$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: ll6Z6RqdhiWc+p6XX1+nIsA4fql7TA23wSAtGECyoh4= Subject key identifier: BA:F3:90:C1:9F:E2:EF:8E:2F:CA:3A:EC:45:81:46:29:91:9E:7C:64 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C70 Signing time: Fri 08 Aug 2025 18:42:59 +0000 Manifest this update: Fri 08 Aug 2025 18:42:58 +0000 Manifest next update: Fri 15 Aug 2025 18:42:58 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: HEgxqfEzfZrDpL6I4l2ywbU4T/etQcD5e8sJXLTFC3E=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Aug 8 18:42:58 2025 GMT Not After : Aug 15 18:42:58 2025 GMT Subject: CN=68964533-fed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:1d:c0:9b:8d:9b:0c:b9:fc:4e:9b:f1:36: 8b:c9:33:cd:65:79:88:fa:f2:a9:9d:f7:eb:e2:e7: 4a:86:cc:88:31:a0:eb:3d:c2:53:1c:ab:57:02:26: 1f:e1:e5:1f:b3:dd:b2:f7:4d:63:3b:1d:c1:d3:c8: f2:4a:5f:b0:47:f9:2c:4e:1a:6a:ee:79:40:13:3b: cf:cb:68:88:bf:c7:d1:98:98:33:53:14:81:84:65: 1d:d0:30:f3:af:f1:cd:8f:c0:07:23:6f:09:71:3c: ce:f9:57:c0:ed:8f:f2:bc:93:2e:bc:1e:2e:0c:de: 60:7b:3d:89:80:47:8f:47:30:bc:55:f2:61:0c:d4: ad:08:95:19:af:08:77:7c:6d:00:04:5c:a4:d9:2c: 1e:74:e1:9e:09:d8:52:a0:5c:6e:13:ad:0e:a9:2e: ff:3e:6d:f2:40:70:f6:53:9f:eb:ca:4e:8a:86:27: cd:fc:bf:fb:25:9d:bf:4f:be:c3:77:bc:6f:7b:ce: 83:b9:26:0f:b1:a6:1a:f2:a2:e9:ef:36:5e:01:1b: 58:ab:19:7b:72:10:b9:48:59:88:a6:81:48:43:4f: ac:66:f5:5b:53:70:10:9a:b1:0b:2b:94:dc:0f:a9: 3e:ea:d9:0d:d3:3e:b4:75:69:27:06:eb:f2:18:60: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F3:90:C1:9F:E2:EF:8E:2F:CA:3A:EC:45:81:46:29:91:9E:7C:64 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:90:a5:24:1a:8a:97:e7:bc:82:a0:dd:34:7a:de:43:fc:46: a7:3c:70:c3:48:ef:2f:75:6f:37:31:48:7a:c4:7d:64:32:bc: 58:9a:22:08:fa:03:30:fd:b2:d2:3f:80:15:f4:a0:6d:dc:01: ae:51:ec:93:f0:79:ac:fa:bf:5a:95:e5:78:d8:b5:45:4b:34: d4:1a:4e:20:30:47:74:a6:e8:c2:5d:49:b2:fe:0f:4e:ff:c9: bb:10:48:cb:58:f8:76:0c:f8:fd:91:56:ee:33:ea:a0:66:1c: ad:49:93:4a:b8:a2:e4:1d:65:ca:1b:b2:61:2a:e7:dd:ef:43: f9:59:85:50:5b:f4:60:14:0b:e2:96:9b:c8:b2:04:02:ac:cb: 0d:3e:9d:d2:47:b3:b5:b4:07:03:15:87:57:36:75:35:a9:f5: a4:c1:85:10:d2:0f:1e:d4:0e:e7:26:1d:d6:26:8a:d5:78:b7: bf:ef:45:fe:b5:4a:e4:c0:76:44:cb:65:0d:0f:b9:8d:02:a4: 73:07:6f:ed:da:f0:7a:16:36:80:c9:09:d1:ba:e1:a4:de:59: 31:19:52:11:19:de:d6:f5:4e:7b:91:0a:a5:61:b3:2c:f3:f2: 2c:56:d8:fc:39:ca:5a:96:b7:29:58:c9:b3:ea:6d:f1:e0:49: 42:e3:d9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUwODA4MTg0MjU4WhcNMjUwODE1MTg0MjU4WjAYMRYwFAYD VQQDEw02ODk2NDUzMy1mZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQsdwJuNmwy5/E6b8TaLyTPNZXmI+vKpnffr4udKhsyIMaDrPcJTHKtXAiYf 4eUfs92y901jOx3B08jySl+wR/ksThpq7nlAEzvPy2iIv8fRmJgzUxSBhGUd0DDz r/HNj8AHI28JcTzO+VfA7Y/yvJMuvB4uDN5gez2JgEePRzC8VfJhDNStCJUZrwh3 fG0ABFyk2SwedOGeCdhSoFxuE60OqS7/Pm3yQHD2U5/ryk6KhifN/L/7JZ2/T77D d7xve86DuSYPsaYa8qLp7zZeARtYqxl7chC5SFmIpoFIQ0+sZvVbU3AQmrELK5Tc D6k+6tkN0z60dWknBuvyGGAVNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrzkMGf 4u+OL8o67EWBRimRnnxkMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMkKUkGoqX57yCoN00et5D/EanPHDDSO8vdW83MUh6xH1kMrxYmiII +gMw/bLSP4AV9KBt3AGuUeyT8Hms+r9aleV42LVFSzTUGk4gMEd0pujCXUmy/g9O /8m7EEjLWPh2DPj9kVbuM+qgZhytSZNKuKLkHWXKG7JhKufd70P5WYVQW/RgFAvi lpvIsgQCrMsNPp3SR7O1tAcDFYdXNnU1qfWkwYUQ0g8e1A7nJh3WJorVeLe/70X+ tUrkwHZEy2UND7mNAqRzB2/t2vB6FjaAyQnRuuGk3lkxGVIRGd7W9U57kQqlYbMs 8/IsVtj8OcpalrcpWMmz6m3x4ElC49mF -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:13 2025 by rpki-client