$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: ZES29h7wNqruv1CbmiwVmQGObzhk4pBaIs/nz5Ak30w= Subject key identifier: BA:98:E3:75:2B:2E:0F:D7:E6:07:2C:DB:E9:A3:E3:59:C4:AD:73:5B Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C78 Signing time: Sun 24 Aug 2025 18:26:49 +0000 Manifest this update: Sun 24 Aug 2025 18:26:49 +0000 Manifest next update: Sun 31 Aug 2025 18:26:49 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: LM9XBuUN0Mw+nl75MDXGc9YsnvN6IhIPRDb50f5BnuI=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Aug 24 18:26:49 2025 GMT Not After : Aug 31 18:26:49 2025 GMT Subject: CN=68ab5969-78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:4b:c2:b5:f5:5d:2a:60:7f:67:d7:0f:84: 9d:c7:e5:6c:d0:d2:c1:2c:25:f9:a6:4d:7d:f8:d5: 3b:52:1d:4a:41:03:5b:9e:f1:82:93:5d:c0:a2:58: 4f:0d:e4:da:ca:d9:d3:02:a5:e7:a6:86:2b:12:bc: a4:e9:75:aa:22:d5:21:e7:59:0f:ef:89:15:62:b1: ba:25:9c:dc:d3:9d:c3:2c:8e:78:12:d2:00:f9:24: 05:d1:9c:2d:4d:f0:80:7c:7d:15:a3:ec:82:0e:31: eb:4d:27:66:33:6d:35:ac:9b:d0:75:5b:2b:98:46: eb:69:4a:6e:39:de:5b:c5:e6:6d:32:21:c2:6d:37: 86:f5:36:b3:a7:2c:f3:eb:9f:b5:15:e4:72:e6:ac: 1e:ab:96:c0:58:33:f0:f6:c3:34:8e:b5:69:12:9c: 14:17:d4:3e:52:fd:65:71:b3:b7:b2:16:8c:66:15: 4b:57:01:2a:aa:44:38:f0:6f:5b:cc:a8:79:9d:4e: fe:38:3e:a0:6d:c8:22:57:23:08:1c:2f:fb:26:7e: 0a:8d:36:ca:97:43:2d:97:57:29:1d:37:ba:e9:a7: 32:82:f5:85:f6:c8:88:71:34:6e:c6:f8:3c:23:09: 21:25:56:33:20:49:76:de:e8:ff:52:90:99:d9:29: 18:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:98:E3:75:2B:2E:0F:D7:E6:07:2C:DB:E9:A3:E3:59:C4:AD:73:5B X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e4:e9:cf:55:13:c8:66:2c:ae:aa:2d:e9:ab:e7:6b:f8:34: f0:bf:67:34:23:ae:23:58:69:ba:05:2b:6b:10:7b:2b:c1:4d: fb:fa:2d:38:ab:0b:58:45:3f:57:08:7f:9c:b4:2a:c5:49:2f: 78:63:74:ff:fa:4d:5d:f6:f4:1c:da:28:2b:c5:b1:11:8e:72: 4d:83:ec:2d:21:d8:4d:c1:58:b0:1f:c7:4f:c5:41:e2:b5:cc: 0c:74:b7:e8:5f:79:9f:2f:a6:a1:54:5b:8b:92:2e:d9:96:cc: 9c:69:e6:f0:46:ba:e7:df:55:8c:92:d9:c2:95:3e:79:ad:4d: 58:da:77:a9:27:c6:13:07:dd:0e:ab:76:80:2e:da:0d:17:7b: 50:dd:bf:95:e5:3d:97:a9:1a:e3:c0:cc:7e:ae:cf:d7:64:92: 29:01:88:60:86:43:28:51:39:d7:cd:5d:de:aa:8b:e7:72:48: 26:23:a6:68:f6:3c:ae:54:2a:a7:9d:3c:a4:da:a0:cb:75:2b: df:38:bc:23:8c:2b:15:b3:0c:df:37:40:68:4a:3f:14:a5:ca: 73:a6:b0:81:3b:47:42:27:29:e8:4a:f9:18:91:69:9e:7d:f1: 81:05:45:b2:82:e6:db:f8:b9:a5:4e:ae:93:51:54:15:c0:8c: 13:57:3a:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUwODI0MTgyNjQ5WhcNMjUwODMxMTgyNjQ5WjAYMRYwFAYD VQQDEw02OGFiNTk2OS03OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIJLwrX1XSpgf2fXD4Sdx+Vs0NLBLCX5pk19+NU7Uh1KQQNbnvGCk13AolhP DeTaytnTAqXnpoYrEryk6XWqItUh51kP74kVYrG6JZzc053DLI54EtIA+SQF0Zwt TfCAfH0Vo+yCDjHrTSdmM201rJvQdVsrmEbraUpuOd5bxeZtMiHCbTeG9Tazpyzz 65+1FeRy5qweq5bAWDPw9sM0jrVpEpwUF9Q+Uv1lcbO3shaMZhVLVwEqqkQ48G9b zKh5nU7+OD6gbcgiVyMIHC/7Jn4KjTbKl0Mtl1cpHTe66acygvWF9siIcTRuxvg8 IwkhJVYzIEl23uj/UpCZ2SkYSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqY43Ur Lg/X5gcs2+mj41nErXNbMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr5OnPVRPIZiyuqi3pq+dr+DTwv2c0I64jWGm6BStrEHsrwU37+i04 qwtYRT9XCH+ctCrFSS94Y3T/+k1d9vQc2igrxbERjnJNg+wtIdhNwViwH8dPxUHi tcwMdLfoX3mfL6ahVFuLki7ZlsycaebwRrrn31WMktnClT55rU1Y2nepJ8YTB90O q3aALtoNF3tQ3b+V5T2XqRrjwMx+rs/XZJIpAYhghkMoUTnXzV3eqovnckgmI6Zo 9jyuVCqnnTyk2qDLdSvfOLwjjCsVswzfN0BoSj8UpcpzprCBO0dCJynoSvkYkWme ffGBBUWygubb+LmlTq6TUVQVwIwTVzol -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:59 2025 by rpki-client