$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: Lkm/327M53p0sY7ICmS3CSjttUv/4k/VIwqJ4Lmugo4= Subject key identifier: 73:01:61:46:06:73:4E:1E:F9:1E:0A:93:DD:E9:AC:95:3B:61:67:21 Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: AD Signing time: Mon 03 Nov 2025 06:10:07 +0000 Manifest this update: Mon 03 Nov 2025 06:10:06 +0000 Manifest next update: Mon 10 Nov 2025 06:10:06 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: ifQswyTVsDDK5f0npoHUjDJF7cJiD42Jj/V05AppJbA=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: C9wlOti9Kn8ir5LbjrcvSenT+h+KC9pTHhvfxL8aZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: Nov 3 06:10:06 2025 GMT Not After : Nov 10 06:10:06 2025 GMT Subject: CN=6908473e-a24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:b0:67:a3:17:7b:39:53:c4:7e:4e:56:a2: d0:d8:5b:34:41:7a:ad:e2:b4:70:81:80:dc:52:60: 43:76:e3:d0:f5:8a:f7:80:24:9a:f4:62:39:1c:5f: 5a:ef:85:73:38:f4:c7:e0:b6:19:1b:1c:7f:d2:c5: 83:ca:9f:34:00:28:d0:c4:ea:23:35:fa:b3:d3:8f: 82:62:d2:e0:fd:c0:e1:bd:63:81:9b:53:d3:eb:68: 8a:84:f7:00:51:63:d4:4a:ab:ef:2a:04:15:e2:9a: 56:ea:27:46:72:a2:a3:35:65:2c:31:0c:ff:b3:b6: ae:8d:58:c6:70:fb:90:7e:8d:b6:f7:da:18:f5:9c: 04:78:9b:b2:45:80:dc:f7:96:9f:12:9c:11:fd:9b: 8e:f6:15:23:5e:bb:13:77:f8:99:3b:3c:15:df:5e: 29:33:93:ee:f4:c6:b7:d1:e8:89:86:cb:83:e4:93: dd:ff:d4:79:d2:23:11:2e:09:87:ab:ea:c6:ff:4e: dc:d4:77:42:96:ad:99:5a:4c:f6:0b:dc:a4:2a:e6: 5a:04:d3:b7:2f:0f:b9:71:e7:f3:fe:5f:22:27:ba: e2:b3:75:9f:48:6b:a3:68:98:04:9d:38:14:b9:41: fe:8a:bc:99:d6:9c:95:74:4e:52:66:fa:c7:29:38: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:61:46:06:73:4E:1E:F9:1E:0A:93:DD:E9:AC:95:3B:61:67:21 X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3f:cc:36:82:79:c6:93:43:94:1a:c6:63:bd:de:3e:3b:c6: b8:c4:25:2f:8b:11:13:5d:d5:d0:3c:08:4b:64:e0:21:1b:e1: cb:15:c4:78:4d:bf:66:42:47:12:e2:04:a2:ca:cd:06:f4:20: 1b:15:39:f9:e6:16:ce:2e:d2:ee:25:bc:0d:3d:38:4e:97:fd: 1a:74:12:12:f8:e7:1c:eb:71:86:5f:bb:24:ef:97:c4:d6:18: bb:9b:fd:02:57:84:df:97:39:74:44:be:0c:1a:68:f8:59:3b: c7:fe:ba:2f:ca:40:ae:68:39:6a:0f:f4:b2:bf:59:ef:7f:7d: 4d:9c:5b:ef:01:af:8e:26:2a:42:49:aa:1d:f2:50:90:d1:1f: bd:6d:4a:d6:0d:91:c2:9e:67:ed:da:18:a4:81:86:9e:eb:0c: 92:3f:9d:19:76:eb:3e:19:27:c0:d1:e9:4f:af:0d:5e:67:0c: c7:9b:2c:07:fb:5e:33:a4:4c:c2:81:cc:a2:54:cb:c8:52:33: f7:44:45:21:1d:e6:f6:fb:7b:40:45:5a:4b:a6:59:6d:84:ed: ef:6a:cb:4e:fd:d4:21:44:ad:f2:a3:d1:eb:a6:2a:6e:83:fc: a1:9b:fd:30:aa:a0:33:15:4e:33:ea:bb:5d:14:0f:36:ef:d7: ad:90:4c:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyOUQxMTAvBgNVBAUTKDM1ODQxQUUzM0RGNjkzMTIwMTQwNjc5OEFFNjRGQ0Mw ODdGNUExRTUwHhcNMjUxMTAzMDYxMDA2WhcNMjUxMTEwMDYxMDA2WjAYMRYwFAYD VQQDEw02OTA4NDczZS1hMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I6wZ6MXezlTxH5OVqLQ2Fs0QXqt4rRwgYDcUmBDduPQ9Yr3gCSa9GI5HF9a 74VzOPTH4LYZGxx/0sWDyp80ACjQxOojNfqz04+CYtLg/cDhvWOBm1PT62iKhPcA UWPUSqvvKgQV4ppW6idGcqKjNWUsMQz/s7aujVjGcPuQfo2299oY9ZwEeJuyRYDc 95afEpwR/ZuO9hUjXrsTd/iZOzwV314pM5Pu9Ma30eiJhsuD5JPd/9R50iMRLgmH q+rG/07c1HdClq2ZWkz2C9ykKuZaBNO3Lw+5cefz/l8iJ7ris3WfSGujaJgEnTgU uUH+iryZ1pyVdE5SZvrHKTiUVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMBYUYG c04e+R4Kk93prJU7YWchMB8GA1UdIwQYMBaAFDWEGuM99pMSAUBnmK5k/MCH9aHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTI5RC82RTA1MEVGNkIx MzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4SUJRR2VZcm1UOHdJZjFv ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTI5RC82RTA1MEVGNkIxMzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4 SUJRR2VZcm1UOHdJZjFvZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASP8w2gnnGk0OUGsZjvd4+O8a4xCUvixETXdXQPAhLZOAhG+HLFcR4 Tb9mQkcS4gSiys0G9CAbFTn55hbOLtLuJbwNPThOl/0adBIS+Occ63GGX7sk75fE 1hi7m/0CV4Tflzl0RL4MGmj4WTvH/rovykCuaDlqD/Syv1nvf31NnFvvAa+OJipC Saod8lCQ0R+9bUrWDZHCnmft2hikgYae6wySP50Zdus+GSfA0elPrw1eZwzHmywH +14zpEzCgcyiVMvIUjP3REUhHeb2+3tARVpLpllthO3vastO/dQhRK3yo9Hrpipu g/yhm/0wqqAzFU4z6rtdFA8279etkEzr -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:13 2025 by rpki-client