$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: mpNkRQo4juz8sTTjXmKs3c/w4BPOnzjQ1hosj5aWV+E= Subject key identifier: 63:65:2B:A2:FE:76:EC:E1:AB:31:7B:2A:0D:F5:27:81:7B:DD:E6:25 Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 07B8 Signing time: Sun 10 Aug 2025 21:22:15 +0000 Manifest this update: Sun 10 Aug 2025 21:22:14 +0000 Manifest next update: Sun 17 Aug 2025 21:22:14 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: fQYDu/6zfw4ME/BI9BoIlYyfDtf1teNTIfT57gZR27M=) 2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: sWepAg9vOOQr0bNjmy6UlY09ZaZXwokEECnmuTF3nsc=) 3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: 0sTO565z2noH8B1LWmmqLTh0cgNZKxMSa14Hsw0ys7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 21:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Aug 10 21:22:14 2025 GMT Not After : Aug 17 21:22:14 2025 GMT Subject: CN=68990d87-c08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:43:36:45:dc:ea:57:47:f2:c7:bf:3f:f3: 34:29:c7:c8:cc:c9:07:7d:e6:e0:30:97:6d:f9:84: c2:67:53:ad:cb:a3:52:fb:11:08:df:c3:de:c4:de: 29:d8:81:21:47:51:d1:cd:67:5a:74:ca:42:58:22: 89:ca:6b:25:e8:12:43:a0:7e:de:b9:74:cd:9e:7e: be:01:34:85:08:7e:ef:a6:a3:ba:5b:03:99:a3:e0: c2:c7:92:75:cf:92:35:c0:92:b0:d0:39:81:72:85: bd:a0:61:30:8a:23:4f:9e:dc:be:41:e2:ff:b4:0b: b8:c7:7d:18:e9:dd:c8:ab:78:b9:f1:d9:88:da:01: 0a:b6:22:cc:35:a7:3a:ee:de:c1:9d:3e:22:63:40: 2c:50:28:38:77:8c:75:cd:7f:a4:7a:50:e3:d6:66: 2e:18:99:3c:7c:6a:d8:50:0b:1f:04:6c:ce:2f:ac: f9:57:3e:83:85:c5:1d:e4:af:33:c6:08:86:b6:35: 02:6c:f5:83:48:f2:b0:c1:62:ce:93:22:d3:b4:eb: 3b:1e:71:41:a4:3c:67:30:a0:cc:4d:97:14:31:9c: 4b:fd:62:89:db:4c:76:eb:f3:08:8b:6d:50:29:e0: 82:b3:15:7d:5a:c5:01:34:fc:ea:75:ad:54:0d:7e: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:65:2B:A2:FE:76:EC:E1:AB:31:7B:2A:0D:F5:27:81:7B:DD:E6:25 X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f7:78:08:3c:6f:a1:e3:d8:c0:cb:e3:01:ba:db:0a:ec:32: 94:8f:d2:b4:45:62:57:2e:57:96:0a:00:33:7a:06:e6:c4:81: a8:ea:2e:e6:6d:d3:fc:96:2d:1f:e9:b2:82:7e:87:87:94:66: b9:08:5c:fa:61:98:b6:1d:9f:a4:cc:6c:b4:e1:af:57:85:7d: 78:6d:e1:5c:89:16:e0:de:e9:fb:88:8b:4a:11:bb:72:ac:5b: ff:51:fb:1b:8e:d1:ac:ad:04:d1:c5:b4:42:af:51:4a:c9:33: 0f:78:6a:95:08:e9:64:0d:2b:73:9c:b0:83:18:5c:ba:a3:91: 4e:55:fb:1f:fd:44:2e:f4:52:b2:60:f2:51:8f:34:67:4a:df: 49:c8:47:93:04:33:7e:c3:54:b0:ec:c1:b5:42:dc:96:50:ad: c8:93:7a:11:89:d7:2f:e6:3b:3c:93:22:2a:c8:da:6b:53:66: 41:d0:27:31:34:09:a2:19:59:0c:18:c3:0e:c6:b1:06:63:9f: 3e:b5:ee:72:be:ed:4e:75:ba:53:1c:45:33:78:80:3d:c7:c5: 3a:2b:6f:0f:d8:2e:79:30:bc:7a:01:b6:35:eb:ca:6a:ce:d8: b4:45:44:32:b4:34:af:f6:78:1f:34:f4:a5:f3:6d:5f:67:9c: 7a:c7:56:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjUwODEwMjEyMjE0WhcNMjUwODE3MjEyMjE0WjAYMRYwFAYD VQQDEw02ODk5MGQ4Ny1jMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCBDNkXc6ldH8se/P/M0KcfIzMkHfebgMJdt+YTCZ1Oty6NS+xEI38PexN4p 2IEhR1HRzWdadMpCWCKJymsl6BJDoH7euXTNnn6+ATSFCH7vpqO6WwOZo+DCx5J1 z5I1wJKw0DmBcoW9oGEwiiNPnty+QeL/tAu4x30Y6d3Iq3i58dmI2gEKtiLMNac6 7t7BnT4iY0AsUCg4d4x1zX+kelDj1mYuGJk8fGrYUAsfBGzOL6z5Vz6DhcUd5K8z xgiGtjUCbPWDSPKwwWLOkyLTtOs7HnFBpDxnMKDMTZcUMZxL/WKJ20x26/MIi21Q KeCCsxV9WsUBNPzqda1UDX7b/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNlK6L+ duzhqzF7Kg31J4F73eYlMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE93gIPG+h49jAy+MButsK7DKUj9K0RWJXLleWCgAzegbmxIGo6i7m bdP8li0f6bKCfoeHlGa5CFz6YZi2HZ+kzGy04a9XhX14beFciRbg3un7iItKEbty rFv/UfsbjtGsrQTRxbRCr1FKyTMPeGqVCOlkDStznLCDGFy6o5FOVfsf/UQu9FKy YPJRjzRnSt9JyEeTBDN+w1Sw7MG1QtyWUK3Ik3oRidcv5js8kyIqyNprU2ZB0Ccx NAmiGVkMGMMOxrEGY58+te5yvu1OdbpTHEUzeIA9x8U6K28P2C55MLx6AbY168pq zti0RUQytDSv9ngfNPSl821fZ5x6x1aX -----END CERTIFICATE-----Generated at Tue Aug 12 13:51:18 2025 by rpki-client