$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: 93OjrXYmIEreKcggPVYUzxmqRJ2DxrIx8d1zoHnkEtA= Subject key identifier: DB:1E:D7:91:30:B6:2F:9C:04:74:57:39:34:D1:94:AA:D0:3B:2C:57 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A7D Signing time: Tue 04 Nov 2025 19:41:59 +0000 Manifest this update: Tue 04 Nov 2025 19:41:57 +0000 Manifest next update: Tue 11 Nov 2025 19:41:57 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: Y1XP5xCHEUPjgpT5XWgRBwfGIVzGHjolY7o/0ZF6Rmw=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Nov 4 19:41:57 2025 GMT Not After : Nov 11 19:41:57 2025 GMT Subject: CN=690a5706-9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:74:1a:66:37:d0:c8:02:67:15:a4:2e:96: 7d:35:dd:6a:42:c1:2e:6b:74:67:b5:e4:65:78:74: ba:9e:35:f5:71:fd:51:82:44:e7:82:2b:53:16:0b: 27:ce:a3:65:d9:96:81:63:4e:8e:78:12:cd:e9:c2: 51:f3:3e:34:c2:59:e5:22:14:8c:3f:de:5b:21:6d: dc:63:04:ff:7a:5c:35:88:ad:b3:18:5f:41:37:ea: 8d:0a:93:c5:71:f5:c4:de:c8:96:59:be:b2:49:dc: 89:f5:6a:e9:75:55:49:2a:1f:08:f8:61:2e:61:47: 3c:78:41:23:48:ad:a2:9e:83:e0:10:99:a7:ea:82: fa:3d:d9:dd:bf:07:99:34:fd:cd:b7:96:84:93:c2: 2b:9e:51:cd:99:15:df:d8:3b:c7:5a:94:9c:e4:05: b1:dc:a9:f5:1b:59:d7:cb:49:b8:fd:72:08:59:4f: 29:57:9a:eb:a0:ed:91:e4:ed:47:e7:44:e7:42:fa: 22:69:a1:4e:7c:16:d0:04:28:ad:f8:35:b9:87:e9: cb:ae:5d:bd:65:37:1e:b8:cb:29:b0:42:07:88:68: 0f:67:03:d3:e6:f8:84:9a:a6:81:a1:63:cf:4f:74: 2f:29:ca:7d:3f:79:38:33:7d:87:17:fa:a6:77:ef: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1E:D7:91:30:B6:2F:9C:04:74:57:39:34:D1:94:AA:D0:3B:2C:57 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:2b:81:45:17:7a:bc:ad:47:37:23:ce:85:aa:9a:0e:22:d5: 04:a7:e7:96:8d:b0:f9:6c:17:ee:44:57:c0:eb:eb:67:d3:04: 9f:e7:56:da:bc:50:fd:38:cf:87:94:a9:89:ac:19:44:09:cc: 6a:17:4b:cc:4a:ac:77:55:b6:67:f8:bd:2b:df:4b:7d:3f:72: 26:a3:1f:04:4b:79:f0:d9:82:d9:d8:a0:2f:93:2b:33:33:13: 54:2a:84:7d:af:81:27:fc:b5:f5:27:4c:75:c2:8c:d6:a6:12: 91:46:99:8e:b4:2c:d6:43:2f:22:58:f1:71:3b:ec:2e:d2:d4: a9:8d:8b:bb:e3:e1:15:81:8c:bf:1e:ab:6b:8e:7f:54:5b:74: c4:ea:56:4c:58:c5:c3:d7:16:a5:3d:77:85:63:73:e0:18:3c: b1:b5:93:bc:77:5a:97:64:6b:cc:74:60:93:bf:e5:f4:4c:c6: 5c:43:db:a5:76:86:8c:56:2b:1d:dd:61:c8:9d:47:f2:80:b5: 1a:ec:4e:74:11:25:a1:15:1c:35:55:b8:5a:43:7f:a0:42:86: 1e:86:97:e9:95:a5:e6:11:a2:a1:3b:b9:bb:b5:76:9b:ab:4a: 77:8d:40:99:e5:b2:20:56:1e:43:7a:1f:27:96:fc:25:6e:93: 7b:4d:59:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUxMTA0MTk0MTU3WhcNMjUxMTExMTk0MTU3WjAYMRYwFAYD VQQDEw02OTBhNTcwNi05YjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eB0GmY30MgCZxWkLpZ9Nd1qQsEua3RnteRleHS6njX1cf1RgkTngitTFgsn zqNl2ZaBY06OeBLN6cJR8z40wlnlIhSMP95bIW3cYwT/elw1iK2zGF9BN+qNCpPF cfXE3siWWb6ySdyJ9WrpdVVJKh8I+GEuYUc8eEEjSK2inoPgEJmn6oL6PdndvweZ NP3Nt5aEk8IrnlHNmRXf2DvHWpSc5AWx3Kn1G1nXy0m4/XIIWU8pV5rroO2R5O1H 50TnQvoiaaFOfBbQBCit+DW5h+nLrl29ZTceuMspsEIHiGgPZwPT5viEmqaBoWPP T3QvKcp9P3k4M32HF/qmd++9KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNse15Ew ti+cBHRXOTTRlKrQOyxXMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCK4FFF3q8rUc3I86FqpoOItUEp+eWjbD5bBfuRFfA6+tn0wSf51ba vFD9OM+HlKmJrBlECcxqF0vMSqx3VbZn+L0r30t9P3Imox8ES3nw2YLZ2KAvkysz MxNUKoR9r4En/LX1J0x1wozWphKRRpmOtCzWQy8iWPFxO+wu0tSpjYu74+EVgYy/ Hqtrjn9UW3TE6lZMWMXD1xalPXeFY3PgGDyxtZO8d1qXZGvMdGCTv+X0TMZcQ9ul doaMVisd3WHInUfygLUa7E50ESWhFRw1VbhaQ3+gQoYehpfplaXmEaKhO7m7tXab q0p3jUCZ5bIgVh5Deh8nlvwlbpN7TVk3 -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:02 2025 by rpki-client