$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: eOpQmi/a2JPfObTRJd/6S5kNH8PCK9Y1GW+kxo2gbjI= Subject key identifier: 75:28:9D:30:6B:5F:5B:1D:31:75:C5:4F:B8:AB:C7:C7:91:35:FC:A6 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C9C Signing time: Sun 02 Nov 2025 18:24:53 +0000 Manifest this update: Sun 02 Nov 2025 18:24:53 +0000 Manifest next update: Sun 09 Nov 2025 18:24:53 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: jGIBfuf23nXhrYgLyryyydtHOp8vO2f3f0RFUgZFijo=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Nov 2 18:24:53 2025 GMT Not After : Nov 9 18:24:53 2025 GMT Subject: CN=6907a1f5-5237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:42:5e:12:28:2d:0e:57:74:09:e2:2d:6e: ed:ed:37:64:31:2e:34:07:30:40:8c:00:55:54:6c: 5b:99:bb:e3:9e:b0:96:de:78:f8:3a:d7:3b:21:c2: a1:5b:fb:46:a4:6f:39:9c:ac:9f:d8:1d:3c:6f:dd: e9:9a:17:4d:7b:0f:25:dc:05:c0:0a:f6:0c:f8:58: 57:7f:a1:f9:ba:95:b1:f2:c5:9d:6c:5f:43:dc:d7: 5d:d3:6d:77:cc:74:b3:62:34:63:a5:93:5f:a5:19: 20:85:93:3f:27:f9:18:71:8c:c3:78:85:a6:ce:c3: 1c:88:2b:c6:2e:82:59:c1:92:d7:04:a5:c7:80:de: 22:d1:fa:50:96:79:23:31:4a:7a:e5:7c:ad:c6:a0: 61:f7:fd:09:1f:66:eb:78:35:76:86:db:3c:64:51: 1b:0e:d7:b0:6f:77:de:8a:bd:16:35:4e:96:b2:e4: 92:ea:0e:b1:26:c3:eb:da:fe:2c:78:dd:48:45:e6: a2:3b:d9:32:43:a9:3b:3e:33:15:ac:69:87:44:6b: 55:9d:f1:af:62:2e:ff:d9:c6:ff:88:d1:78:69:a0: 75:da:66:a8:72:d9:7f:0b:77:56:c5:da:7d:c4:c0: 5e:10:06:5b:a7:51:ba:be:64:d5:73:fa:22:12:47: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:28:9D:30:6B:5F:5B:1D:31:75:C5:4F:B8:AB:C7:C7:91:35:FC:A6 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ca:7b:b4:c4:8c:6c:62:89:84:1d:6f:e5:0f:62:7c:91:27: b9:73:56:7e:ff:b3:5b:29:7c:ac:b5:8c:58:e1:94:86:cf:4b: 2e:81:f9:a2:80:ca:4a:c1:54:a2:eb:15:28:57:4f:c9:a0:f9: b5:ba:d4:e8:b3:44:d3:2d:3f:ef:88:b0:2b:18:70:3e:90:58: 42:16:f3:b7:41:39:b6:29:42:c6:5e:92:88:36:57:ef:1b:16: e1:f5:72:18:0e:79:46:e6:b3:bc:e6:2a:c5:e9:b7:bb:30:a0: 83:f6:87:54:94:e9:a7:da:f3:10:97:11:a0:45:58:8d:65:9b: 73:47:59:1c:01:4b:e6:32:b3:08:de:c0:c3:9f:54:19:6d:71: 68:bd:50:9e:4c:33:be:f0:52:89:e6:b1:fc:cb:b3:df:90:8e: 15:e4:e2:f5:5c:a1:34:e9:23:aa:f2:7f:d3:43:32:80:42:26: b4:9a:36:d3:2d:cb:d1:32:de:63:c6:a6:ad:50:21:56:e5:5f: da:ee:c7:12:8d:e4:03:19:d0:13:9d:e7:be:6c:6a:68:36:4d: 47:f6:83:94:e4:a0:8a:a5:cb:7e:27:3a:9e:74:90:4e:c5:c4: b2:ab:46:98:b7:99:f3:cd:88:9e:c1:4d:6c:17:2e:a4:96:93: c0:b4:8f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUxMTAyMTgyNDUzWhcNMjUxMTA5MTgyNDUzWjAYMRYwFAYD VQQDEw02OTA3YTFmNS01MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7JCXhIoLQ5XdAniLW7t7TdkMS40BzBAjABVVGxbmbvjnrCW3nj4Otc7IcKh W/tGpG85nKyf2B08b93pmhdNew8l3AXACvYM+FhXf6H5upWx8sWdbF9D3Ndd0213 zHSzYjRjpZNfpRkghZM/J/kYcYzDeIWmzsMciCvGLoJZwZLXBKXHgN4i0fpQlnkj MUp65XytxqBh9/0JH2breDV2hts8ZFEbDtewb3feir0WNU6WsuSS6g6xJsPr2v4s eN1IReaiO9kyQ6k7PjMVrGmHRGtVnfGvYi7/2cb/iNF4aaB12maoctl/C3dWxdp9 xMBeEAZbp1G6vmTVc/oiEkeRCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUonTBr X1sdMXXFT7irx8eRNfymMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCynu0xIxsYomEHW/lD2J8kSe5c1Z+/7NbKXystYxY4ZSGz0sugfmi gMpKwVSi6xUoV0/JoPm1utTos0TTLT/viLArGHA+kFhCFvO3QTm2KULGXpKINlfv Gxbh9XIYDnlG5rO85irF6be7MKCD9odUlOmn2vMQlxGgRViNZZtzR1kcAUvmMrMI 3sDDn1QZbXFovVCeTDO+8FKJ5rH8y7PfkI4V5OL1XKE06SOq8n/TQzKAQia0mjbT LcvRMt5jxqatUCFW5V/a7scSjeQDGdATnee+bGpoNk1H9oOU5KCKpct+JzqedJBO xcSyq0aYt5nzzYiewU1sFy6klpPAtI8T -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:13 2025 by rpki-client