$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: GhhPKkl+hJKu2ozK4dThp5lGSWn7jgPA8CrjIIsokf0= Subject key identifier: A8:4C:F3:34:BA:E7:EC:6A:D2:3D:58:B0:E0:98:6B:4A:15:0B:28:5B Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 16CF Signing time: Fri 08 Aug 2025 16:49:49 +0000 Manifest this update: Fri 08 Aug 2025 16:49:49 +0000 Manifest next update: Fri 15 Aug 2025 16:49:49 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: yAZB0FEo11v3oYiYBZrxeCEnrHSwohsDUSG2+7cXc0g=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5850 (0x16da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Aug 8 16:49:49 2025 GMT Not After : Aug 15 16:49:49 2025 GMT Subject: CN=68962aad-1d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:b7:48:71:d8:46:ae:44:38:64:ec:2c:58: aa:02:37:f3:8d:73:d6:67:45:da:30:c4:58:a3:9b: 3c:35:4e:d6:18:fd:ff:95:16:f9:ed:d9:8e:b3:8b: 16:f4:81:d9:09:a9:98:1d:e0:97:9a:c8:be:58:39: ff:2f:70:f5:b0:0c:cc:1a:fd:e1:14:51:13:7e:3f: c4:3c:7b:c7:9c:9a:32:bc:79:40:98:d6:f7:3b:8e: e8:73:a8:a6:db:67:28:02:20:62:72:63:62:8b:1c: c5:10:c1:a2:eb:ad:2c:8c:03:c9:cc:3b:49:0f:cc: dc:e8:72:8e:d0:d0:e2:ab:db:67:85:bf:fe:c0:3d: 7f:ee:b3:23:1c:8f:84:56:66:cf:aa:22:6b:8b:66: 99:ec:3f:54:1c:5f:f0:8a:d5:e1:50:15:cd:98:f4: 0c:0b:f9:d5:fa:27:62:91:75:51:14:cc:d9:8c:ed: cc:fe:1b:32:ee:30:68:ef:9e:e1:64:8a:60:b9:92: 29:a9:1a:d9:9b:f3:c6:cc:81:75:1b:92:ab:02:65: 72:77:d7:ef:89:f3:a4:16:87:91:10:5d:1b:f2:a0: d1:6f:5d:0a:e9:5a:58:5f:88:a5:f8:27:c2:db:e4: 92:1a:1d:57:ab:76:a9:dc:5b:55:46:0d:6f:63:2d: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4C:F3:34:BA:E7:EC:6A:D2:3D:58:B0:E0:98:6B:4A:15:0B:28:5B X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2d:73:44:b1:fd:35:06:74:a9:55:f1:17:fb:8a:9a:46:8d: bd:01:f9:e9:7f:49:2f:4f:c4:de:88:08:4e:a0:fc:46:5f:d5: 28:8d:80:43:55:4e:ed:79:4c:4d:06:28:79:61:3d:61:00:b3: 65:61:9d:30:de:71:28:b6:a5:56:d2:53:8e:4e:72:a5:c7:26: c2:9d:f4:c1:0e:a0:3d:6c:49:31:2c:6a:b7:a4:cd:5f:6d:05: c4:53:cc:b8:75:fa:2a:b2:e9:63:d4:66:ae:1f:6c:bf:78:49: 17:34:b5:ca:74:62:70:81:a7:43:37:ec:47:d4:3e:9c:96:ef: 43:56:66:15:81:81:f3:60:06:00:fd:fd:00:d4:0a:16:0e:24: 0f:9a:41:3a:20:92:1e:a2:61:e5:b4:10:97:67:bd:91:8a:e7: ab:29:f2:e6:8c:be:c6:86:17:14:54:f7:b0:3a:d3:24:43:cb: 02:03:f0:5b:cf:d5:86:d4:04:89:ea:08:2c:06:c1:39:b0:b1: 2f:ed:52:30:65:21:26:ff:25:e4:54:4c:83:6f:24:ac:d6:92: bf:d3:7f:f9:b9:6b:cc:4d:88:08:ff:8f:71:e4:b4:10:42:60: 0e:dc:f1:86:cb:ec:3f:91:76:be:fe:c0:3c:e1:9e:84:56:c4: 68:32:bb:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwODA4MTY0OTQ5WhcNMjUwODE1MTY0OTQ5WjAYMRYwFAYD VQQDEw02ODk2MmFhZC0xZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszy3SHHYRq5EOGTsLFiqAjfzjXPWZ0XaMMRYo5s8NU7WGP3/lRb57dmOs4sW 9IHZCamYHeCXmsi+WDn/L3D1sAzMGv3hFFETfj/EPHvHnJoyvHlAmNb3O47oc6im 22coAiBicmNiixzFEMGi660sjAPJzDtJD8zc6HKO0NDiq9tnhb/+wD1/7rMjHI+E VmbPqiJri2aZ7D9UHF/witXhUBXNmPQMC/nV+idikXVRFMzZjO3M/hsy7jBo757h ZIpguZIpqRrZm/PGzIF1G5KrAmVyd9fvifOkFoeREF0b8qDRb10K6VpYX4il+CfC 2+SSGh1Xq3ap3FtVRg1vYy2JNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhM8zS6 5+xq0j1YsOCYa0oVCyhbMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvLXNEsf01BnSpVfEX+4qaRo29Afnpf0kvT8TeiAhOoPxGX9UojYBD VU7teUxNBih5YT1hALNlYZ0w3nEotqVW0lOOTnKlxybCnfTBDqA9bEkxLGq3pM1f bQXEU8y4dfoqsulj1GauH2y/eEkXNLXKdGJwgadDN+xH1D6clu9DVmYVgYHzYAYA /f0A1AoWDiQPmkE6IJIeomHltBCXZ72RiuerKfLmjL7GhhcUVPewOtMkQ8sCA/Bb z9WG1ASJ6ggsBsE5sLEv7VIwZSEm/yXkVEyDbySs1pK/03/5uWvMTYgI/49x5LQQ QmAO3PGGy+w/kXa+/sA84Z6EVsRoMrsd -----END CERTIFICATE-----Generated at Sun Aug 10 03:56:29 2025 by rpki-client