$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: /lG2Ozdtavu/dEUccTiGdWsCe6rsXb5MaNzBhIzMbcA= Subject key identifier: 72:BB:39:EE:03:73:19:B0:A8:B0:0E:6F:51:28:35:BB:B4:0D:94:10 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: 0132 Signing time: Wed 05 Nov 2025 04:54:13 +0000 Manifest this update: Wed 05 Nov 2025 04:54:12 +0000 Manifest next update: Wed 12 Nov 2025 04:54:12 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: T2E1x7AxxcyZ+Z3idIxNBZFPemvPls+ZZma3a+VbcYE=) 2: F54804E6AB7F11F0B2EF8142C4F9AE02.roa (hash: NPhAmWHU5O43Kq855O647EcbzZVgTafr5vhWlb7SK88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Nov 5 04:54:12 2025 GMT Not After : Nov 12 04:54:12 2025 GMT Subject: CN=690ad875-ec91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:77:fa:c3:39:f1:72:81:a1:7b:7c:5b:e8: b4:89:da:0f:52:eb:03:b4:54:d4:6f:48:20:c5:89: 60:d7:c7:ba:07:28:a0:d4:86:27:72:60:e7:aa:22: 40:65:cc:3a:07:99:2d:b9:72:da:3f:5e:9d:f9:90: 40:c0:54:11:89:34:12:ec:c4:f2:ce:8b:a1:6e:92: a9:0a:e9:e6:b2:e5:76:ec:7e:4d:16:4e:69:eb:9f: ba:8f:58:6a:11:7a:e4:84:91:df:a6:07:93:57:43: 53:08:cd:4e:c2:de:73:08:56:56:88:e7:3c:ee:de: 81:50:73:24:2f:0d:fd:52:a3:14:e8:1f:df:24:3b: 94:80:7d:04:a6:c7:d6:14:57:77:95:13:8b:97:fc: 44:3d:f3:d1:8b:c2:e4:35:5d:46:e8:d9:2d:5c:d7: 16:5c:6e:47:db:b2:12:eb:45:f8:c5:27:0d:60:83: 7d:b2:31:17:77:ec:6f:7a:07:ad:b8:d5:e5:56:bc: a3:d1:79:d5:b6:16:ee:98:f4:4c:fd:5d:ab:84:71: 0b:66:42:c1:24:4a:db:31:70:d6:e3:04:47:61:74: 76:6b:fa:f5:0f:53:1a:d9:79:d0:9b:b5:2d:b0:18: 0b:65:d9:3e:38:35:c6:ef:2a:47:79:b2:4d:62:64: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BB:39:EE:03:73:19:B0:A8:B0:0E:6F:51:28:35:BB:B4:0D:94:10 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:25:6e:02:b6:c6:b9:29:e7:bc:11:1c:9f:55:eb:02:93:7d: db:0b:c7:c5:8a:f9:ff:cc:15:27:0d:6b:47:f2:3b:aa:2f:86: f5:b3:25:46:66:7c:47:05:90:07:e9:46:0b:c7:97:99:47:27: b0:f8:dc:59:71:5f:ef:42:ff:1b:3f:48:9f:3a:a4:23:71:a9: 69:a5:ea:52:0f:3d:a2:9a:25:12:96:d1:95:22:95:cc:ed:79: 32:4b:41:70:33:80:7b:78:a3:1a:8c:b2:33:29:d6:8f:b9:4b: 59:e3:99:2d:77:70:70:54:48:9d:32:30:3b:e0:16:df:b6:72: 2c:36:ce:0f:e4:42:b3:b5:4f:8b:7e:02:b6:29:be:02:cb:0f: 44:7c:39:e3:62:18:00:1a:01:46:1e:13:d6:4d:6d:e2:03:f8: 19:24:94:48:be:6f:f6:a8:70:ec:23:a2:22:2f:e1:52:a4:d1: 44:ce:7f:0f:17:ca:b7:b6:6d:e1:c8:91:83:66:c0:21:49:93: 00:3a:19:18:df:90:29:65:83:44:6d:da:5e:48:11:b7:39:73: 26:2f:0d:59:6e:54:e4:95:77:ee:5a:cd:01:fe:8e:c4:09:29: 21:82:36:6c:3c:3e:1e:2e:ee:11:6b:b3:7d:49:72:b9:5d:34: eb:f7:3b:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUxMTA1MDQ1NDEyWhcNMjUxMTEyMDQ1NDEyWjAYMRYwFAYD VQQDEw02OTBhZDg3NS1lYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwll3+sM58XKBoXt8W+i0idoPUusDtFTUb0ggxYlg18e6Byig1IYncmDnqiJA Zcw6B5ktuXLaP16d+ZBAwFQRiTQS7MTyzouhbpKpCunmsuV27H5NFk5p65+6j1hq EXrkhJHfpgeTV0NTCM1Owt5zCFZWiOc87t6BUHMkLw39UqMU6B/fJDuUgH0EpsfW FFd3lROLl/xEPfPRi8LkNV1G6NktXNcWXG5H27IS60X4xScNYIN9sjEXd+xveget uNXlVryj0XnVthbumPRM/V2rhHELZkLBJErbMXDW4wRHYXR2a/r1D1Ma2XnQm7Ut sBgLZdk+ODXG7ypHebJNYmRu3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK7Oe4D cxmwqLAOb1EoNbu0DZQQMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xP OUwzZU45eW9rTkJGR1dldXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxJW4Ctsa5Kee8ERyfVesCk33bC8fFivn/zBUnDWtH8juqL4b1syVG ZnxHBZAH6UYLx5eZRyew+NxZcV/vQv8bP0ifOqQjcalppepSDz2imiUSltGVIpXM 7XkyS0FwM4B7eKMajLIzKdaPuUtZ45ktd3BwVEidMjA74BbftnIsNs4P5EKztU+L fgK2Kb4Cyw9EfDnjYhgAGgFGHhPWTW3iA/gZJJRIvm/2qHDsI6IiL+FSpNFEzn8P F8q3tm3hyJGDZsAhSZMAOhkY35ApZYNEbdpeSBG3OXMmLw1ZblTklXfuWs0B/o7E CSkhgjZsPD4eLu4Ra7N9SXK5XTTr9zsc -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:32 2025 by rpki-client