$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json) Hash identifier: abi/vYohWKZJwUFOv0XRSkvYDMzSAF2PUiTR957JfxE= Subject key identifier: 10:0E:4D:1A:D9:DA:5D:4D:BB:2A:98:E1:69:DE:DF:2B:C0:03:73:82 Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft Manifest number: 047B Signing time: Wed 05 Nov 2025 00:12:27 +0000 Manifest this update: Wed 05 Nov 2025 00:12:26 +0000 Manifest next update: Wed 12 Nov 2025 00:12:26 +0000 Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: PdFONksdse0BYudJU+nUiSBDMIuFaiP6HxTbJ0b8UXM=) 2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: eK751E7R4LxxFW4h/LYCAzYwLSV3p/y1kJ/HUZuDz6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Validity Not Before: Nov 5 00:12:26 2025 GMT Not After : Nov 12 00:12:26 2025 GMT Subject: CN=690a966a-6668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:29:2a:85:b5:e1:f6:47:bc:c5:1b:a7:03: c0:4b:ce:8d:2a:a3:3c:f1:90:61:ff:c2:69:ca:c8: 94:74:48:21:40:1b:c0:27:5b:9c:1d:12:b6:bf:61: 15:25:15:9a:23:52:f0:14:f9:79:33:61:6e:f7:b6: cb:fb:70:a7:38:2d:c7:c9:01:9b:56:c3:72:48:a4: 95:2f:8a:da:a1:67:58:80:c4:07:3f:85:42:c8:f2: 52:65:94:9f:3d:dc:93:7b:92:2e:c2:0c:8b:0d:7b: 47:c9:60:62:da:8d:67:3e:84:8a:8d:c0:cc:7d:31: a6:01:dc:7b:a7:17:53:5b:68:bc:cb:ea:38:e3:7b: 53:3e:5b:7e:b6:31:1b:14:19:34:d5:38:ea:7d:42: 1e:3d:9d:83:ae:bd:cd:a7:df:fd:b0:1c:19:20:ff: 62:f6:5b:2b:66:ad:8e:d7:86:02:68:8e:1f:1f:04: ba:2e:a9:95:78:6b:38:7f:f0:b7:34:12:34:69:96: c6:3d:b9:a4:6e:75:24:48:b4:08:0d:a5:44:b8:a3: 7a:d8:3b:9d:8a:5f:d2:d9:a6:27:95:d5:41:8e:f5: f1:63:f4:d7:05:9a:21:d9:1f:e6:19:75:8b:4a:33: e1:3b:cf:b6:cf:98:a3:7a:ea:78:36:c8:1c:76:d0: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0E:4D:1A:D9:DA:5D:4D:BB:2A:98:E1:69:DE:DF:2B:C0:03:73:82 X509v3 Authority Key Identifier: keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:53:d5:5b:27:bb:b7:64:b8:dc:c2:07:ab:5a:78:82:9f:a7: 0a:19:19:7d:2c:b9:8d:14:fd:b5:3d:08:68:36:f5:ce:69:f9: ed:b1:fb:3f:a6:bb:4d:f6:89:7d:a6:02:f6:43:85:0c:eb:fa: 9f:9a:ec:d3:2a:b6:0a:07:3a:72:fb:b6:6c:ae:e7:08:39:f0: 11:c2:62:f2:83:98:70:1e:da:c2:07:e3:76:80:a3:2b:62:db: 62:59:ea:6a:6e:95:06:e1:15:5b:14:bd:4d:71:da:3f:98:62: 84:4f:4d:14:ab:01:80:02:3b:2d:a8:72:84:4c:25:ad:4a:ce: b7:19:05:96:82:3a:23:71:84:ac:de:7b:a8:f7:ee:8c:2a:20: 1a:bf:67:f6:23:0d:4e:45:67:38:4c:a2:6a:0a:48:ea:5f:27: 58:20:c8:18:90:1e:c8:ba:cc:85:bc:45:09:40:40:3a:ca:12: 57:b5:55:48:16:85:7c:03:a5:98:ad:d3:fd:16:b7:af:63:4f: ac:5e:ba:af:c3:60:82:04:e9:3e:32:1c:b9:9a:13:1c:6d:86: 86:80:dc:2d:42:a6:8e:e7:61:28:9e:99:c4:df:80:f5:11:ca: 83:04:6a:bf:84:e1:f2:b1:5a:5d:dd:05:cd:35:95:28:e3:9a: a7:b9:f0:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwM0IxMTAvBgNVBAUTKDlGMzU2NjA5NUMwQjBDMDIzMUQwQkI5NjkyNUUwMzg5 RDFDMjZDNTcwHhcNMjUxMTA1MDAxMjI2WhcNMjUxMTEyMDAxMjI2WjAYMRYwFAYD VQQDEw02OTBhOTY2YS02NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyspKoW14fZHvMUbpwPAS86NKqM88ZBh/8JpysiUdEghQBvAJ1ucHRK2v2EV JRWaI1LwFPl5M2Fu97bL+3CnOC3HyQGbVsNySKSVL4raoWdYgMQHP4VCyPJSZZSf PdyTe5IuwgyLDXtHyWBi2o1nPoSKjcDMfTGmAdx7pxdTW2i8y+o443tTPlt+tjEb FBk01TjqfUIePZ2Drr3Np9/9sBwZIP9i9lsrZq2O14YCaI4fHwS6LqmVeGs4f/C3 NBI0aZbGPbmkbnUkSLQIDaVEuKN62Dudil/S2aYnldVBjvXxY/TXBZoh2R/mGXWL SjPhO8+2z5ijeup4NsgcdtD2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAOTRrZ 2l1NuyqY4Wne3yvAA3OCMB8GA1UdIwQYMBaAFJ81ZglcCwwCMdC7lpJeA4nRwmxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDAzQi80QUE3NEI3NDYy REExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERBSXgwTHVXa2w0RGlkSENi RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL256Vm1DVndMREFJeDBMdVdrbDREaWRIQ2JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDAzQi80QUE3NEI3NDYyREExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERB SXgwTHVXa2w0RGlkSENiRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKU9VbJ7u3ZLjcwgerWniCn6cKGRl9LLmNFP21PQhoNvXOafntsfs/ prtN9ol9pgL2Q4UM6/qfmuzTKrYKBzpy+7ZsrucIOfARwmLyg5hwHtrCB+N2gKMr YttiWepqbpUG4RVbFL1Ncdo/mGKET00UqwGAAjstqHKETCWtSs63GQWWgjojcYSs 3nuo9+6MKiAav2f2Iw1ORWc4TKJqCkjqXydYIMgYkB7IusyFvEUJQEA6yhJXtVVI FoV8A6WYrdP9FrevY0+sXrqvw2CCBOk+Mhy5mhMcbYaGgNwtQqaO52EonpnE34D1 EcqDBGq/hOHysVpd3QXNNZUo45qnufA8 -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:24 2025 by rpki-client