$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft File: NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft (raw, json) Hash identifier: uRfEWdglPkg2hON0YUJqWYvZ4F0CVURXx7a+7/kkP2g= Subject key identifier: C6:35:4B:27:2F:77:FC:B0:AC:CD:BA:F2:08:B3:B9:DB:62:D4:F3:AD Authority key identifier: 34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E Certificate issuer: /CN=A917F4D6/serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft Manifest number: 02 Signing time: Mon 20 Oct 2025 01:21:27 +0000 Manifest this update: Mon 20 Oct 2025 01:21:26 +0000 Manifest next update: Mon 27 Oct 2025 01:21:26 +0000 Files and hashes: 1: NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl (hash: Zpa0G9kGmj2k9Kz6e9Sg5TkkWECaaB7uRWommNZTCcI=) 2: 16AF3BB6AD5311F0BF38B65BC4F9AE02.roa (hash: hkkEwa4bCfKDvdkYx3RtKtxGG8ZZ2JRfkwu5rugA92s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D6, serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E Validity Not Before: Oct 20 01:21:26 2025 GMT Not After : Oct 27 01:21:26 2025 GMT Subject: CN=68f58e96-7ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:8e:9a:46:b0:5b:16:22:2c:0b:20:b5:28: 9c:0c:0b:ca:5b:80:ef:95:16:05:73:65:3d:ac:b7: 9f:eb:d8:cd:e6:be:00:c4:85:87:bd:68:99:da:7b: a3:76:3f:63:b1:b5:7e:3b:7b:2e:5d:2e:49:60:f1: f3:75:7c:46:50:39:be:db:4f:21:1c:7e:c8:00:e3: 4e:ff:8a:4d:95:a3:9d:67:c8:8e:dc:3c:ce:0d:cb: 8a:72:50:cd:95:e9:77:f6:40:e1:1e:b9:67:b6:54: 6a:0d:13:4b:cf:ab:1e:46:04:cb:83:cf:ea:58:c7: 48:27:65:67:59:d4:82:06:b2:e0:e3:5f:36:0b:42: 1f:5d:8f:5f:60:e0:12:6a:77:94:28:1e:03:94:d8: e0:e3:ad:4a:01:ae:b2:36:ac:7e:51:15:ce:47:df: 9b:f8:e8:a8:85:76:32:c6:3e:10:2a:b3:7d:f9:eb: aa:29:83:f2:be:eb:2a:1c:f4:51:29:b8:32:8d:2d: 8d:f8:6c:87:cc:2a:0e:82:ca:e8:b1:25:1b:e2:c4: d2:ca:c0:6d:84:aa:27:d9:57:a9:18:89:db:54:bb: cb:e0:3d:13:d4:d5:9b:6f:59:eb:ce:bd:2f:bc:62: 5c:5e:25:e6:ae:20:6c:c8:6d:36:2f:86:52:f8:88: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:35:4B:27:2F:77:FC:B0:AC:CD:BA:F2:08:B3:B9:DB:62:D4:F3:AD X509v3 Authority Key Identifier: keyid:34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e5:45:ab:fe:de:c6:56:ae:71:b5:dc:d9:c5:c9:0a:0e:43: 66:ef:89:67:77:cf:a2:63:20:e3:d8:ff:08:96:95:4a:9d:f8: 13:08:c3:31:f9:69:be:0b:05:6a:c1:86:28:fe:5c:47:62:75: e5:0e:52:43:91:26:1c:9d:41:eb:42:c6:f0:8b:d2:f5:16:40: 2d:1a:2f:7a:00:ce:63:d5:7d:f7:cc:3c:5a:85:95:b2:0c:33: 0f:0c:d5:e5:e3:b3:90:5e:14:b1:2d:3a:f8:0f:8f:c4:fe:6b: 5c:a0:46:b0:fd:bf:b2:63:a8:67:af:b6:29:de:39:2a:8a:97: ed:93:ff:52:55:37:e7:0f:54:a8:11:9e:9a:80:19:d7:c5:f6: 86:6b:a5:87:d5:dd:9d:45:92:76:68:b7:61:b3:cc:b1:7c:75: ba:a5:71:29:08:0a:d2:e5:2e:5e:e7:d7:2d:5a:e8:ed:74:be: 34:b0:c9:11:71:b5:82:fc:70:9b:f5:37:41:d0:d4:53:72:30: c2:15:37:46:a1:53:4c:96:72:e7:43:99:6a:b7:be:94:2d:ba: dc:c6:29:73:1d:ed:af:0b:9c:43:79:3a:49:49:d9:dc:d7:93: b6:62:68:20:b1:70:49:e9:ee:87:88:a1:56:83:de:03:55:9b: dc:00:01:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRENjExMC8GA1UEBRMoMzRFNjEzRjkzRTE2MzJEOENCOEY2NjgzNEM4NEI3MUI0 NzcwQjY2RTAeFw0yNTEwMjAwMTIxMjZaFw0yNTEwMjcwMTIxMjZaMBgxFjAUBgNV BAMTDTY4ZjU4ZTk2LTdlYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC62Y6aRrBbFiIsCyC1KJwMC8pbgO+VFgVzZT2st5/r2M3mvgDEhYe9aJnae6N2 P2OxtX47ey5dLklg8fN1fEZQOb7bTyEcfsgA407/ik2Vo51nyI7cPM4Ny4pyUM2V 6Xf2QOEeuWe2VGoNE0vPqx5GBMuDz+pYx0gnZWdZ1IIGsuDjXzYLQh9dj19g4BJq d5QoHgOU2ODjrUoBrrI2rH5RFc5H35v46KiFdjLGPhAqs33566opg/K+6yoc9FEp uDKNLY34bIfMKg6CyuixJRvixNLKwG2EqifZV6kYidtUu8vgPRPU1ZtvWevOvS+8 YlxeJeauIGzIbTYvhlL4iD3LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxjVLJy93 /LCszbryCLO522LU860wHwYDVR0jBBgwFoAUNOYT+T4WMtjLj2aDTIS3G0dwtm4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEQ2L0JCQjkwOTlFQUQ1 MjExRjA5MzNFRjg1N0M0RjlBRTAyL05PWVQtVDRXTXRqTGoyYURUSVMzRzBkd3Rt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTk9ZVC1UNFdNdGpMajJhRFRJUzNHMGR3dG00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEQ2L0JCQjkwOTlFQUQ1MjExRjA5MzNFRjg1N0M0RjlBRTAyL05PWVQtVDRXTXRq TGoyYURUSVMzRzBkd3RtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIflRav+3sZWrnG13NnFyQoOQ2bviWd3z6JjIOPY/wiWlUqd+BMIwzH5 ab4LBWrBhij+XEdideUOUkORJhydQetCxvCL0vUWQC0aL3oAzmPVfffMPFqFlbIM Mw8M1eXjs5BeFLEtOvgPj8T+a1ygRrD9v7JjqGevtineOSqKl+2T/1JVN+cPVKgR npqAGdfF9oZrpYfV3Z1FknZot2GzzLF8dbqlcSkICtLlLl7n1y1a6O10vjSwyRFx tYL8cJv1N0HQ1FNyMMIVN0ahU0yWcudDmWq3vpQtutzGKXMd7a8LnEN5OklJ2dzX k7ZiaCCxcEnp7oeIoVaD3gNVm9wAASo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:37 2025 by rpki-client