$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: lRYrkuUD6zDFPOgBOxPKiNysCbTqJTfcQn3+XZOHh3A= Subject key identifier: D7:B3:68:90:1C:44:47:73:5D:C3:51:DE:52:09:37:DC:5C:24:D5:87 Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 07BE Signing time: Fri 22 Aug 2025 21:27:13 +0000 Manifest this update: Fri 22 Aug 2025 21:27:12 +0000 Manifest next update: Fri 29 Aug 2025 21:27:12 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: Eti3zap/9jXwzbk3kH6PhYv+qagDPOTybSySXrvhjqU=) 2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: sWepAg9vOOQr0bNjmy6UlY09ZaZXwokEECnmuTF3nsc=) 3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: 0sTO565z2noH8B1LWmmqLTh0cgNZKxMSa14Hsw0ys7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Aug 22 21:27:12 2025 GMT Not After : Aug 29 21:27:12 2025 GMT Subject: CN=68a8e0b1-d872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:ea:0f:1c:10:42:99:6e:f3:fb:99:7d:ab: 52:d9:cb:c2:1c:4e:c2:a1:9f:9c:02:6a:8d:ef:d8: ec:20:f9:16:4e:cc:c3:e0:8d:7a:d5:5b:a6:7d:20: 8c:df:2a:fa:68:b6:8c:78:9d:17:86:64:34:c8:0b: 72:fb:55:88:72:ea:28:d8:08:f2:fa:dc:d8:a9:a0: 5f:3f:9e:98:0d:38:35:e5:99:c7:ab:d4:44:3b:9f: dd:4c:d9:92:f4:46:82:37:1d:22:1f:d9:46:0b:0e: e5:d7:ed:47:29:bf:68:31:1d:eb:d9:39:b6:a8:04: 0a:e7:87:b9:48:46:ee:32:18:dc:44:55:b4:32:77: cf:64:49:31:27:ea:b4:c9:f5:27:01:95:bb:3a:d9: 2d:a8:63:bb:9c:b2:0d:dc:30:4f:d1:b7:6a:16:5c: 87:4f:6c:8e:c9:a5:0e:27:a0:ad:49:a3:0e:29:2f: 4a:f4:3f:e0:dd:3e:7b:cf:a1:e6:9f:51:79:d3:7a: 05:15:8c:8c:dc:c1:af:3f:bd:6c:38:a7:57:99:66: 74:57:0c:7d:ce:ed:ec:f5:20:68:4c:6f:4b:40:77: 2d:88:54:29:87:1f:58:18:42:4d:ab:b3:c0:fd:fe: 30:77:82:b9:de:70:c1:7d:af:f2:e0:1a:6a:8f:50: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B3:68:90:1C:44:47:73:5D:C3:51:DE:52:09:37:DC:5C:24:D5:87 X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3b:77:ff:49:04:d9:27:ca:57:e2:d4:d4:01:a3:74:ae:0a: 28:0d:f4:7c:0c:da:d3:bb:ef:1b:ff:25:85:69:1d:07:73:34: ef:01:2c:b3:1d:e0:ae:6c:4b:c1:37:0b:a2:9f:78:73:5f:3e: c3:16:a0:8c:3f:34:5a:ac:7e:f0:a2:73:eb:89:ea:1f:72:83: c6:c1:e3:91:03:0a:74:62:12:d8:e3:71:7d:e4:96:df:bf:f2: 09:bf:f5:59:72:7f:9d:d7:df:7c:02:81:4d:07:7a:83:d1:f0: 1b:f7:c9:16:7d:40:1a:d2:8d:5a:5f:70:d6:de:e6:b0:3b:4a: c1:5a:19:4b:d4:48:1f:8f:7d:c5:40:d2:d7:4b:cc:3c:87:bf: a9:ba:71:3f:9b:9b:79:9d:e6:1f:9a:b3:a6:a4:d5:72:60:7b: 79:a3:2c:84:37:c7:3a:5c:3d:f4:4b:97:4f:dd:f3:27:34:06: 9b:41:69:1e:84:5b:18:58:d8:de:da:bd:6e:b0:4d:fa:46:f1: c6:3c:1c:d8:8e:a7:ff:52:d4:b8:ef:e1:97:83:a5:2b:df:65: 9d:b0:73:19:1f:ed:a3:f3:a1:ef:8c:fd:ae:c1:b0:c4:f3:b2: d9:5d:13:25:9c:56:61:38:c8:c4:7b:29:98:3a:db:9a:ab:1b: f6:bc:4e:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjUwODIyMjEyNzEyWhcNMjUwODI5MjEyNzEyWjAYMRYwFAYD VQQDEw02OGE4ZTBiMS1kODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlfqDxwQQplu8/uZfatS2cvCHE7CoZ+cAmqN79jsIPkWTszD4I161VumfSCM 3yr6aLaMeJ0XhmQ0yAty+1WIcuoo2Ajy+tzYqaBfP56YDTg15ZnHq9REO5/dTNmS 9EaCNx0iH9lGCw7l1+1HKb9oMR3r2Tm2qAQK54e5SEbuMhjcRFW0MnfPZEkxJ+q0 yfUnAZW7OtktqGO7nLIN3DBP0bdqFlyHT2yOyaUOJ6CtSaMOKS9K9D/g3T57z6Hm n1F503oFFYyM3MGvP71sOKdXmWZ0Vwx9zu3s9SBoTG9LQHctiFQphx9YGEJNq7PA /f4wd4K53nDBfa/y4Bpqj1AImQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNezaJAc REdzXcNR3lIJN9xcJNWHMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeO3f/SQTZJ8pX4tTUAaN0rgooDfR8DNrTu+8b/yWFaR0HczTvASyz HeCubEvBNwuin3hzXz7DFqCMPzRarH7wonPrieofcoPGweORAwp0YhLY43F95Jbf v/IJv/VZcn+d1998AoFNB3qD0fAb98kWfUAa0o1aX3DW3uawO0rBWhlL1Egfj33F QNLXS8w8h7+punE/m5t5neYfmrOmpNVyYHt5oyyEN8c6XD30S5dP3fMnNAabQWke hFsYWNje2r1usE36RvHGPBzYjqf/UtS47+GXg6Ur32WdsHMZH+2j86HvjP2uwbDE 87LZXRMlnFZhOMjEeymYOtuaqxv2vE5t -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:03 2025 by rpki-client