$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: Cqkz0y3lU7DhWxyuhTGJAoKK/BlX81AwMaZWDlzgZx8= Subject key identifier: 3D:99:89:73:8A:8B:A4:24:EA:F0:E8:4F:83:30:DD:35:6F:0A:3D:22 Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 07DD Signing time: Sat 18 Oct 2025 22:31:11 +0000 Manifest this update: Sat 18 Oct 2025 22:31:11 +0000 Manifest next update: Sat 25 Oct 2025 22:31:11 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: 9jX2ZFWSz+ECpQ8Qwnb+XWcNHjKqoIkwbJkefSJGaqE=) 2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: sVLnWaTceqxJcUl04loII1R7iIc0w84MM4tNrptQICk=) 3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: VXJnWLTlfJE7hcFdY+uRPYEzZpm7z+xQureyi9VYPn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Oct 18 22:31:11 2025 GMT Not After : Oct 25 22:31:11 2025 GMT Subject: CN=68f4152f-685d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:28:fa:8c:69:9d:45:0b:c3:a0:0b:0f:47: e7:e2:67:cd:77:f0:37:2b:74:9d:d6:9d:02:da:0b: e8:e6:55:7f:6b:70:0d:58:c3:47:73:88:96:fe:b7: 8b:e7:7e:b9:c2:d1:3a:4b:20:24:64:23:b2:38:e5: 97:85:38:2e:0f:03:e2:36:82:3c:28:bf:f4:a8:ad: e6:43:f5:06:f1:9b:6a:ec:86:02:88:74:05:5d:f2: 00:88:9f:13:3d:7f:77:fb:cd:0b:42:9b:96:40:54: 8c:0d:72:38:78:77:55:0c:e3:61:52:e0:2e:31:83: f6:e0:1e:b6:26:14:8d:bf:64:e9:c7:75:27:a0:80: 21:2e:dc:2d:dc:d8:00:56:b8:09:c5:40:3d:2a:c6: d3:f0:fa:37:2b:df:10:71:11:dc:d7:d3:11:e2:c8: 64:8f:a1:f0:4c:25:99:a3:62:9e:02:4a:ae:17:23: 34:5a:20:a8:cb:7c:85:d0:42:c5:c0:02:92:2d:3d: 01:3e:bd:6e:1d:6e:5f:41:ae:39:57:6e:50:da:3e: cf:a0:3d:4f:d8:00:9f:ad:83:f1:6a:78:56:fd:82: d6:62:30:d4:cd:ff:99:e4:6e:dc:bf:0e:18:84:c9: 22:d6:82:e8:04:01:1e:57:99:40:f9:1c:85:19:2b: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:89:73:8A:8B:A4:24:EA:F0:E8:4F:83:30:DD:35:6F:0A:3D:22 X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2d:57:f2:72:ab:07:58:b7:c5:3a:c0:46:3b:42:10:1f:7d: 1d:1e:b8:83:d7:a7:68:37:61:8b:8b:00:80:c0:f2:19:eb:0b: 2a:a0:89:2e:9c:e8:c7:08:af:9c:f8:bd:bc:e1:1c:42:59:9f: 3d:00:e3:64:b2:d2:c7:ab:18:a9:63:11:ac:bf:ef:7f:6d:a9: dc:eb:f6:38:6f:46:98:09:d7:96:4b:cd:8c:c6:ef:22:6d:aa: 4f:12:60:a3:d0:3a:27:f5:d3:9b:74:cf:d8:1c:77:41:20:68: cc:bc:f2:71:fa:c1:77:ec:7d:6e:8b:f7:99:f3:f5:59:51:93: 05:8b:cb:06:98:f4:e2:8f:b4:6b:5e:22:28:70:4c:46:77:4c: f5:2a:39:ec:35:3d:e2:68:7f:1a:c2:64:a3:3f:a5:38:69:12: e9:d8:ec:b7:29:06:b8:38:64:79:1a:38:f7:98:96:fa:ce:31: 53:cb:3b:4d:70:ed:83:04:1e:91:75:59:7d:0f:6b:f9:f3:7f: d2:2e:d1:a3:5d:2c:e2:45:f5:88:f0:1d:69:e3:24:a5:29:d5: 82:96:40:19:9a:f2:8c:7b:e2:c9:70:5a:ec:55:dd:b0:67:db: b3:7a:fc:97:2c:fc:30:91:df:d6:8d:f0:3a:99:65:2c:c9:84: 5e:f3:20:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjUxMDE4MjIzMTExWhcNMjUxMDI1MjIzMTExWjAYMRYwFAYD VQQDEw02OGY0MTUyZi02ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRgo+oxpnUULw6ALD0fn4mfNd/A3K3Sd1p0C2gvo5lV/a3ANWMNHc4iW/reL 5365wtE6SyAkZCOyOOWXhTguDwPiNoI8KL/0qK3mQ/UG8Ztq7IYCiHQFXfIAiJ8T PX93+80LQpuWQFSMDXI4eHdVDONhUuAuMYP24B62JhSNv2Tpx3UnoIAhLtwt3NgA VrgJxUA9KsbT8Po3K98QcRHc19MR4shkj6HwTCWZo2KeAkquFyM0WiCoy3yF0ELF wAKSLT0BPr1uHW5fQa45V25Q2j7PoD1P2ACfrYPxanhW/YLWYjDUzf+Z5G7cvw4Y hMki1oLoBAEeV5lA+RyFGSshJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2ZiXOK i6Qk6vDoT4Mw3TVvCj0iMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/LVfycqsHWLfFOsBGO0IQH30dHriD16doN2GLiwCAwPIZ6wsqoIku nOjHCK+c+L284RxCWZ89AONkstLHqxipYxGsv+9/banc6/Y4b0aYCdeWS82Mxu8i bapPEmCj0Don9dObdM/YHHdBIGjMvPJx+sF37H1ui/eZ8/VZUZMFi8sGmPTij7Rr XiIocExGd0z1KjnsNT3iaH8awmSjP6U4aRLp2Oy3KQa4OGR5Gjj3mJb6zjFTyztN cO2DBB6RdVl9D2v583/SLtGjXSziRfWI8B1p4ySlKdWClkAZmvKMe+LJcFrsVd2w Z9uzevyXLPwwkd/WjfA6mWUsyYRe8yCF -----END CERTIFICATE-----Generated at Mon Oct 20 22:24:35 2025 by rpki-client