$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: 40oqh9m+/cSCw2bn8lqy51pNMl7+J6EgeB5JlTKEl7I= Subject key identifier: B2:A9:74:D2:F5:9B:4B:FB:9A:B6:0A:32:54:54:4E:12:24:A2:E4:E3 Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: 82 Signing time: Sat 09 Aug 2025 07:09:49 +0000 Manifest this update: Sat 09 Aug 2025 07:09:48 +0000 Manifest next update: Sat 16 Aug 2025 07:09:48 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: e4ttsSIT2I0ZmCR1RGX58WfnPasg90bD/Wi6hWmx4BU=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: C9wlOti9Kn8ir5LbjrcvSenT+h+KC9pTHhvfxL8aZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: Aug 9 07:09:48 2025 GMT Not After : Aug 16 07:09:48 2025 GMT Subject: CN=6896f43c-c0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:3a:f9:b1:25:37:90:11:e3:3a:92:7d:8b: 1e:92:fe:75:26:a6:ba:42:eb:fc:8e:84:be:bc:52: 6a:2d:4a:13:e6:e0:63:32:38:12:50:8c:90:3e:af: ff:7d:c3:8f:c2:e8:00:21:75:d1:74:3d:fc:8a:4c: d4:c6:09:e8:b0:88:b5:ff:0f:eb:9a:12:3f:54:da: 2a:78:5a:4a:c1:37:6d:7d:fd:bd:07:53:80:1f:62: aa:dd:dc:89:0b:f4:8a:8f:78:2a:46:15:e1:76:80: 99:3a:8b:5e:9a:c9:b9:3a:77:2b:ef:bc:0b:b4:44: 6d:7f:2d:57:77:ff:62:a1:46:ba:14:ce:64:40:2b: e8:a2:8a:73:f2:d1:6e:49:3b:52:56:49:ab:30:d4: 73:76:d5:98:b9:f9:5c:9b:3b:2e:ec:c5:e0:3c:86: 91:4b:ca:71:e0:64:1f:77:73:9c:ff:41:60:02:4e: 22:15:1e:ad:db:09:47:9f:54:4e:69:1b:12:cd:ac: ef:4f:1a:e0:05:44:cb:df:a6:7b:e1:be:23:60:10: 13:bb:40:54:ce:b2:8c:b3:83:72:f3:8d:f6:cc:48: 13:fe:98:11:e7:51:2a:d8:15:e4:91:3b:ee:7b:43: d1:f7:0b:37:57:0c:97:2d:8f:92:dd:b5:ec:9a:d5: c2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:74:D2:F5:9B:4B:FB:9A:B6:0A:32:54:54:4E:12:24:A2:E4:E3 X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5e:7b:37:f7:0f:5b:3c:68:cd:8e:51:eb:2a:32:56:c8:e7: 9b:0e:d1:d3:e0:33:ef:9c:ec:71:6d:da:f6:db:03:7e:3d:11: 1a:d4:10:e3:37:bb:d4:8f:94:75:a8:c8:e9:00:47:1a:37:cf: 21:c0:62:a4:d7:1e:aa:f9:f7:fb:4b:3d:ee:d4:9c:41:c4:34: 2c:04:c1:b0:b0:6e:8c:49:a0:1b:39:37:fa:bb:df:8f:ee:9c: 5d:2e:a7:0d:b9:d7:07:2d:c2:6f:73:c7:4f:fe:e2:53:9a:65: 96:c2:93:99:ab:e3:d2:c9:71:d3:a2:b9:db:57:f8:07:ee:e6: fb:a3:36:f7:b8:da:c7:95:55:38:de:0a:eb:81:ad:8b:99:a6: 64:fa:de:87:d6:d5:5d:7a:e8:de:e1:f7:2f:ea:36:43:46:30: 42:b6:7d:da:02:5e:6a:47:4a:aa:ee:22:53:c4:88:fd:39:38: ce:f4:b8:78:18:8d:20:73:fe:62:32:ba:b9:2a:a5:53:c6:ca: d8:33:c4:27:1c:91:13:14:62:c2:1f:d5:6c:e4:16:ee:64:4a: f8:30:6d:df:3d:7e:62:2b:b1:9e:47:28:cd:b9:25:b6:3c:0f: 30:8c:59:b8:14:16:a5:b6:0e:be:b4:39:5c:fa:d0:da:98:d3: 73:46:38:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyOUQxMTAvBgNVBAUTKDM1ODQxQUUzM0RGNjkzMTIwMTQwNjc5OEFFNjRGQ0Mw ODdGNUExRTUwHhcNMjUwODA5MDcwOTQ4WhcNMjUwODE2MDcwOTQ4WjAYMRYwFAYD VQQDEw02ODk2ZjQzYy1jMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRY6+bElN5AR4zqSfYsekv51Jqa6Quv8joS+vFJqLUoT5uBjMjgSUIyQPq// fcOPwugAIXXRdD38ikzUxgnosIi1/w/rmhI/VNoqeFpKwTdtff29B1OAH2Kq3dyJ C/SKj3gqRhXhdoCZOotemsm5Oncr77wLtERtfy1Xd/9ioUa6FM5kQCvooopz8tFu STtSVkmrMNRzdtWYuflcmzsu7MXgPIaRS8px4GQfd3Oc/0FgAk4iFR6t2wlHn1RO aRsSzazvTxrgBUTL36Z74b4jYBATu0BUzrKMs4Ny8432zEgT/pgR51Eq2BXkkTvu e0PR9ws3VwyXLY+S3bXsmtXChQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKpdNL1 m0v7mrYKMlRUThIkouTjMB8GA1UdIwQYMBaAFDWEGuM99pMSAUBnmK5k/MCH9aHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTI5RC82RTA1MEVGNkIx MzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4SUJRR2VZcm1UOHdJZjFv ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTI5RC82RTA1MEVGNkIxMzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4 SUJRR2VZcm1UOHdJZjFvZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMXns39w9bPGjNjlHrKjJWyOebDtHT4DPvnOxxbdr22wN+PREa1BDj N7vUj5R1qMjpAEcaN88hwGKk1x6q+ff7Sz3u1JxBxDQsBMGwsG6MSaAbOTf6u9+P 7pxdLqcNudcHLcJvc8dP/uJTmmWWwpOZq+PSyXHTornbV/gH7ub7ozb3uNrHlVU4 3grrga2LmaZk+t6H1tVdeuje4fcv6jZDRjBCtn3aAl5qR0qq7iJTxIj9OTjO9Lh4 GI0gc/5iMrq5KqVTxsrYM8QnHJETFGLCH9Vs5BbuZEr4MG3fPX5iK7GeRyjNuSW2 PA8wjFm4FBaltg6+tDlc+tDamNNzRjiN -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:30 2025 by rpki-client