$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: o+eFmCHhRBi0I0aUVJC9PM5TYNRWMazPseaPSwdb2ms= Subject key identifier: 9F:F0:DC:CF:4B:93:6A:B0:5F:13:C3:DB:84:3A:E7:72:66:1A:33:FE Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 16E4 Signing time: Thu 18 Sep 2025 16:46:56 +0000 Manifest this update: Thu 18 Sep 2025 16:46:55 +0000 Manifest next update: Thu 25 Sep 2025 16:46:55 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: NVtmOMOVTx0eP2gVtmnZYUdbT1BT08Cgar2DEz60GBw=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5871 (0x16ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Sep 18 16:46:55 2025 GMT Not After : Sep 25 16:46:55 2025 GMT Subject: CN=68cc377f-306e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:68:1a:a5:47:80:0b:9d:37:ae:72:41:24: cf:da:b8:e7:9c:f5:0f:1b:a2:d2:36:17:4d:9a:5d: ba:56:7d:67:fd:1a:27:42:b3:8f:67:ea:ce:b0:74: 92:1b:a9:49:8d:1e:cb:d0:c6:98:c0:ba:d6:30:6c: 88:90:70:26:63:68:c4:f5:2e:18:3c:c5:94:7f:17: a5:36:5c:e9:97:2b:ee:94:6f:95:f9:50:ab:df:a8: 92:21:57:86:c6:f4:de:6a:45:dd:1a:53:e4:7b:47: 65:d2:d3:ac:f5:af:b0:7d:8d:b0:8a:37:5c:92:2d: 3e:cd:0b:fb:b8:b2:64:07:76:11:4f:b0:a4:d4:9e: b1:0d:45:d2:8d:88:b1:cf:c5:8b:a5:41:cd:e3:c8: 79:57:af:d1:aa:40:68:eb:c1:9d:5b:71:08:84:bb: 52:53:b2:74:1f:28:9c:48:e9:b0:5d:c6:95:34:34: 79:11:c2:dc:99:66:67:f5:4e:7e:aa:b8:c0:63:f8: 17:e3:85:ca:60:7f:23:6a:46:71:05:74:5d:4d:5e: da:e1:8a:4f:6e:6a:cb:4e:d5:00:68:bd:a8:a5:3f: 4d:bd:ad:3c:26:76:78:23:bd:a1:8f:3e:17:f2:a2: c3:94:a1:d9:81:45:79:ca:78:13:25:07:03:8d:8d: ce:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:DC:CF:4B:93:6A:B0:5F:13:C3:DB:84:3A:E7:72:66:1A:33:FE X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6f:b8:47:c5:56:3f:68:69:25:0d:d8:59:d0:3a:1a:20:12: 07:5b:8d:2f:4a:1e:b6:75:0b:3e:29:f8:ed:96:1c:fe:31:fa: 7c:53:1c:f0:1d:57:e9:8b:f7:9e:79:74:78:79:29:4b:d9:00: 5b:0d:be:6a:85:dc:bc:62:0e:f0:e1:96:8f:dd:af:f4:a8:47: f7:b6:92:3f:3b:c0:f2:4c:2e:72:9a:99:00:29:42:56:55:9a: e4:40:bf:c6:72:65:90:52:b4:ce:9a:1c:5c:bf:04:2d:c9:ae: f5:5c:18:28:31:f3:d1:28:43:6b:c4:87:99:40:0f:22:d6:07: fc:a9:5f:42:32:95:2d:b4:f3:8e:05:26:e1:7d:c5:c5:cb:97: 7b:cb:a3:07:9a:30:af:dc:5b:e7:ea:10:2c:86:7b:75:ec:4d: 07:49:36:5d:78:9a:71:e1:5d:83:0f:6f:b4:16:5d:c3:89:6e: b6:e7:8e:73:20:a8:d5:d2:63:54:89:b3:bb:fe:ed:86:a5:19: 92:c2:39:88:5b:06:fe:6b:bb:08:2e:00:47:06:74:f3:d4:ca: 39:c7:2e:18:ed:bf:3f:d6:21:59:b5:49:18:0d:7f:d1:8c:04: 94:f1:09:cd:f8:2a:2c:3b:49:2f:b7:86:cf:e3:1a:aa:3d:67: 40:ca:35:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwOTE4MTY0NjU1WhcNMjUwOTI1MTY0NjU1WjAYMRYwFAYD VQQDEw02OGNjMzc3Zi0zMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsJoGqVHgAudN65yQSTP2rjnnPUPG6LSNhdNml26Vn1n/RonQrOPZ+rOsHSS G6lJjR7L0MaYwLrWMGyIkHAmY2jE9S4YPMWUfxelNlzplyvulG+V+VCr36iSIVeG xvTeakXdGlPke0dl0tOs9a+wfY2wijdcki0+zQv7uLJkB3YRT7Ck1J6xDUXSjYix z8WLpUHN48h5V6/RqkBo68GdW3EIhLtSU7J0HyicSOmwXcaVNDR5EcLcmWZn9U5+ qrjAY/gX44XKYH8jakZxBXRdTV7a4YpPbmrLTtUAaL2opT9Nva08JnZ4I72hjz4X 8qLDlKHZgUV5yngTJQcDjY3OXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/w3M9L k2qwXxPD24Q653JmGjP+MB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADb7hHxVY/aGklDdhZ0DoaIBIHW40vSh62dQs+Kfjtlhz+Mfp8Uxzw HVfpi/eeeXR4eSlL2QBbDb5qhdy8Yg7w4ZaP3a/0qEf3tpI/O8DyTC5ympkAKUJW VZrkQL/GcmWQUrTOmhxcvwQtya71XBgoMfPRKENrxIeZQA8i1gf8qV9CMpUttPOO BSbhfcXFy5d7y6MHmjCv3Fvn6hAshnt17E0HSTZdeJpx4V2DD2+0Fl3DiW62545z IKjV0mNUibO7/u2GpRmSwjmIWwb+a7sILgBHBnTz1Mo5xy4Y7b8/1iFZtUkYDX/R jASU8QnN+CosO0kvt4bP4xqqPWdAyjUd -----END CERTIFICATE-----Generated at Fri Sep 19 01:17:42 2025 by rpki-client