$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: Kj1SHEPaFwVdJaesJH9tPWf8PshRwgvJIz9mDRhH3qM= Subject key identifier: FD:88:EE:9C:5F:60:66:1B:58:5E:2D:4D:8A:DC:FD:B9:80:89:61:D0 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C9D Signing time: Tue 04 Nov 2025 18:30:36 +0000 Manifest this update: Tue 04 Nov 2025 18:30:36 +0000 Manifest next update: Tue 11 Nov 2025 18:30:36 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: BtxmuwV+zHtsy+XotmLIT0Uc+E3doTKr6jcEDuEYvIE=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Nov 4 18:30:36 2025 GMT Not After : Nov 11 18:30:36 2025 GMT Subject: CN=690a464c-0bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:99:bb:dc:d5:54:88:34:00:47:dc:61:06: ae:7e:2d:f5:70:bd:96:d4:bb:f1:32:b6:e3:69:de: f2:2a:7a:79:41:f4:24:e7:20:45:2b:08:eb:76:d7: 21:e8:58:83:b5:7b:44:db:7e:e7:b8:25:22:b0:0e: ea:4a:da:97:b0:a6:c1:11:4d:75:2d:ac:21:b6:4e: 53:ae:07:e3:43:60:ce:d9:1a:76:9b:fc:ab:68:28: 14:0b:c3:5f:66:e9:e4:96:d1:02:ba:ec:04:39:c6: 1f:51:cc:50:82:4f:ed:ff:a4:ff:06:25:c9:eb:7b: d4:b8:33:71:55:6e:a9:78:ae:57:9b:13:79:5a:80: b1:de:33:ab:ca:02:71:12:2d:51:29:b4:15:77:ba: ee:64:1b:3c:62:4b:35:70:3f:51:5c:9c:54:a7:e1: c0:8f:f9:0c:84:41:a3:19:58:53:b1:72:32:7e:68: 35:d9:e3:ef:e2:fc:da:9f:0b:47:77:0d:a7:bb:23: 77:d8:15:b3:02:82:ef:29:d4:28:4e:ff:66:2b:29: 8c:ec:4d:b5:c2:77:c1:cb:60:e7:12:0a:ee:25:19: 70:ae:1b:34:04:41:73:c6:56:24:7f:22:b0:c3:53: cc:a8:91:a8:ed:60:5e:57:c2:6c:d8:b0:15:0a:df: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:88:EE:9C:5F:60:66:1B:58:5E:2D:4D:8A:DC:FD:B9:80:89:61:D0 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:09:f1:83:be:0d:4c:90:f6:f1:83:97:35:f9:69:3c:74:cb: cf:6e:a5:e7:90:61:69:94:2d:76:a7:29:76:22:43:ce:0a:cf: 81:d9:92:6c:33:3f:32:e8:09:72:05:c6:c7:2b:fc:85:15:45: df:80:01:eb:a8:12:c4:34:7e:e1:d7:4a:0c:fc:16:e9:fc:43: a5:5c:e8:54:7b:67:5d:59:26:da:e2:67:34:9f:f5:e3:fe:f1: d1:fd:67:27:b7:7e:d0:7b:c7:ce:b8:af:ba:60:11:bb:73:bf: 5b:14:37:99:e8:4a:df:86:b0:ee:77:57:61:65:f4:e2:52:73: 79:48:69:9d:cd:8f:44:c1:b4:16:6d:e9:36:06:12:ce:b8:03: c6:b0:e5:14:49:86:67:aa:6a:56:53:92:ed:df:f6:7e:80:1b: 3e:74:b9:61:c5:8d:24:7a:61:3e:c7:98:48:f8:94:19:73:10: 93:dc:1b:83:5a:fe:26:4f:11:4a:31:9d:47:76:73:cd:32:31: 01:2d:8e:00:ee:40:26:ac:5d:d5:d8:72:3a:34:07:49:83:66: c8:e8:f0:b2:89:8d:e8:53:ac:b5:36:c1:04:9f:0b:b1:6c:fc: ae:b4:a4:5a:1c:93:29:4a:0e:f3:f0:d0:e2:c4:b1:4f:b5:ec: cf:98:e8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUxMTA0MTgzMDM2WhcNMjUxMTExMTgzMDM2WjAYMRYwFAYD VQQDEw02OTBhNDY0Yy0wYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ACZu9zVVIg0AEfcYQaufi31cL2W1LvxMrbjad7yKnp5QfQk5yBFKwjrdtch 6FiDtXtE237nuCUisA7qStqXsKbBEU11Lawhtk5TrgfjQ2DO2Rp2m/yraCgUC8Nf ZunkltECuuwEOcYfUcxQgk/t/6T/BiXJ63vUuDNxVW6peK5XmxN5WoCx3jOrygJx Ei1RKbQVd7ruZBs8Yks1cD9RXJxUp+HAj/kMhEGjGVhTsXIyfmg12ePv4vzanwtH dw2nuyN32BWzAoLvKdQoTv9mKymM7E21wnfBy2DnEgruJRlwrhs0BEFzxlYkfyKw w1PMqJGo7WBeV8Js2LAVCt8RYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2I7pxf YGYbWF4tTYrc/bmAiWHQMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWCfGDvg1MkPbxg5c1+Wk8dMvPbqXnkGFplC12pyl2IkPOCs+B2ZJs Mz8y6AlyBcbHK/yFFUXfgAHrqBLENH7h10oM/Bbp/EOlXOhUe2ddWSba4mc0n/Xj /vHR/Wcnt37Qe8fOuK+6YBG7c79bFDeZ6ErfhrDud1dhZfTiUnN5SGmdzY9EwbQW bek2BhLOuAPGsOUUSYZnqmpWU5Lt3/Z+gBs+dLlhxY0kemE+x5hI+JQZcxCT3BuD Wv4mTxFKMZ1HdnPNMjEBLY4A7kAmrF3V2HI6NAdJg2bI6PCyiY3oU6y1NsEEnwux bPyutKRaHJMpSg7z8NDixLFPtezPmOjD -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:06 2025 by rpki-client