$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: SnKj4C+QxdYtRRlrBiflCmMNfEKhij6uZRezBtWMH5s= Subject key identifier: 37:6D:88:36:6D:75:08:96:DD:0F:9A:86:6A:5B:25:86:62:F9:18:B5 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: 94 Signing time: Tue 09 Sep 2025 06:43:25 +0000 Manifest this update: Tue 09 Sep 2025 06:43:25 +0000 Manifest next update: Tue 16 Sep 2025 06:43:25 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: o8vAMZH6g+8ITN8l+em5q3NFHFIix3BWXXotthwcCs4=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: oF9pzHgXgFgT7pclB8+4buU+FpQCxpT9fP80ypai+xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Sep 9 06:43:25 2025 GMT Not After : Sep 16 06:43:25 2025 GMT Subject: CN=68bfcc8d-560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:e8:0e:10:60:ab:67:c8:69:27:60:8a:74: 1a:a0:46:9d:5a:3e:80:af:7a:d6:82:89:51:63:fe: 0f:44:02:3a:f5:42:9d:c9:21:68:f5:d6:0e:79:2e: fe:7f:0e:d4:d4:b2:15:bc:63:5e:ab:fa:09:82:f6: 2c:ff:cb:29:1d:65:7f:84:9f:cb:c7:52:70:c5:e8: fb:a0:85:65:83:26:7a:57:21:62:6e:79:c1:56:e9: 51:18:eb:f5:62:f4:d8:48:b4:a2:1b:7a:76:1b:f2: 45:70:78:49:c4:0a:29:fc:7e:f0:87:b6:51:50:8c: 38:9c:cc:c9:04:b5:3f:2b:5a:fa:fa:cb:10:4f:b6: 3d:c1:40:91:2d:58:f5:4a:8a:3e:e6:2a:7c:0a:8f: a6:71:92:5b:83:bc:46:6f:40:67:a5:c6:a8:bd:cf: b7:05:08:e7:37:8f:d3:0f:74:fe:a2:20:10:9a:3d: 47:b5:57:37:57:d3:5d:73:86:88:60:d1:c3:b4:31: e9:eb:90:70:14:78:ad:e0:74:da:5a:79:af:27:a2: ae:d0:51:a7:13:c2:78:13:5d:7f:5f:09:96:82:3a: bb:f4:ed:b4:24:a1:27:84:ff:b0:1b:2d:de:17:01: 64:64:de:7e:06:ff:27:c5:56:be:90:44:bb:c0:80: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6D:88:36:6D:75:08:96:DD:0F:9A:86:6A:5B:25:86:62:F9:18:B5 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:21:25:78:a0:42:a1:fd:0f:17:57:9d:57:6d:cb:8a:67: 2e:c3:ff:8f:e3:26:43:65:95:7e:dc:67:cb:b0:0d:c8:e0:d2: 87:fe:b3:22:78:e1:c3:98:ff:0a:e6:b7:d8:b9:63:fd:55:eb: 2b:bd:cb:ca:d4:9b:1a:0e:bb:65:a1:ba:20:2e:ac:46:a4:40: dc:03:68:a5:bd:3e:60:2f:92:b0:d6:fd:84:c0:22:51:cc:26: a1:2a:c9:bc:a5:6d:1c:c6:bc:1f:74:b3:21:b0:65:6a:5a:c8: 5b:66:5e:e1:52:cb:11:b0:40:00:c7:28:1a:cc:48:fe:bc:eb: fa:75:e5:81:fd:ec:4b:be:7e:38:39:6a:3c:85:6f:f2:0f:77: 5a:63:77:f3:62:40:7e:02:2a:32:53:51:97:b8:e0:86:e1:86: 58:ea:ce:8d:52:31:d2:ad:b9:19:d4:75:77:34:59:37:9f:be: e2:c4:72:9f:e8:73:7a:f7:3d:9e:a0:f3:13:f6:7a:d8:e6:cb: 9f:10:ee:0d:bc:1a:59:3d:48:28:d1:68:f2:e1:a1:19:96:58: 16:c0:94:40:6f:a3:81:19:7a:77:9c:27:02:29:82:b9:ff:0c: f4:77:6b:16:d0:a7:5e:14:1d:d5:fa:3c:98:a2:6a:35:07:3f: 65:af:b7:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjUwOTA5MDY0MzI1WhcNMjUwOTE2MDY0MzI1WjAYMRYwFAYD VQQDEw02OGJmY2M4ZC01NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7joDhBgq2fIaSdginQaoEadWj6Ar3rWgolRY/4PRAI69UKdySFo9dYOeS7+ fw7U1LIVvGNeq/oJgvYs/8spHWV/hJ/Lx1Jwxej7oIVlgyZ6VyFibnnBVulRGOv1 YvTYSLSiG3p2G/JFcHhJxAop/H7wh7ZRUIw4nMzJBLU/K1r6+ssQT7Y9wUCRLVj1 Soo+5ip8Co+mcZJbg7xGb0Bnpcaovc+3BQjnN4/TD3T+oiAQmj1HtVc3V9Ndc4aI YNHDtDHp65BwFHit4HTaWnmvJ6Ku0FGnE8J4E11/XwmWgjq79O20JKEnhP+wGy3e FwFkZN5+Bv8nxVa+kES7wICdfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdtiDZt dQiW3Q+ahmpbJYZi+Ri1MB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYzyEleKBCof0PF1edV23Limcuw/+P4yZDZZV+3GfLsA3I4NKH/rMi eOHDmP8K5rfYuWP9VesrvcvK1JsaDrtlobogLqxGpEDcA2ilvT5gL5Kw1v2EwCJR zCahKsm8pW0cxrwfdLMhsGVqWshbZl7hUssRsEAAxygazEj+vOv6deWB/exLvn44 OWo8hW/yD3daY3fzYkB+AioyU1GXuOCG4YZY6s6NUjHSrbkZ1HV3NFk3n77ixHKf 6HN69z2eoPMT9nrY5sufEO4NvBpZPUgo0Wjy4aEZllgWwJRAb6OBGXp3nCcCKYK5 /wz0d2sW0KdeFB3V+jyYomo1Bz9lr7d6 -----END CERTIFICATE-----Generated at Tue Sep 9 16:37:26 2025 by rpki-client