:64:55:f3:26:5a:5f:fa:13:d8: 39:15:8e:ef:e8:e3:76:fc:46:b0:52:b1:2f:ed:08:78:f5:9e: 76:61:65:5d:84:00:aa:76:f3:97:cb:02:24:ab:22:0f:bd:d0: 24:57:2b:00:14:3a:67:6c:6b:1b:a9:03:5f:0e:ac:d9:de:9d: 6d:25:4d:f8:2f:92:5b:d6:69:24:3c:23:09:37:03:80:6c:1d: 91:f5:d7:01:97:2d:0a:03:c4:a7:c4:e8:9b:be:54:18:7f:0a: 97:4f:fb:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUxMDE4MTcwMzQxWhcNMjUxMDI1MTcwMzQxWjAYMRYwFAYD VQQDEw02OGYzYzg2ZS0xMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQZTZNDXP0ZD/aia7TZ0drBQZBn1fSl1Fvb/TFbbaH720ZLSH5kAmL/rKaaH RILm83E6RvQSd7w+iPxQGVA5xoszsGYG1hEI0DABm2MBRQx0EtKs2MFXhxHFPWvP pz4ZzYd7t/YFWdz3vGifXNvBpACNLlD/tplz1VAw9ez05NjoRhEh2VfkhJBhgbEI dsBt+dMGzx+QGAIs0Y3YFShqu3EZVJC19fELMvsyJC7arFs+QvPkCtuNr44883Zq BBqBZzN0bTaxxViCQow8JehasE8GDi4HV/XJ+U+iSMQ132ASN5N3d71jhDW5DI6r wzK58RBUXqjO2k/2AaLHPbK4nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1dekYU 0fQMiaaLBrTozU5FTVaSMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByGCNQxiXkgvc8/LNoSQsIpgIVM424DWuVmjif1OrDkgA0b09k/khp tb/4XJfJuQcZ22ItvohLZiqKPqSRP89gj9/sjx0ZlL3l5fk9WeRU19Dfv74jM3IF 0I3u3lbgmWWhkexcJAJssm9aI0z33uYG8q/nZl0WNN9+XPbYYXtNZLsOm7ShwNPX MBNfGtciEjr7b8d+ggOSXCVkVfMmWl/6E9g5FY7v6ON2/EawUrEv7Qh49Z52YWVd hACqdvOXywIkqyIPvdAkVysAFDpnbGsbqQNfDqzZ3p1tJU34L5Jb1mkkPCMJNwOA bB2R9dcBly0KA8SnxOibvlQYfwqXT/t1 -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:12 2025 by rpki-client