$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: Yzf43EJU+syNGVuTOSmMiuI46MwI3hDSVr83/U5Ny6k= Subject key identifier: 34:B5:34:DD:D7:B8:04:B1:0B:66:25:BC:AD:93:A1:45:F1:1B:57:C4 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 34C6 Signing time: Fri 22 Aug 2025 15:02:52 +0000 Manifest this update: Fri 22 Aug 2025 15:02:51 +0000 Manifest next update: Fri 29 Aug 2025 15:02:51 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: hgbIgj83vk0gXdsFhtgUAK0gps/cCl2HysWfGXvUhBM=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OVp7PpV4WrIA8CZ/VZbdyu0UkcIERq8sMNiqxbn0hvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Aug 22 15:02:51 2025 GMT Not After : Aug 29 15:02:51 2025 GMT Subject: CN=68a8869b-bc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:1e:06:0d:a1:68:e9:fb:c1:41:de:80:5a: 78:07:58:d4:47:55:cd:78:77:2e:a4:3d:d8:25:7b: f5:9e:bf:b7:13:82:9e:6c:12:35:d2:0d:4e:76:63: 94:36:dd:60:a7:e5:05:20:57:1f:67:d7:30:ff:4d: ba:f8:2f:50:65:86:bf:ac:fc:01:b2:89:fa:b1:72: da:e9:88:5c:60:f9:73:ae:e6:4b:89:72:a9:9c:fb: ce:7e:e3:09:d4:6f:1d:86:85:e6:f3:23:42:12:fa: 98:27:16:b2:50:a1:99:4b:15:f0:8d:11:9d:1f:f0: c9:d2:29:e5:b6:67:36:89:a0:e2:f8:53:74:e5:c9: 7a:25:21:ab:2b:d9:5e:3c:4d:c8:55:ff:5d:2e:a1: 1b:b9:86:15:41:69:96:8b:4c:ed:b2:ee:bf:14:6b: cf:ca:db:59:d1:65:ad:dd:26:c9:c1:20:ff:36:60: 0f:ae:a7:37:35:7d:60:42:66:81:13:65:05:09:30: c7:b8:ca:d3:a8:ef:08:16:bc:dc:95:61:30:db:25: eb:45:88:75:e0:e7:ad:4d:1c:a3:8f:da:22:15:fd: 6f:1e:e3:a4:87:8a:f9:69:bc:f3:0d:ec:b7:9b:44: a2:f8:88:f2:4a:e5:21:a1:67:ad:77:ed:cf:6a:a8: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B5:34:DD:D7:B8:04:B1:0B:66:25:BC:AD:93:A1:45:F1:1B:57:C4 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1b:90:dc:4b:6f:e4:a1:64:7c:b8:b2:60:f8:e1:dd:10:92: 85:3e:cf:58:68:c2:48:66:b7:3a:00:b1:74:3a:f3:d4:26:05: 17:98:2d:36:59:99:d9:48:02:3d:a2:c7:d5:bf:f3:7e:d4:58: 7b:e5:72:42:3e:08:2d:f2:b5:b6:3f:72:c7:71:4c:4e:29:35: 52:cb:c9:d4:92:10:f2:8f:73:ce:68:c2:b0:22:d8:1a:1a:4d: 55:07:d2:c1:78:61:de:b9:ce:25:24:12:b5:01:0f:65:3a:24: 56:3c:7b:50:d8:8a:0b:a2:f5:8f:7f:80:75:c9:48:95:99:9b: 62:34:bf:ed:13:f3:f3:54:69:2f:93:8f:67:ae:17:1c:3f:34: 11:70:79:fd:57:13:02:64:b4:46:95:75:8c:85:52:a5:00:5d: 5d:24:89:e6:91:c1:d9:24:00:68:0b:28:02:36:c1:a6:98:f9: 2d:42:8f:29:00:42:f6:22:62:dd:b1:5a:ea:9a:7c:ea:0a:e7: e9:43:cb:97:9b:bd:48:b6:45:41:40:f4:ca:59:0e:f4:34:12: 79:16:57:ff:bd:c0:fa:25:03:9b:5c:45:0d:f5:e8:bf:80:d6: 56:f4:2f:f0:04:75:21:25:08:57:bc:8a:ca:3c:b3:83:28:e9: 2b:01:2f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUwODIyMTUwMjUxWhcNMjUwODI5MTUwMjUxWjAYMRYwFAYD VQQDEw02OGE4ODY5Yi1iYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+ceBg2haOn7wUHegFp4B1jUR1XNeHcupD3YJXv1nr+3E4KebBI10g1OdmOU Nt1gp+UFIFcfZ9cw/026+C9QZYa/rPwBson6sXLa6YhcYPlzruZLiXKpnPvOfuMJ 1G8dhoXm8yNCEvqYJxayUKGZSxXwjRGdH/DJ0inltmc2iaDi+FN05cl6JSGrK9le PE3IVf9dLqEbuYYVQWmWi0ztsu6/FGvPyttZ0WWt3SbJwSD/NmAPrqc3NX1gQmaB E2UFCTDHuMrTqO8IFrzclWEw2yXrRYh14OetTRyjj9oiFf1vHuOkh4r5abzzDey3 m0Si+IjySuUhoWetd+3Paqg3ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS1NN3X uASxC2YlvK2ToUXxG1fEMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9G5DcS2/koWR8uLJg+OHdEJKFPs9YaMJIZrc6ALF0OvPUJgUXmC02 WZnZSAI9osfVv/N+1Fh75XJCPggt8rW2P3LHcUxOKTVSy8nUkhDyj3POaMKwItga Gk1VB9LBeGHeuc4lJBK1AQ9lOiRWPHtQ2IoLovWPf4B1yUiVmZtiNL/tE/PzVGkv k49nrhccPzQRcHn9VxMCZLRGlXWMhVKlAF1dJInmkcHZJABoCygCNsGmmPktQo8p AEL2ImLdsVrqmnzqCufpQ8uXm71ItkVBQPTKWQ70NBJ5Flf/vcD6JQObXEUN9ei/ gNZW9C/wBHUhJQhXvIrKPLODKOkrAS+I -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:19 2025 by rpki-client