$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: WPzsk6noX8qGzqAjzcVxFXfV0H15xiJheEMXOKiS5bU= Subject key identifier: D3:0C:A3:66:7D:3D:21:37:76:ED:2C:E6:D3:6A:23:F9:0D:4E:FF:B5 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 34EC Signing time: Tue 04 Nov 2025 15:04:11 +0000 Manifest this update: Tue 04 Nov 2025 15:04:10 +0000 Manifest next update: Tue 11 Nov 2025 15:04:10 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: uNgAIbAGuzZigcDjDjDlb7iC1ORMYbm4GEUCR26YAJs=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OVp7PpV4WrIA8CZ/VZbdyu0UkcIERq8sMNiqxbn0hvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Nov 4 15:04:10 2025 GMT Not After : Nov 11 15:04:10 2025 GMT Subject: CN=690a15ea-b3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ff:74:0e:6e:1b:87:e4:66:c4:b8:86:bc:bb: 9e:c2:c7:8e:ac:19:29:17:bf:e4:97:01:90:94:06: cd:15:45:ff:5e:a5:5b:95:81:2d:96:46:60:27:c1: 53:fb:5a:01:d2:fd:df:4e:63:d0:f0:08:6a:cf:5b: 99:cf:a3:63:c2:58:15:9f:9e:12:50:c0:0e:95:61: 95:75:7b:7f:2e:fe:d5:27:4e:15:a0:01:2a:74:38: 75:ea:a3:59:35:fd:01:d2:bc:58:4c:29:59:8f:4e: 6c:8e:47:a4:fe:7e:74:a3:87:56:d6:c6:16:4c:f6: 5b:70:db:4f:9f:eb:33:0b:ad:95:a7:87:3f:78:4f: 73:fa:a1:15:d9:95:76:4b:88:42:9e:e3:1c:5e:12: df:20:26:d9:b6:c1:4b:6b:10:9b:b1:da:1b:f3:73: fa:50:df:fb:48:18:2e:79:ef:64:ab:45:5f:0d:d8: e3:da:fd:a7:00:12:b5:f3:04:af:34:40:c6:89:fb: 53:3f:d9:40:ad:be:ab:02:23:24:33:03:7a:ae:62: 80:0d:20:b2:dc:bf:50:31:4c:03:ed:c8:9d:5d:00: d2:e1:7a:0b:50:86:11:1a:8c:33:a1:6b:52:ff:c7: d9:ee:87:ef:c4:bb:79:e8:74:f5:77:ef:e2:81:c7: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0C:A3:66:7D:3D:21:37:76:ED:2C:E6:D3:6A:23:F9:0D:4E:FF:B5 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:19:28:59:e4:0c:4c:5a:89:fc:30:b0:32:c3:38:49:35:b5: 1c:52:e5:84:94:89:09:90:76:57:f3:d2:52:b1:01:9d:e0:65: 0a:37:53:b1:3f:72:66:cd:6d:9f:fe:76:1f:83:9e:a4:2d:23: a0:e0:15:54:7f:48:8b:84:1b:56:50:c9:bf:62:09:5f:8c:48: ae:e4:af:ef:10:ee:d7:dd:f8:a5:15:e6:e3:10:b4:6f:94:ad: 15:36:4c:52:2c:fd:28:8f:b8:80:0c:cf:40:0f:9e:69:b8:95: 84:d2:4a:46:f2:60:52:14:1d:89:85:03:bb:71:b7:0c:bc:4b: b2:48:f0:56:e7:d4:41:c6:a5:7c:f9:3b:18:0d:98:c0:e2:9a: b2:e1:2f:ea:ff:0b:ba:24:1c:10:02:f4:8f:aa:3a:bf:3f:58: 89:4d:8c:27:b4:65:40:95:b2:fa:f6:81:b7:1b:10:5f:50:88: 1c:3d:6d:43:e4:b7:28:2e:4e:13:37:cd:f0:51:db:5a:10:25: ef:fe:fd:49:2e:3a:99:01:ec:98:df:08:2c:e5:b1:05:bd:7e: 21:e1:8a:b0:09:c9:c3:0a:4a:4e:d0:cc:2c:e6:d6:06:0a:cc: b2:26:e6:fa:be:59:6d:af:fb:60:70:5b:23:dc:89:15:40:cf: 4d:01:09:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUxMTA0MTUwNDEwWhcNMjUxMTExMTUwNDEwWjAYMRYwFAYD VQQDEw02OTBhMTVlYS1iM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/90Dm4bh+RmxLiGvLuewseOrBkpF7/klwGQlAbNFUX/XqVblYEtlkZgJ8FT +1oB0v3fTmPQ8Ahqz1uZz6NjwlgVn54SUMAOlWGVdXt/Lv7VJ04VoAEqdDh16qNZ Nf0B0rxYTClZj05sjkek/n50o4dW1sYWTPZbcNtPn+szC62Vp4c/eE9z+qEV2ZV2 S4hCnuMcXhLfICbZtsFLaxCbsdob83P6UN/7SBguee9kq0VfDdjj2v2nABK18wSv NEDGiftTP9lArb6rAiMkMwN6rmKADSCy3L9QMUwD7cidXQDS4XoLUIYRGowzoWtS /8fZ7ofvxLt56HT1d+/igcdK9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMMo2Z9 PSE3du0s5tNqI/kNTv+1MB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrGShZ5AxMWon8MLAywzhJNbUcUuWElIkJkHZX89JSsQGd4GUKN1Ox P3JmzW2f/nYfg56kLSOg4BVUf0iLhBtWUMm/YglfjEiu5K/vEO7X3filFebjELRv lK0VNkxSLP0oj7iADM9AD55puJWE0kpG8mBSFB2JhQO7cbcMvEuySPBW59RBxqV8 +TsYDZjA4pqy4S/q/wu6JBwQAvSPqjq/P1iJTYwntGVAlbL69oG3GxBfUIgcPW1D 5LcoLk4TN83wUdtaECXv/v1JLjqZAeyY3wgs5bEFvX4h4YqwCcnDCkpO0Mws5tYG CsyyJub6vlltr/tgcFsj3IkVQM9NAQl7 -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:59 2025 by rpki-client