$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: WVFdQzjdBeEkmn9kCrCr5HKbZF7y49AC78HgcXofcIU= Subject key identifier: 7A:03:AB:CC:F6:34:80:AF:4E:C3:99:A2:A0:4A:DC:6E:B0:F8:55:0F Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 34E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 34D4 Signing time: Thu 18 Sep 2025 15:04:11 +0000 Manifest this update: Thu 18 Sep 2025 15:04:11 +0000 Manifest next update: Thu 25 Sep 2025 15:04:11 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: aRu/ZoyST8p59/jYRg86CvpHjVggP8N8rVz7D9MtkOo=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OVp7PpV4WrIA8CZ/VZbdyu0UkcIERq8sMNiqxbn0hvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Sep 18 15:04:11 2025 GMT Not After : Sep 25 15:04:11 2025 GMT Subject: CN=68cc1f6b-291c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:9e:fa:d1:c0:86:aa:b2:76:f2:80:99:96: 6e:bc:10:f0:26:70:bb:16:59:88:b4:b3:cf:cc:3d: 9a:49:7e:b8:8d:04:08:b1:67:30:22:b7:75:e7:ce: 70:f2:32:84:3c:e3:73:ef:c7:56:ce:89:e9:93:34: d6:be:e4:4b:b5:b1:b2:ba:be:12:25:0e:de:ee:30: a5:c1:04:2d:cb:79:64:49:54:82:01:ca:ad:7a:bf: 94:91:87:6a:c4:01:f0:ce:9f:77:7d:a1:bd:b1:b8: 0d:e0:27:35:69:5e:ed:40:3a:ad:eb:46:9c:ed:19: 64:19:29:9d:9a:2e:bb:68:5b:55:7e:11:f8:05:ac: 53:d7:ab:7f:98:11:c2:f6:94:11:49:21:92:eb:3e: f6:11:cb:cb:08:5a:e5:64:a6:ca:c8:f1:82:cf:b0: fa:0b:05:47:3b:8a:3c:16:ef:03:62:0d:54:c5:fc: a6:52:06:35:a8:4a:37:d1:46:5b:f3:b4:f0:bb:81: 82:52:42:ae:04:46:7a:b3:d1:52:a5:d8:27:f3:aa: b5:dd:fb:49:c1:d4:11:f4:0e:bc:e8:4b:f0:fc:a6: 11:df:7b:da:c2:45:e0:8c:ee:e6:5e:cd:e7:b8:4f: 37:3b:0b:05:24:f6:8c:94:1a:be:12:13:75:e2:d0: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:03:AB:CC:F6:34:80:AF:4E:C3:99:A2:A0:4A:DC:6E:B0:F8:55:0F X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:bb:54:3c:2e:34:9e:da:85:52:6e:eb:c7:9c:0a:99:88:7e: 9e:92:58:a0:7f:2c:60:c9:e4:f2:ea:06:ac:80:0a:a3:41:ad: a4:19:1b:a1:a7:35:7a:bf:43:c9:c9:9e:99:95:85:14:21:af: 17:97:8b:6d:b8:92:ec:4f:82:f2:60:41:f0:39:05:ee:66:8d: 64:71:af:81:0b:57:2a:e1:90:de:68:2c:dd:fc:f0:43:09:c5: 94:35:b2:3c:60:03:4d:9b:e1:ed:f4:78:cb:8c:8f:d2:9f:a7: c6:79:19:6e:14:ef:be:76:64:d6:26:0a:28:8e:1d:8e:f2:1b: ba:b9:f8:ba:57:94:11:3d:70:6b:ce:54:f8:97:0c:f8:17:74: 82:84:02:a1:fb:cd:a6:76:a1:7f:73:c0:ec:02:80:87:85:29: fb:83:2e:06:86:f7:0f:bd:c3:fd:2b:ab:82:f3:37:cc:f8:e3: d0:0d:bf:fe:52:19:8f:5b:4f:a6:a4:69:80:03:70:97:4b:d4: 47:0f:04:64:20:85:81:c1:3b:ac:94:ec:a8:93:55:5e:63:13: c3:d4:82:ca:db:08:04:b1:e3:03:19:18:52:0a:45:2f:0e:c0: c6:22:94:6a:30:7d:6a:b8:d1:d0:4d:9f:41:d7:2b:2a:97:ab: fc:f0:2b:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUwOTE4MTUwNDExWhcNMjUwOTI1MTUwNDExWjAYMRYwFAYD VQQDEw02OGNjMWY2Yi0yOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5ae+tHAhqqydvKAmZZuvBDwJnC7FlmItLPPzD2aSX64jQQIsWcwIrd1585w 8jKEPONz78dWzonpkzTWvuRLtbGyur4SJQ7e7jClwQQty3lkSVSCAcqter+UkYdq xAHwzp93faG9sbgN4Cc1aV7tQDqt60ac7RlkGSmdmi67aFtVfhH4BaxT16t/mBHC 9pQRSSGS6z72EcvLCFrlZKbKyPGCz7D6CwVHO4o8Fu8DYg1UxfymUgY1qEo30UZb 87Twu4GCUkKuBEZ6s9FSpdgn86q13ftJwdQR9A686Evw/KYR33vawkXgjO7mXs3n uE83OwsFJPaMlBq+EhN14tBfmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoDq8z2 NICvTsOZoqBK3G6w+FUPMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARu1Q8LjSe2oVSbuvHnAqZiH6ekligfyxgyeTy6gasgAqjQa2kGRuh pzV6v0PJyZ6ZlYUUIa8Xl4ttuJLsT4LyYEHwOQXuZo1kca+BC1cq4ZDeaCzd/PBD CcWUNbI8YANNm+Ht9HjLjI/Sn6fGeRluFO++dmTWJgoojh2O8hu6ufi6V5QRPXBr zlT4lwz4F3SChAKh+82mdqF/c8DsAoCHhSn7gy4GhvcPvcP9K6uC8zfM+OPQDb/+ UhmPW0+mpGmAA3CXS9RHDwRkIIWBwTuslOyok1VeYxPD1ILK2wgEseMDGRhSCkUv DsDGIpRqMH1quNHQTZ9B1ysql6v88Cs7 -----END CERTIFICATE-----Generated at Fri Sep 19 05:32:30 2025 by rpki-client