$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: HnQ78yNXnUaLXpC0TCTwYBloACImxqPwtSlNIKNEPCg= Subject key identifier: 99:2E:76:FD:F2:93:56:3E:9E:00:C2:5E:A6:71:0B:DA:68:85:2E:8E Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 07BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 07A1 Signing time: Wed 02 Jul 2025 21:39:37 +0000 Manifest this update: Wed 02 Jul 2025 21:39:37 +0000 Manifest next update: Wed 09 Jul 2025 21:39:37 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: nBforIItWJqAGBK0uAqUbNQja2aa7VsmDq0AT5mYKhA=) 2: 579AC748232011EB99F53580C4F9AE02.roa (hash: YqjBxojwPaCwMm/XINEnANNU5YkC9/n1OyLFodaayD0=) 3: 82F92248127411EBAA54D786C4F9AE02.roa (hash: M4MOSHD8C3zUn5WtSLqHZosv2F6Rib+YwJz1DiCIB90=) 4: AD6517B64B0A11F091DD7F1EC4F9AE02.roa (hash: cnh03ssQexM4iFssIdQKBnnbxErXLE4ffEBnB9YmxQI=) 5: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: 0sTO565z2noH8B1LWmmqLTh0cgNZKxMSa14Hsw0ys7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Jul 2 21:39:37 2025 GMT Not After : Jul 9 21:39:37 2025 GMT Subject: CN=6865a719-cd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:32:73:ee:82:29:84:3a:b1:13:dd:3f:f5: 7d:90:f6:fb:7e:ae:fa:3e:cd:50:80:34:24:8e:a0: 41:c3:0f:11:fc:97:55:9b:51:bc:d8:de:1b:26:6d: 3f:d8:1d:ec:0e:ae:60:03:8e:8f:84:0a:0c:75:db: 47:dc:02:7b:c2:f2:71:36:43:41:a1:8f:7b:ce:5b: 08:b2:b1:37:4b:48:fc:39:95:a2:2d:66:55:9a:82: 4c:3c:7d:36:ff:e6:91:08:af:69:a4:c6:35:6e:dd: 24:21:ca:ba:eb:68:5c:0a:57:fb:f4:55:e2:40:78: 66:13:31:98:a9:07:f3:ce:1d:6f:b4:ad:ad:9e:85: 39:2d:fa:f2:0d:63:32:5e:b7:a3:bb:c0:cf:e8:07: 30:b8:16:57:8f:f0:1b:54:24:ed:a0:4f:c9:59:1b: 83:42:ad:1d:65:c7:40:57:69:da:b2:23:1e:ae:25: d1:4a:fd:b9:ec:9e:ad:7e:60:f7:bb:b8:9a:62:f7: 60:ba:48:1a:e6:cc:f8:ea:73:12:36:1e:4f:f4:e4: ef:29:34:7a:f8:8f:4f:ef:96:b9:02:f1:ce:9d:4d: cd:43:eb:4b:97:73:a1:ca:16:a1:e2:d1:25:fd:68: 0f:6c:20:7c:ee:f1:92:5f:cf:43:f2:bf:81:f9:7d: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2E:76:FD:F2:93:56:3E:9E:00:C2:5E:A6:71:0B:DA:68:85:2E:8E X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:ef:75:40:da:d3:19:76:bd:e4:0c:ae:36:7d:6e:98:21: 6c:a4:a8:23:8a:e2:f8:a2:2a:6b:74:cd:9d:82:98:3a:ca:2a: ff:51:59:ce:dc:a6:ba:07:ae:6d:50:56:e1:ef:33:2e:74:14: 00:a3:6c:a0:84:b2:3e:ee:66:fc:a3:0f:94:80:d8:7a:2b:b3: 6a:75:3a:4a:bb:85:3a:60:02:82:16:ac:87:46:58:30:72:e8: 05:c4:8f:6c:db:f2:f1:b7:6a:09:e4:18:7c:55:55:eb:19:ff: a8:b1:cb:df:e7:30:2f:23:96:90:0e:f7:41:d0:c8:47:74:6f: 69:29:0d:f7:d2:37:dc:ad:3d:e1:c0:f8:6f:e9:38:5a:f9:7f: 8d:e8:d4:7a:f3:fa:5b:a0:36:bd:bf:15:ee:c6:ad:01:03:c9: 81:f1:40:86:2a:3e:9c:00:4d:b3:d3:96:85:6d:46:51:47:c2: aa:c0:ea:52:f7:7b:49:ea:69:0f:8c:10:40:5c:64:b0:f8:e6: 3c:02:c7:bd:fa:65:b8:98:5b:e8:8d:a7:b3:d6:a4:a0:31:f4: 7d:f4:55:e4:b0:98:c3:60:04:2a:72:f7:cc:87:1d:3c:0f:e0: ab:12:5e:e4:55:bf:68:b1:34:60:09:7e:f5:23:00:26:2b:c2: 6d:c0:f7:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjUwNzAyMjEzOTM3WhcNMjUwNzA5MjEzOTM3WjAYMRYwFAYD VQQDEw02ODY1YTcxOS1jZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgIyc+6CKYQ6sRPdP/V9kPb7fq76Ps1QgDQkjqBBww8R/JdVm1G82N4bJm0/ 2B3sDq5gA46PhAoMddtH3AJ7wvJxNkNBoY97zlsIsrE3S0j8OZWiLWZVmoJMPH02 /+aRCK9ppMY1bt0kIcq662hcClf79FXiQHhmEzGYqQfzzh1vtK2tnoU5LfryDWMy Xreju8DP6AcwuBZXj/AbVCTtoE/JWRuDQq0dZcdAV2nasiMeriXRSv257J6tfmD3 u7iaYvdgukga5sz46nMSNh5P9OTvKTR6+I9P75a5AvHOnU3NQ+tLl3Ohyhah4tEl /WgPbCB87vGSX89D8r+B+X0XOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkudv3y k1Y+ngDCXqZxC9pohS6OMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Ku91QNrTGXa95AyuNn1umCFspKgjiuL4oiprdM2dgpg6yir/UVnO 3Ka6B65tUFbh7zMudBQAo2yghLI+7mb8ow+UgNh6K7NqdTpKu4U6YAKCFqyHRlgw cugFxI9s2/Lxt2oJ5Bh8VVXrGf+oscvf5zAvI5aQDvdB0MhHdG9pKQ330jfcrT3h wPhv6Tha+X+N6NR68/pboDa9vxXuxq0BA8mB8UCGKj6cAE2z05aFbUZRR8KqwOpS 93tJ6mkPjBBAXGSw+OY8Ase9+mW4mFvojaez1qSgMfR99FXksJjDYAQqcvfMhx08 D+CrEl7kVb9osTRgCX71IwAmK8JtwPdF -----END CERTIFICATE-----Generated at Fri Jul 4 00:16:38 2025 by rpki-client