$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: uNoKIVpVdxhgtrxELRe7e6ER5kdiW+ErQgbv3IEUqXQ= Subject key identifier: 12:E5:71:5F:9C:05:58:85:15:DE:AA:9F:FF:D5:91:94:3F:43:5D:A0 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A4E Signing time: Mon 04 Aug 2025 19:57:09 +0000 Manifest this update: Mon 04 Aug 2025 19:57:09 +0000 Manifest next update: Mon 11 Aug 2025 19:57:09 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: 2F+5NPs3yhI4gKuGjyubNZJzDFMWphRTZ4UgDaXh6sA=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Aug 4 19:57:09 2025 GMT Not After : Aug 11 19:57:09 2025 GMT Subject: CN=68911095-9a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:ad:b3:31:45:d0:af:f1:b9:ea:41:62:67: fc:db:db:d0:10:41:d4:6c:8c:54:79:f2:b8:4d:b1: 0b:4d:99:6b:7f:db:74:6a:84:ce:84:d0:79:b4:25: 17:b0:55:f8:34:8a:b2:ef:88:c2:46:37:05:bf:52: 1f:82:c2:c5:80:0f:fb:b3:18:da:f7:1f:86:45:dd: 73:59:2b:89:97:16:ce:3d:72:a1:6f:cb:ac:18:1d: 6d:63:b6:2b:95:f6:21:25:b1:c3:4c:14:25:6c:91: c9:4b:ff:8c:91:a1:00:93:ba:d8:03:3d:4f:1e:9c: 60:8d:c6:16:32:22:19:92:e2:7e:9e:37:08:8b:25: 29:a0:05:71:15:91:91:c5:e6:6f:4a:23:da:17:f2: 2d:8b:1a:76:d4:a0:fd:57:9e:23:26:13:95:74:3e: 87:61:74:7e:20:2b:25:c3:69:b7:c6:71:5b:d2:c1: b3:50:61:99:ab:60:bc:8d:df:99:63:0b:b1:5d:e9: c5:92:1e:71:ab:70:20:f2:3b:17:a9:7a:58:cb:f4: 7d:43:c1:ab:f2:34:4a:f3:7e:c2:8b:e2:f2:9f:40: 2d:93:0b:3d:0c:02:5b:b9:e7:38:f4:4c:54:3d:29: 24:36:f4:96:f7:2c:87:36:89:5e:f1:29:38:48:6a: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E5:71:5F:9C:05:58:85:15:DE:AA:9F:FF:D5:91:94:3F:43:5D:A0 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:39:6a:88:d5:6f:1f:a9:68:ad:34:b5:a8:c6:0b:52:55:90: eb:e7:e9:e8:2f:38:22:1b:1e:bc:89:83:bc:86:ec:51:cf:7f: a7:80:95:d4:da:70:91:8c:7a:c3:5a:8b:09:62:43:2a:0b:e0: 9e:62:25:de:54:53:4c:c3:a0:a6:d3:32:4c:71:73:e2:22:d6: 34:5c:37:a1:63:bd:ac:3e:4f:71:b1:e4:35:80:4a:c8:ba:6a: 1c:5d:f4:aa:2b:19:15:fe:28:2c:1c:a1:20:5c:52:39:c3:c3: 01:1d:f4:71:21:8f:d7:d0:ed:23:48:8e:c8:0d:13:ea:46:05: 76:76:74:ec:b2:33:b0:a1:71:ed:bb:a0:72:62:99:f2:38:ac: 27:e9:11:23:ec:f7:3c:9b:d6:9e:53:be:64:23:69:8a:32:9f: b7:c2:51:51:81:89:60:c7:ca:56:25:34:d4:e6:7d:91:e0:f8: 68:88:7a:be:c3:1e:fe:77:fc:2a:45:26:2c:bd:3e:ef:fa:04: 5b:8b:21:d8:de:b9:88:7c:c3:ec:b3:d3:ae:b1:3d:91:f1:88: 65:80:d7:3b:f8:25:f5:2d:5d:8d:df:d1:83:82:92:f5:58:27: 5c:58:7f:96:24:f0:09:71:0b:fb:a0:b8:0a:2f:95:fb:d0:b6: 7d:77:6a:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwODA0MTk1NzA5WhcNMjUwODExMTk1NzA5WjAYMRYwFAYD VQQDEw02ODkxMTA5NS05YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvStszFF0K/xuepBYmf829vQEEHUbIxUefK4TbELTZlrf9t0aoTOhNB5tCUX sFX4NIqy74jCRjcFv1IfgsLFgA/7sxja9x+GRd1zWSuJlxbOPXKhb8usGB1tY7Yr lfYhJbHDTBQlbJHJS/+MkaEAk7rYAz1PHpxgjcYWMiIZkuJ+njcIiyUpoAVxFZGR xeZvSiPaF/Itixp21KD9V54jJhOVdD6HYXR+ICslw2m3xnFb0sGzUGGZq2C8jd+Z YwuxXenFkh5xq3Ag8jsXqXpYy/R9Q8Gr8jRK837Ci+Lyn0Atkws9DAJbuec49ExU PSkkNvSW9yyHNole8Sk4SGpdVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLlcV+c BViFFd6qn//VkZQ/Q12gMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfOWqI1W8fqWitNLWoxgtSVZDr5+noLzgiGx68iYO8huxRz3+ngJXU 2nCRjHrDWosJYkMqC+CeYiXeVFNMw6Cm0zJMcXPiItY0XDehY72sPk9xseQ1gErI umocXfSqKxkV/igsHKEgXFI5w8MBHfRxIY/X0O0jSI7IDRPqRgV2dnTssjOwoXHt u6ByYpnyOKwn6REj7Pc8m9aeU75kI2mKMp+3wlFRgYlgx8pWJTTU5n2R4PhoiHq+ wx7+d/wqRSYsvT7v+gRbiyHY3rmIfMPss9OusT2R8YhlgNc7+CX1LV2N39GDgpL1 WCdcWH+WJPAJcQv7oLgKL5X70LZ9d2q1 -----END CERTIFICATE-----Generated at Wed Aug 6 05:30:11 2025 by rpki-client