$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: 7kjvi/icBvpLzb/Pr4W83mxQIBq/LcumGYg6rCOhi2s= Subject key identifier: 96:58:8E:A5:1D:3D:27:A7:1A:32:03:16:B1:1B:F9:85:31:B0:B7:B0 Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 07E4 Signing time: Sun 02 Nov 2025 21:11:57 +0000 Manifest this update: Sun 02 Nov 2025 21:11:57 +0000 Manifest next update: Sun 09 Nov 2025 21:11:57 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: ig9lkKu8jie1n4QaWZOi+EjCuO5o/KHlKMmlbVbA0Jg=) 2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: sVLnWaTceqxJcUl04loII1R7iIc0w84MM4tNrptQICk=) 3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: VXJnWLTlfJE7hcFdY+uRPYEzZpm7z+xQureyi9VYPn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Nov 2 21:11:57 2025 GMT Not After : Nov 9 21:11:57 2025 GMT Subject: CN=6907c91d-87ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:d5:d7:29:5e:67:1f:67:4e:dc:2d:49:a1: ff:20:b5:97:0b:50:ca:c5:a0:4b:fb:be:c2:a8:55: a4:fd:63:9a:10:99:65:7b:c1:83:43:00:af:d1:66: ae:20:66:96:58:78:f7:4b:78:0a:8a:90:b8:e5:fe: d0:b1:79:e4:c6:ed:a9:75:d0:23:5e:18:1b:23:54: f8:7e:62:79:37:11:76:02:27:3e:a0:7d:89:5b:8a: de:0c:c3:f8:de:dc:9f:32:79:ec:8a:06:64:06:ba: 01:41:4b:4e:b1:f5:14:75:9b:f5:cc:f4:5b:88:f6: 07:c9:25:15:d9:a5:4f:1f:50:83:af:e3:53:8f:65: b9:b3:9b:a8:10:84:d2:fd:57:47:1c:80:21:38:a4: 73:65:e1:32:79:58:36:a0:71:b4:cb:3a:23:42:6b: c5:8c:9f:95:99:08:85:91:ea:21:32:89:2b:11:65: 98:b7:b6:7c:8e:1e:49:dd:a5:73:89:91:ca:4a:b5: eb:0f:81:85:9d:30:3c:43:37:d1:33:fe:15:a0:39: 9d:b2:13:63:8f:94:90:6b:fd:f1:4a:b4:ca:a5:d8: 0c:32:77:ba:04:47:03:5f:c0:94:21:9f:b3:37:67: 5c:9d:50:1a:bd:45:06:2f:b1:92:60:e2:e1:55:d1: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:58:8E:A5:1D:3D:27:A7:1A:32:03:16:B1:1B:F9:85:31:B0:B7:B0 X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ee:d8:bb:5a:c9:b7:c3:c1:fe:ad:80:96:6b:e1:ce:ab:e3: 13:7d:05:c7:58:e9:da:41:21:0d:b4:c3:2e:e6:16:f7:93:f7: 5b:95:2c:2d:e6:c1:dc:d2:15:ff:ba:86:7d:cd:d7:9d:9d:6b: 3c:f4:b9:61:dd:53:6a:de:dc:6e:c4:82:f0:13:bd:86:8b:53: 73:f0:cd:7c:eb:52:63:3f:7a:cd:8b:52:39:89:b5:ac:41:98: e2:cc:0b:5d:49:f9:8f:47:ea:95:c7:31:67:96:09:2e:b1:8a: 8f:b8:46:b7:5b:d8:e8:66:34:77:de:5e:e1:c0:47:ba:0f:08: cc:f5:24:7e:6f:de:e0:52:61:3c:bc:39:00:54:98:92:8a:53: 88:13:bc:a0:01:4b:38:7c:c5:49:43:33:0f:54:dc:2e:2e:f9: 4b:14:44:89:a9:e8:ba:ba:26:97:b5:17:87:b8:42:fd:98:a3: 98:58:78:92:8c:e4:45:a7:7a:72:f9:a5:42:4d:dd:d7:60:5a: 55:a2:a6:6a:b3:71:18:c5:fd:d9:6b:cc:c0:d1:00:08:1a:5d: 59:90:ad:67:e6:3e:9d:86:df:52:89:c8:d7:25:71:c5:c2:28: 2f:49:b1:6d:06:8b:72:00:2b:15:34:8f:68:77:af:3f:a5:2b: 81:80:c0:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjUxMTAyMjExMTU3WhcNMjUxMTA5MjExMTU3WjAYMRYwFAYD VQQDEw02OTA3YzkxZC04N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOzV1yleZx9nTtwtSaH/ILWXC1DKxaBL+77CqFWk/WOaEJlle8GDQwCv0Wau IGaWWHj3S3gKipC45f7QsXnkxu2pddAjXhgbI1T4fmJ5NxF2Aic+oH2JW4reDMP4 3tyfMnnsigZkBroBQUtOsfUUdZv1zPRbiPYHySUV2aVPH1CDr+NTj2W5s5uoEITS /VdHHIAhOKRzZeEyeVg2oHG0yzojQmvFjJ+VmQiFkeohMokrEWWYt7Z8jh5J3aVz iZHKSrXrD4GFnTA8QzfRM/4VoDmdshNjj5SQa/3xSrTKpdgMMne6BEcDX8CUIZ+z N2dcnVAavUUGL7GSYOLhVdFjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZYjqUd PSenGjIDFrEb+YUxsLewMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC7ti7Wsm3w8H+rYCWa+HOq+MTfQXHWOnaQSENtMMu5hb3k/dblSwt 5sHc0hX/uoZ9zdednWs89Llh3VNq3txuxILwE72Gi1Nz8M1861JjP3rNi1I5ibWs QZjizAtdSfmPR+qVxzFnlgkusYqPuEa3W9joZjR33l7hwEe6DwjM9SR+b97gUmE8 vDkAVJiSilOIE7ygAUs4fMVJQzMPVNwuLvlLFESJqei6uiaXtReHuEL9mKOYWHiS jORFp3py+aVCTd3XYFpVoqZqs3EYxf3Za8zA0QAIGl1ZkK1n5j6dht9SicjXJXHF wigvSbFtBotyACsVNI9od68/pSuBgMD4 -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:56 2025 by rpki-client