$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: J4o1tV4kXYxLhhXwShhb+ZsnH0/uFF4hcnTu9g3NLDc= Subject key identifier: FA:4E:B9:D9:DF:D8:A8:AB:01:71:53:3C:FC:85:0C:38:2D:B0:14:34 Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 1706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 16FB Signing time: Sun 02 Nov 2025 16:38:43 +0000 Manifest this update: Sun 02 Nov 2025 16:38:42 +0000 Manifest next update: Sun 09 Nov 2025 16:38:42 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: G/MORuhvgveSVAy+CjoFUlA+PJKtarjLadiynmDmDmY=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5894 (0x1706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Nov 2 16:38:42 2025 GMT Not After : Nov 9 16:38:42 2025 GMT Subject: CN=69078912-b3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:93:25:52:db:f2:e1:9c:8e:6e:7e:59:24: b1:47:c2:b4:30:5d:ae:51:af:f9:53:e6:a4:2b:91: 65:67:01:8f:38:1e:37:d4:5e:37:1a:7b:d0:8c:67: 75:3c:49:43:2d:e5:57:ec:7b:4c:00:cd:1b:9e:2d: 4c:0d:ba:77:18:6f:cf:a6:4f:24:a1:c6:87:88:4d: 2b:c0:9d:bf:17:9e:ad:17:84:9b:2a:7a:27:15:99: e6:96:dc:af:00:44:96:6e:cd:a7:6a:05:63:89:a2: bf:c0:ad:7a:ab:8c:b6:93:5e:a2:83:e8:31:c2:7b: a0:c1:ca:78:cc:79:c9:64:92:67:9d:23:b1:a3:5c: bf:9c:93:c1:97:c5:18:d7:14:67:20:81:1c:51:a8: fc:66:9a:12:2c:41:ef:1c:4d:9b:be:24:36:49:75: 6f:55:71:83:64:f2:30:7b:f3:9b:26:b4:4d:75:74: 66:dd:e3:d2:8b:72:7a:71:03:9a:34:ca:b4:49:8e: 49:73:74:b0:15:d6:9d:c3:83:8c:b5:a1:89:df:91: 13:db:18:66:a9:99:9e:ad:f6:b8:e8:70:60:12:99: 48:77:f9:04:55:e8:e5:98:a0:e2:f5:eb:05:9f:f4: 2f:6f:83:28:c5:e5:b2:42:5e:9a:e3:eb:f3:92:41: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4E:B9:D9:DF:D8:A8:AB:01:71:53:3C:FC:85:0C:38:2D:B0:14:34 X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:eb:51:b5:9e:52:7f:53:e6:2e:8b:ee:c3:1c:1f:fd:97:e5: c8:2c:12:d4:89:47:16:1f:86:0f:de:be:c1:df:cb:13:fa:dd: ac:f4:b1:4a:c7:fa:62:fd:05:3b:13:13:55:6c:b8:b3:10:b7: 6c:60:93:56:46:b2:a7:45:b1:e8:26:9a:44:2b:67:54:78:3e: 6c:6a:17:1e:59:f6:89:f2:73:c9:13:99:db:fc:f5:04:b0:b8: af:6c:b7:d1:e1:6c:7e:b8:8b:df:5d:30:f7:93:64:dc:d6:5a: 30:01:b9:ce:54:65:a1:e9:58:b5:c4:d3:1d:da:ff:3e:08:5b: 28:8f:8e:e5:e8:20:ef:06:83:f5:63:b1:d2:41:9e:8f:5c:39: fa:e3:51:e2:f4:7a:91:5e:c3:7a:e8:11:70:5a:5f:a7:df:ab: 60:57:f0:dc:21:97:1e:2e:d0:3e:93:09:83:60:8e:79:fb:d4: 49:31:e8:90:e5:75:09:94:5c:13:0c:37:ea:30:3c:98:87:f7: b4:fd:3c:91:76:29:69:0b:25:d5:b2:f2:1d:c9:25:01:32:ad: 45:15:f2:67:88:b5:04:e0:4c:cf:ce:69:1d:29:72:b7:1e:2c: 47:12:a4:35:7a:b9:ed:97:5c:f3:a9:7e:10:6a:22:28:72:e0: 47:8f:0f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUxMTAyMTYzODQyWhcNMjUxMTA5MTYzODQyWjAYMRYwFAYD VQQDEw02OTA3ODkxMi1iM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfmTJVLb8uGcjm5+WSSxR8K0MF2uUa/5U+akK5FlZwGPOB431F43GnvQjGd1 PElDLeVX7HtMAM0bni1MDbp3GG/Ppk8kocaHiE0rwJ2/F56tF4SbKnonFZnmltyv AESWbs2nagVjiaK/wK16q4y2k16ig+gxwnugwcp4zHnJZJJnnSOxo1y/nJPBl8UY 1xRnIIEcUaj8ZpoSLEHvHE2bviQ2SXVvVXGDZPIwe/ObJrRNdXRm3ePSi3J6cQOa NMq0SY5Jc3SwFdadw4OMtaGJ35ET2xhmqZmerfa46HBgEplId/kEVejlmKDi9esF n/Qvb4MoxeWyQl6a4+vzkkEVwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpOudnf 2KirAXFTPPyFDDgtsBQ0MB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk61G1nlJ/U+Yui+7DHB/9l+XILBLUiUcWH4YP3r7B38sT+t2s9LFK x/pi/QU7ExNVbLizELdsYJNWRrKnRbHoJppEK2dUeD5sahceWfaJ8nPJE5nb/PUE sLivbLfR4Wx+uIvfXTD3k2Tc1lowAbnOVGWh6Vi1xNMd2v8+CFsoj47l6CDvBoP1 Y7HSQZ6PXDn641Hi9HqRXsN66BFwWl+n36tgV/DcIZceLtA+kwmDYI55+9RJMeiQ 5XUJlFwTDDfqMDyYh/e0/TyRdilpCyXVsvIdySUBMq1FFfJniLUE4EzPzmkdKXK3 HixHEqQ1erntl1zzqX4QaiIocuBHjw9Y -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:34 2025 by rpki-client